Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
File: xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft (raw, json)
Hash identifier: AHdTWrExLRQ/wYNXJLVpNJ1YgsivBLmbSYIZd212lGg=
Subject key identifier: CA:FB:99:55:6A:62:A8:E3:EF:19:CA:C8:72:45:7E:36:D5:18:21:1E
Authority key identifier: C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
Certificate issuer: /CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Certificate serial: 0194BCE0DBAA8638E9139EB7139A3A7E0B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
Manifest number: 0213
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: SGkYily7UQPusAexDOf3Pto8qlU.roa (hash: suweJqoDq78riZx1pHsROfmVS4S86mc1JzDxd3RsgQs=)
2: xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl (hash: DB3LSo00cKxGj7NZNOoldf/dxVYvc7zvSjHfij8bOms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:db:aa:86:38:e9:13:9e:b7:13:9a:3a:7e:0b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=cafb99556a62a8e3ef19cac872457e36d518211e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:de:ef:86:a2:ae:a5:a1:7c:3d:82:22:ce:70:
43:7d:28:91:f8:93:e0:87:26:78:ae:9a:ec:05:2c:
1a:0e:85:3e:33:a8:8c:7e:84:1b:4e:01:d5:ab:cb:
01:1f:4f:8d:db:20:5b:08:ae:a4:16:4b:dd:f4:58:
aa:d3:51:b9:9e:9e:b0:5c:67:47:a8:e0:a7:22:30:
64:ec:8c:9c:0c:98:43:57:db:4c:c3:05:bd:7b:38:
07:8a:a9:5d:df:74:fa:c8:6a:b3:c1:7a:c5:1f:f3:
a3:48:38:e6:c7:db:e1:aa:64:47:2b:02:72:2f:55:
94:74:0a:ea:ee:1b:03:e6:85:77:08:55:8e:d2:79:
44:74:ee:f6:f8:6c:8c:55:5a:e1:fd:95:ef:00:67:
bb:89:e4:9f:11:48:c4:32:67:53:1a:e7:2e:11:70:
70:0f:d7:fc:bb:65:52:e0:b7:d7:51:ee:3d:ed:a1:
2e:59:b2:70:2f:3e:03:ae:6f:61:fb:f3:f2:bd:34:
48:24:c5:7c:f6:b5:f0:a8:72:7e:7c:a9:13:e0:9c:
90:67:31:9f:78:57:43:a7:68:17:86:35:5f:4b:22:
ec:72:f6:40:15:af:f7:5c:1b:7c:4e:58:e9:35:95:
93:04:54:8c:d8:1c:1a:f7:ca:c3:a2:57:36:32:4a:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FB:99:55:6A:62:A8:E3:EF:19:CA:C8:72:45:7E:36:D5:18:21:1E
X509v3 Authority Key Identifier:
keyid:C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4f:51:5e:dd:34:c4:27:09:b0:1d:ab:a6:d7:62:d4:d0:f3:
c3:32:12:39:c3:11:47:ef:d1:63:14:e7:20:3e:b9:75:bb:b5:
59:bd:d2:ef:d1:90:37:64:3c:4f:28:55:e8:1b:5b:04:bf:e5:
17:ae:46:e3:fb:4e:11:a1:03:4e:d0:76:07:66:69:fa:c6:7b:
5b:67:6e:70:c1:46:6c:da:19:47:2b:8d:33:52:61:53:68:c7:
1a:39:9b:ea:ad:da:33:0a:b0:7a:ec:dc:a5:36:75:67:eb:44:
4a:06:4f:53:08:c3:bb:fd:36:6b:0e:1e:49:d5:c5:7b:98:6e:
5d:69:6f:74:70:26:2c:fc:f7:4f:4f:07:a0:ac:8e:c5:62:ee:
6d:eb:dc:67:96:52:f7:05:a0:d9:95:57:2a:78:db:f0:75:4e:
82:75:d0:c0:c4:d9:bf:94:3c:97:2d:37:9a:5f:6b:5c:2c:8d:
a4:56:86:04:74:80:17:1f:8d:55:13:b4:5d:6e:80:28:cf:76:
a7:08:7f:71:e8:74:3f:f8:3b:69:2f:75:26:6f:2a:cf:46:06:
ba:00:5a:5e:0b:8d:37:a4:b2:eb:26:1e:86:d7:5e:01:58:ca:
56:9b:de:29:10:d1:f4:ff:25:1f:46:ed:69:bc:8f:7d:80:51:
4a:24:59:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84NuqhjjpE563E5o6fgsoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YTBmMzExMDk4NGNjZmJmNTI5OTgwYjZkNDE2ZGRkNGUx
YTg4MjUwHhcNMjUwMTMxMTUwMDQwWhcNMjUwMjAxMTUwMDQwWjAzMTEwLwYDVQQD
EyhjYWZiOTk1NTZhNjJhOGUzZWYxOWNhYzg3MjQ1N2UzNmQ1MTgyMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd7vhqKupaF8PYIiznBDfSiR+JPg
hyZ4rprsBSwaDoU+M6iMfoQbTgHVq8sBH0+N2yBbCK6kFkvd9Fiq01G5np6wXGdH
qOCnIjBk7IycDJhDV9tMwwW9ezgHiqld33T6yGqzwXrFH/OjSDjmx9vhqmRHKwJy
L1WUdArq7hsD5oV3CFWO0nlEdO72+GyMVVrh/ZXvAGe7ieSfEUjEMmdTGucuEXBw
D9f8u2VS4LfXUe497aEuWbJwLz4Drm9h+/PyvTRIJMV89rXwqHJ+fKkT4JyQZzGf
eFdDp2gXhjVfSyLscvZAFa/3XBt8TljpNZWTBFSM2Bwa98rDolc2MkqpSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMr7mVVqYqjj7xnKyHJFfjbVGCEeMB8GA1UdIwQY
MBaAFMSg8xEJhMz79SmYC21Bbd1OGoglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hNmM1ZjYtNjA0Zi00Mzk5LTk0NDMt
ZDEyYTkwYmY1MDJlLzEveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hNmM1ZjYtNjA0Zi00Mzk5LTk0NDMtZDEyYTkwYmY1MDJl
LzEveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADU9RXt00
xCcJsB2rptdi1NDzwzISOcMRR+/RYxTnID65dbu1Wb3S79GQN2Q8TyhV6BtbBL/l
F65G4/tOEaEDTtB2B2Zp+sZ7W2ducMFGbNoZRyuNM1JhU2jHGjmb6q3aMwqweuzc
pTZ1Z+tESgZPUwjDu/02aw4eSdXFe5huXWlvdHAmLPz3T08HoKyOxWLubevcZ5ZS
9wWg2ZVXKnjb8HVOgnXQwMTZv5Q8ly03ml9rXCyNpFaGBHSAFx+NVRO0XW6AKM92
pwh/ceh0P/g7aS91Jm8qz0YGugBaXguNN6Sy6yYehtdeAVjKVpveKRDR9P8lH0bt
abyPfYBRSiRZJQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:16:27 2025 by rpki-client