Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/XYO1pn2S_6hHbJMhqnv21KINPas.mft
File: XYO1pn2S_6hHbJMhqnv21KINPas.mft (raw, json)
Hash identifier: sgji3vRrid01MwVQRnakvKeTxJEQxAZiDHtP0X+cyso=
Subject key identifier: 89:42:62:BD:DC:34:C8:AF:5F:E5:D4:77:2D:02:67:A6:F7:2D:91:6C
Authority key identifier: 5D:83:B5:A6:7D:92:FF:A8:47:6C:93:21:AA:7B:F6:D4:A2:0D:3D:AB
Certificate issuer: /CN=5d83b5a67d92ffa8476c9321aa7bf6d4a20d3dab
Certificate serial: 0194BCE09D23E81D394737101A0B46C0EE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYO1pn2S_6hHbJMhqnv21KINPas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/XYO1pn2S_6hHbJMhqnv21KINPas.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: XYO1pn2S_6hHbJMhqnv21KINPas.crl (hash: VWJl9uIIHHqbYrjW9zqLaDL9/fjJi4H7O5JUQuXTUp8=)
2: yQMt2r0-C951BN6h68fRFJDbCC8.roa (hash: tYqh+1wBm4KwmsyhvHbFDKO/UGyJb2eTnTj9n8iYekw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9d:23:e8:1d:39:47:37:10:1a:0b:46:c0:ee:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d83b5a67d92ffa8476c9321aa7bf6d4a20d3dab
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=894262bddc34c8af5fe5d4772d0267a6f72d916c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:d6:d1:da:0c:50:62:d2:2c:e0:ed:ed:79:
26:0f:47:a1:8b:3b:9f:e6:2c:62:62:d4:14:be:37:
03:b9:fc:14:34:f8:71:b9:c4:0a:f8:90:0f:bd:c7:
8b:7d:19:18:b5:a5:b3:ca:db:8a:33:a9:dd:19:7b:
a7:b2:bb:7c:fe:69:ae:5b:30:8b:20:68:3a:51:12:
33:fd:2c:fd:fe:b8:87:04:87:66:69:61:1b:d6:83:
81:61:69:ab:e0:8b:bb:b7:f1:8b:4a:7b:df:82:de:
42:27:91:34:e5:9a:e8:db:e4:f4:ec:b6:1f:f9:68:
05:a4:e3:34:9a:e8:5b:93:d4:80:08:ce:2a:aa:12:
4b:ab:18:c9:c2:47:9f:5c:53:e9:af:dc:88:18:bd:
82:bb:77:8e:40:61:0a:48:17:05:29:dc:c7:72:29:
c5:4d:de:95:8c:1e:a3:9d:04:5d:da:7b:90:08:75:
da:07:3a:d9:62:52:53:ea:8c:9e:aa:49:41:f3:8d:
05:75:93:a6:bd:b5:d6:66:d6:02:cb:33:19:6e:f9:
a2:bd:0f:1a:df:b6:00:42:96:fc:9c:f0:ab:bb:d3:
4e:c3:c0:b0:86:be:95:a6:20:48:e9:8a:54:a9:81:
30:de:1c:a7:79:4e:fc:bc:0c:0f:83:9b:1d:65:54:
19:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:42:62:BD:DC:34:C8:AF:5F:E5:D4:77:2D:02:67:A6:F7:2D:91:6C
X509v3 Authority Key Identifier:
keyid:5D:83:B5:A6:7D:92:FF:A8:47:6C:93:21:AA:7B:F6:D4:A2:0D:3D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYO1pn2S_6hHbJMhqnv21KINPas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/XYO1pn2S_6hHbJMhqnv21KINPas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/XYO1pn2S_6hHbJMhqnv21KINPas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5a:6b:09:f0:45:28:ee:9c:80:05:e4:29:ec:59:73:c3:d2:
