Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
File: Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft (raw, json)
Hash identifier: 5O0L1Fsvrz2zkn8pvBz8c6VC/5ZXtjm2Mj5KFZVbs7w=
Subject key identifier: 5F:40:C6:8C:D9:F3:7F:B6:71:64:50:0C:F9:3B:F7:27:BF:63:22:75
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial: 0194BC049DBA6599424C6AD5D6F552CCF710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:06 +0000
Manifest this update: Fri 31 Jan 2025 11:00:06 +0000
Manifest next update: Sat 01 Feb 2025 11:00:06 +0000
Files and hashes: 1: B9inWc_Zru3DBQYoTCckNvJAJjc.roa (hash: rR3/vKr9FiP0LIExuGsty/9oTkiBHkZoBOxEJZQ25PU=)
2: N2iXQzwnJ7HrnDOcVCjZn3aCcVw.roa (hash: YJwpPg1gpuiDf+AucM/2eZ40ZoPeyXC6eibq/R/5usA=)
3: Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl (hash: 0aV3+LqlML4wuzOT6KJm9v5sEmzz21ioo0z3gTxDAK8=)
4: fXCcgUSD-6HNgkjQxM90O6lfJzY.roa (hash: hPPYSOb/+jw/H4XCWA1NGkrCD/90gdTOvYWg/h1cmfU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:9d:ba:65:99:42:4c:6a:d5:d6:f5:52:cc:f7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Validity
Not Before: Jan 31 11:00:06 2025 GMT
Not After : Feb 1 11:00:06 2025 GMT
Subject: CN=5f40c68cd9f37fb67164500cf93bf727bf632275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:e1:a1:57:c3:f2:86:7c:42:fb:eb:91:85:
77:3e:96:09:53:5f:e9:4f:10:f9:2e:fd:63:60:01:
c1:d0:24:90:41:11:8f:79:8a:53:5f:89:4d:ed:cc:
f7:f3:e7:d2:7f:49:21:85:36:41:bb:32:61:83:43:
cf:18:46:4e:65:a0:29:3d:65:48:49:4e:71:09:ee:
44:64:b2:8d:b0:76:bd:f9:5c:6d:e9:8a:8a:9b:62:
7b:a9:75:54:d5:54:6d:5c:21:60:4e:f2:25:e8:de:
e0:e0:bf:c7:a2:b6:98:47:d4:5e:c7:ba:f7:68:c2:
5f:5e:33:27:0d:a4:3e:8c:1f:52:f5:7f:97:37:38:
6e:a0:14:ed:aa:fd:df:4d:6b:7b:46:c8:60:1a:98:
91:23:9c:57:b2:da:e8:8b:fd:57:08:29:db:01:08:
9a:25:a9:22:72:3c:b1:72:86:f2:03:7b:21:a2:9e:
ac:76:78:54:60:a4:e8:ec:0f:96:53:1a:32:66:69:
99:c9:1e:58:d8:c8:0c:b0:d0:83:8e:bf:02:c9:cc:
f0:65:fc:f6:ce:09:44:5a:a2:55:ec:3f:4f:55:45:
db:5e:b6:ac:93:c9:54:39:7a:51:ed:d1:14:e9:e1:
c3:85:06:cb:35:e3:75:c0:b3:12:b5:cb:36:e8:23:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:40:C6:8C:D9:F3:7F:B6:71:64:50:0C:F9:3B:F7:27:BF:63:22:75
X509v3 Authority Key Identifier:
keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f2:53:01:db:2a:06:b7:68:62:0e:f5:86:91:af:e5:6c:2b:
a6:5f:3c:54:6f:98:0b:61:62:a5:55:60:f9:02:a4:8c:94:a3:
