Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
File: XWU9B97R6Nf08uoEvTaELFsS8V4.mft (raw, json)
Hash identifier: dP2Yutg4eeQpC/Cna7iWPEWsG7xf5AE766o+YiL2h4c=
Subject key identifier: 25:E5:81:82:DF:7E:AF:35:F8:09:91:36:AB:6F:DB:33:71:59:27:D6
Authority key identifier: 5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E
Certificate issuer: /CN=5d653d07ded1e8d7f4f2ea04bd36842c5b12f15e
Certificate serial: 0194BC731ECEEDB7CEDD4A940666F700E703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
Manifest number: 0C52
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: XWU9B97R6Nf08uoEvTaELFsS8V4.crl (hash: cF2blZPSv4ljny8rpsiTxSkLUpCiXpGfvDGk8Owse20=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1e:ce:ed:b7:ce:dd:4a:94:06:66:f7:00:e7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d653d07ded1e8d7f4f2ea04bd36842c5b12f15e
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=25e58182df7eaf35f8099136ab6fdb33715927d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:33:ec:b6:96:6d:ef:0f:83:83:7e:7e:ab:86:
a2:4b:04:3a:f3:23:ca:88:3a:95:2f:01:d7:6b:7b:
7c:be:52:d8:d5:38:50:6a:85:c4:82:fb:09:0b:d5:
eb:71:05:69:6f:16:f4:a5:fd:54:b2:36:70:23:7e:
27:d2:61:42:c4:10:23:89:a6:07:2c:20:74:f1:7c:
21:55:98:5c:07:4a:3b:08:13:d2:57:54:ed:f0:24:
ea:31:c6:ca:2f:27:f6:29:f1:25:b2:6c:a5:0d:ba:
23:bc:25:ac:79:4f:4d:4d:35:6f:39:e0:5f:29:d6:
ec:42:69:46:d9:06:7d:6f:6d:97:33:fe:38:93:2d:
e2:20:92:4f:a3:74:83:e4:99:63:d2:a0:cb:6a:ae:
0a:16:0e:f6:33:9e:e8:8f:e3:5b:00:48:33:3d:e8:
8a:ff:3c:19:e0:f1:82:a9:30:f0:93:e8:fb:16:46:
6a:80:33:9c:05:0b:70:4a:15:a6:17:94:4f:24:82:
e0:50:2e:3c:75:5d:8e:0c:a7:8b:cb:0e:7b:5e:97:
fd:bc:7a:5f:62:a3:b9:8e:8c:96:80:2c:b1:ad:e5:
0d:85:33:55:48:d0:55:57:91:8e:fb:64:55:81:d5:
e5:85:08:95:00:4f:d7:10:a2:8a:a7:1d:3d:27:4b:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E5:81:82:DF:7E:AF:35:F8:09:91:36:AB:6F:DB:33:71:59:27:D6
X509v3 Authority Key Identifier:
keyid:5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d6:0a:a2:4e:3c:8a:18:d3:e4:10:80:a8:29:bf:af:cb:72:
ee:64:10:79:5e:41:5e:33:c2:84:df:23:43:00:80:64:58:0c:
30:be:cc:d3:b1:d2:d1:ef:d1:bd:39:38:1d:60:75:23:cf:19:
9a:82:0c:51:82:0f:f4:8a:46:ed:c9:42:76:28:e6:5c:db:a0:
d2:84:64:25:b9:7f:52:f2:84:2d:c4:91:13:e2:7a:a9:39:c4:
01:19:dd:27:5b:20:89:37:15:de:5c:e7:1c:2c:a8:fb:c7:f0:
71:e9:d7:13:44:fb:b3:2e:56:60:8b:e8:2c:f1:55:49:d8:f9:
99:07:cd:cf:73:b0:b3:cf:f9:e4:de:b6:b0:39:21:40:5e:54:
b8:ae:5c:45:b2:08:2d:d9:fa:d0:1b:b8:12:1f:5e:31:ae:8e:
32:41:52:23:14:7d:8e:1a:4a:3e:c9:35:62:ad:0a:f3:ef:b5:
2e:c2:af:4a:2e:c0:37:77:da:25:de:e1:b6:ab:a9:0f:1e:39:
a4:44:25:30:12:4a:1d:ba:1e:60:b2:bb:10:b8:79:5c:16:ec:
43:ff:c1:6e:27:16:5e:f0:ee:45:cb:00:4d:7d:55:01:e0:56:
10:4c:15:2c:a9:7e:42:4f:69:ed:1a:76:9b:e8:f9:0a:2a:bc:
f7:c7:28:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cx7O7bfO3UqUBmb3AOcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNjUzZDA3ZGVkMWU4ZDdmNGYyZWEwNGJkMzY4NDJjNWIx
MmYxNWUwHhcNMjUwMTMxMTMwMDQ4WhcNMjUwMjAxMTMwMDQ4WjAzMTEwLwYDVQQD
EygyNWU1ODE4MmRmN2VhZjM1ZjgwOTkxMzZhYjZmZGIzMzcxNTkyN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zPstpZt7w+Dg35+q4aiSwQ68yPK
iDqVLwHXa3t8vlLY1ThQaoXEgvsJC9XrcQVpbxb0pf1UsjZwI34n0mFCxBAjiaYH
LCB08XwhVZhcB0o7CBPSV1Tt8CTqMcbKLyf2KfElsmylDbojvCWseU9NTTVvOeBf
KdbsQmlG2QZ9b22XM/44ky3iIJJPo3SD5Jlj0qDLaq4KFg72M57oj+NbAEgzPeiK
/zwZ4PGCqTDwk+j7FkZqgDOcBQtwShWmF5RPJILgUC48dV2ODKeLyw57Xpf9vHpf
YqO5joyWgCyxreUNhTNVSNBVV5GO+2RVgdXlhQiVAE/XEKKKpx09J0vmNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXlgYLffq81+AmRNqtv2zNxWSfWMB8GA1UdIwQY
MBaAFF1lPQfe0ejX9PLqBL02hCxbEvFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdVOUI5N1I2TmYwOHVvRXZUYUVMRnNTOFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hMDQ3NWYtY2E5Ny00YjE2LTk2ZGIt
MjE0NWNhNzVlMzgzLzEvWFdVOUI5N1I2TmYwOHVvRXZUYUVMRnNTOFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hMDQ3NWYtY2E5Ny00YjE2LTk2ZGItMjE0NWNhNzVlMzgz
LzEvWFdVOUI5N1I2TmYwOHVvRXZUYUVMRnNTOFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdYKok48
ihjT5BCAqCm/r8ty7mQQeV5BXjPChN8jQwCAZFgMML7M07HS0e/RvTk4HWB1I88Z
moIMUYIP9IpG7clCdijmXNug0oRkJbl/UvKELcSRE+J6qTnEARndJ1sgiTcV3lzn
HCyo+8fwcenXE0T7sy5WYIvoLPFVSdj5mQfNz3Ows8/55N62sDkhQF5UuK5cRbII
Ldn60Bu4Eh9eMa6OMkFSIxR9jhpKPsk1Yq0K8++1LsKvSi7AN3faJd7htqupDx45
pEQlMBJKHboeYLK7ELh5XBbsQ//BbicWXvDuRcsATX1VAeBWEEwVLKl+Qk9p7Rp2
m+j5Ciq898coNQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:07 2025 by rpki-client