00:53:2e:ab:d6:da:8a:12:6c:40:c4:d4:c8:d4:58:fa:72:1e:
84:40:6a:18:c0:c5:9e:aa:33:d6:49:e1:a0:50:90:a3:34:e3:
a3:5a:98:a7:09:3c:c8:cb:4f:51:e0:0f:62:06:18:08:c8:4c:
a7:ef:a6:20:cf:bf:07:1d:32:0f:c6:ab:b0:db:19:93:dd:f9:
96:d6:bc:e6:76:a2:64:91:d7:fe:88:4a:69:e2:7e:ea:f7:de:
ee:97:c7:8a:5a:ac:a1:97:94:e8:1f:c0:a3:7a:43:4e:b0:66:
14:39:01:29:57:98:6c:4b:0c:dc:c5:dd:47:b3:ee:c0:ec:d5:
29:bf:9a:2c:99:95:74:66:1f:4c:f4:be:72:cf:65:0b:e6:03:
74:5d:e2:9b:09:06:d3:85:e1:2e:87:eb:c5:13:34:51:83:69:
e0:d9:91:9c:67:6e:21:89:ff:9a:4d:b9:98:01:f6:03:d9:1d:
9a:7a:ad:67:8e:cd:5e:ef:ba:fe:14:b5:cd:46:c7:51:71:d5:
3d:9e:aa:7b:f9:0b:6f:33:2d:5a:c3:9b:df:4a:8d:03:ec:1a:
f9:26:d2:27:df:88:86:7d:79:dc:55:3f:fb:43:74:f5:c6:55:
65:32:a6:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84J0j6B05RzcQGgtGwO4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkODNiNWE2N2Q5MmZmYTg0NzZjOTMyMWFhN2JmNmQ0YTIw
ZDNkYWIwHhcNMjUwMTMxMTUwMDI0WhcNMjUwMjAxMTUwMDI0WjAzMTEwLwYDVQQD
Eyg4OTQyNjJiZGRjMzRjOGFmNWZlNWQ0NzcyZDAyNjdhNmY3MmQ5MTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZLW0doMUGLSLODt7XkmD0ehizuf
5ixiYtQUvjcDufwUNPhxucQK+JAPvceLfRkYtaWzytuKM6ndGXunsrt8/mmuWzCL
IGg6URIz/Sz9/riHBIdmaWEb1oOBYWmr4Iu7t/GLSnvfgt5CJ5E05Zro2+T07LYf
+WgFpOM0muhbk9SACM4qqhJLqxjJwkefXFPpr9yIGL2Cu3eOQGEKSBcFKdzHcinF
Td6VjB6jnQRd2nuQCHXaBzrZYlJT6oyeqklB840FdZOmvbXWZtYCyzMZbvmivQ8a
37YAQpb8nPCru9NOw8Cwhr6VpiBI6YpUqYEw3hyneU78vAwPg5sdZVQZzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlCYr3cNMivX+XUdy0CZ6b3LZFsMB8GA1UdIwQY
MBaAFF2DtaZ9kv+oR2yTIap79tSiDT2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFlPMXBuMlNfNmhIYkpNaHFudjIxS0lOUGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81N2I4OTEtYTkxMi00YzZhLThlM2It
ZDQxZmNkZjU3NTk4LzEvWFlPMXBuMlNfNmhIYkpNaHFudjIxS0lOUGFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81N2I4OTEtYTkxMi00YzZhLThlM2ItZDQxZmNkZjU3NTk4
LzEvWFlPMXBuMlNfNmhIYkpNaHFudjIxS0lOUGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFprCfBF
KO6cgAXkKexZc8PSAFMuq9baihJsQMTUyNRY+nIehEBqGMDFnqoz1knhoFCQozTj
o1qYpwk8yMtPUeAPYgYYCMhMp++mIM+/Bx0yD8arsNsZk935lta85naiZJHX/ohK
aeJ+6vfe7pfHilqsoZeU6B/Ao3pDTrBmFDkBKVeYbEsM3MXdR7PuwOzVKb+aLJmV
dGYfTPS+cs9lC+YDdF3imwkG04XhLofrxRM0UYNp4NmRnGduIYn/mk25mAH2A9kd
mnqtZ47NXu+6/hS1zUbHUXHVPZ6qe/kLbzMtWsOb30qNA+wa+SbSJ9+Ihn153FU/
+0N09cZVZTKm6g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:08 2025 by rpki-client