4d:e1:c3:9f:94:86:ed:2e:74:04:35:b7:99:f0:fa:1c:8d:89:
f1:18:c6:15:65:d8:1c:7d:fa:64:90:21:fc:f1:d1:e2:c8:1a:
ff:4a:96:e0:41:87:f5:33:bc:f8:e6:61:d6:67:e6:b3:1f:ec:
72:46:fa:cd:d0:26:df:55:9a:29:f2:30:a1:dc:71:84:59:af:
cf:0b:29:4d:f4:4d:32:ac:0d:82:52:f8:45:e0:4f:ae:9f:c8:
65:7b:20:8a:0d:b7:8f:ee:64:da:f3:18:a2:be:f6:9b:d6:b7:
c7:3c:70:9d:63:1a:e3:05:d9:3e:a1:ff:09:68:1e:5d:e3:cc:
ca:02:66:f2:93:b8:a8:b9:67:39:fb:8e:29:4f:90:be:f5:49:
d8:b8:03:1f:71:7e:b3:a3:cd:96:ad:7f:e4:43:c0:4f:65:b0:
ab:81:6d:65:8d:87:e5:f8:39:88:7d:71:13:8a:96:04:59:91:
5b:f7:b3:c8:11:12:77:70:71:0a:f8:ab:2d:c3:fa:83:72:ea:
42:dd:f4:12:e5:b1:43:d1:d1:08:6a:d2:9b:01:aa:e6:ef:9b:
57:b9:19:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BJ26ZZlCTGrV1vVSzPcQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlY2NiN2NkMWI5ZDZmYzM5ZDcxNThmMmZlOWNmNTIxN2Ex
MmQzNzQwHhcNMjUwMTMxMTEwMDA2WhcNMjUwMjAxMTEwMDA2WjAzMTEwLwYDVQQD
Eyg1ZjQwYzY4Y2Q5ZjM3ZmI2NzE2NDUwMGNmOTNiZjcyN2JmNjMyMjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AzhoVfD8oZ8QvvrkYV3PpYJU1/p
TxD5Lv1jYAHB0CSQQRGPeYpTX4lN7cz38+fSf0khhTZBuzJhg0PPGEZOZaApPWVI
SU5xCe5EZLKNsHa9+Vxt6YqKm2J7qXVU1VRtXCFgTvIl6N7g4L/HoraYR9Rex7r3
aMJfXjMnDaQ+jB9S9X+XNzhuoBTtqv3fTWt7RshgGpiRI5xXstroi/1XCCnbAQia
JakicjyxcobyA3shop6sdnhUYKTo7A+WUxoyZmmZyR5Y2MgMsNCDjr8CyczwZfz2
zglEWqJV7D9PVUXbXrask8lUOXpR7dEU6eHDhQbLNeN1wLMStcs26CO8OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9AxozZ83+2cWRQDPk79ye/YyJ1MB8GA1UdIwQY
MBaAFF7Mt80bnW/DnXFY8v6c9SF6EtN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHN5M3pSdWRiOE9kY1ZqeV9wejFJWG9TMDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lZGM4ZjMtMGJiMi00MWFiLWJhNjQt
ZDIyOTY3ZTIyZWYwLzEvWHN5M3pSdWRiOE9kY1ZqeV9wejFJWG9TMDNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lZGM4ZjMtMGJiMi00MWFiLWJhNjQtZDIyOTY3ZTIyZWYw
LzEvWHN5M3pSdWRiOE9kY1ZqeV9wejFJWG9TMDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPJTAdsq
BrdoYg71hpGv5Wwrpl88VG+YC2FipVVg+QKkjJSjTeHDn5SG7S50BDW3mfD6HI2J
8RjGFWXYHH36ZJAh/PHR4sga/0qW4EGH9TO8+OZh1mfmsx/sckb6zdAm31WaKfIw
odxxhFmvzwspTfRNMqwNglL4ReBPrp/IZXsgig23j+5k2vMYor72m9a3xzxwnWMa
4wXZPqH/CWgeXePMygJm8pO4qLlnOfuOKU+QvvVJ2LgDH3F+s6PNlq1/5EPAT2Ww
q4FtZY2H5fg5iH1xE4qWBFmRW/ezyBESd3BxCvirLcP6g3LqQt30EuWxQ9HRCGrS
mwGq5u+bV7kZ2Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:14 2025 by rpki-client