Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
File: Xozn6kHZTYedYkvDFUaZni23w-U.mft (raw, json)
Hash identifier: 0KSClhoj7FszG1cZoM9+K+kPVJF8+mVJak5Q7wfz3S4=
Subject key identifier: E1:F2:BC:7D:AC:2C:77:94:D6:C3:C1:37:43:A1:6E:E6:DB:2B:68:4D
Authority key identifier: 5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
Certificate issuer: /CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Certificate serial: 0194BBCF05409DBE90BDBD06546524EB5236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
Manifest number: 2B
Signing time: Fri 31 Jan 2025 10:01:34 +0000
Manifest this update: Fri 31 Jan 2025 10:01:34 +0000
Manifest next update: Sat 01 Feb 2025 10:01:34 +0000
Files and hashes: 1: Xozn6kHZTYedYkvDFUaZni23w-U.crl (hash: bMohF/YuH8YCR1XPeUtC0ufRKzGny4CW1b/rYJbiURE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:05:40:9d:be:90:bd:bd:06:54:65:24:eb:52:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Validity
Not Before: Jan 31 10:01:34 2025 GMT
Not After : Feb 1 10:01:34 2025 GMT
Subject: CN=e1f2bc7dac2c7794d6c3c13743a16ee6db2b684d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:08:84:34:8f:84:3a:86:d0:61:08:47:23:
2e:bf:02:a6:b6:b8:a5:15:fe:2e:8b:6c:e1:80:70:
2a:3d:c4:a2:b8:37:94:29:e4:8c:9a:ba:d8:b2:58:
69:63:bf:d1:61:5b:97:ac:e2:f4:90:3c:79:7d:2b:
d7:c7:e0:71:7a:7f:a1:d2:7f:0f:6a:2c:f0:da:e7:
c1:84:81:d5:1c:e7:da:ae:ee:30:96:28:cc:f1:a9:
06:7a:8d:0c:f8:19:f4:9b:a5:08:a6:44:e1:cf:ff:
b9:67:10:45:fa:1e:24:04:6e:51:c9:53:9d:c0:ac:
e2:d7:05:88:ac:44:96:6f:65:28:2a:08:41:92:cf:
81:15:c4:4e:12:01:42:a7:be:c6:16:77:39:83:66:
e9:c0:36:32:2b:45:e7:29:40:56:bd:85:b6:61:b1:
af:d6:c6:e7:6d:4f:15:52:06:9a:f7:7b:8f:23:5a:
6d:26:21:8d:17:f4:c4:d5:2f:f1:bb:e1:02:85:d4:
4d:2f:2a:b3:1d:d7:63:b3:df:31:da:50:af:a6:1a:
4a:9e:e9:7a:bd:50:d8:43:bc:00:1c:33:e9:d8:9d:
20:d3:5f:59:be:3c:14:13:da:2a:e7:f9:e6:42:75:
12:ce:76:79:90:a6:e5:a7:1f:97:d9:5a:6b:bf:c1:
0f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F2:BC:7D:AC:2C:77:94:D6:C3:C1:37:43:A1:6E:E6:DB:2B:68:4D
X509v3 Authority Key Identifier:
keyid:5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8e:8e:ef:d7:67:23:79:31:2a:9e:48:27:60:f3:64:49:72:
aa:8a:b1:ff:8d:40:0f:15:36:fb:bd:5f:72:be:4f:90:78:a8:
e9:72:4c:1c:03:b8:83:0c:92:1e:be:4d:88:c2:be:1c:39:fb:
e8:a1:a0:09:2d:3f:57:b0:20:d3:4a:66:71:33:d4:cd:de:e0:
24:38:2b:b4:2e:9e:73:ce:83:4f:be:a5:c8:ad:56:61:40:a8:
9c:a9:9e:1f:5b:52:3c:2d:b7:c9:6d:b8:be:5d:7c:ab:2e:32:
b6:02:a4:3e:10:e1:ab:5b:84:7d:d5:58:f8:23:eb:95:e8:e7:
86:dd:e8:8a:aa:7f:9a:ca:9e:1e:3b:ee:f5:5d:23:64:0f:12:
6e:83:a8:4a:8b:65:08:e1:92:fb:8c:05:44:8e:6b:d5:8a:71:
4b:a4:63:dd:de:01:37:a7:e6:f4:91:a9:81:f4:77:9f:9d:93:
1a:c3:bf:a8:bd:d0:bf:55:c5:2e:8a:e4:db:6b:d3:a0:74:ef:
3c:cb:ee:1a:47:a4:1b:3b:15:45:3f:83:3c:61:e9:cc:2a:88:
4b:28:da:4d:8d:6d:24:ef:93:74:07:cf:38:0d:1d:d0:fd:51:
91:50:0e:1f:aa:a6:93:cf:6f:17:ef:43:cb:a9:8e:54:78:71:
82:d5:f3:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zwVAnb6Qvb0GVGUk61I2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOGNlN2VhNDFkOTRkODc5ZDYyNGJjMzE1NDY5OTllMmRi
N2MzZTUwHhcNMjUwMTMxMTAwMTM0WhcNMjUwMjAxMTAwMTM0WjAzMTEwLwYDVQQD
EyhlMWYyYmM3ZGFjMmM3Nzk0ZDZjM2MxMzc0M2ExNmVlNmRiMmI2ODRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv48IhDSPhDqG0GEIRyMuvwKmtril
Ff4ui2zhgHAqPcSiuDeUKeSMmrrYslhpY7/RYVuXrOL0kDx5fSvXx+Bxen+h0n8P
aizw2ufBhIHVHOfaru4wlijM8akGeo0M+Bn0m6UIpkThz/+5ZxBF+h4kBG5RyVOd
wKzi1wWIrESWb2UoKghBks+BFcROEgFCp77GFnc5g2bpwDYyK0XnKUBWvYW2YbGv
1sbnbU8VUgaa93uPI1ptJiGNF/TE1S/xu+EChdRNLyqzHddjs98x2lCvphpKnul6
vVDYQ7wAHDPp2J0g019ZvjwUE9oq5/nmQnUSznZ5kKblpx+X2Vprv8EPoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHyvH2sLHeU1sPBN0OhbubbK2hNMB8GA1UdIwQY
MBaAFF6M5+pB2U2HnWJLwxVGmZ4tt8PlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81MDk3MTAtODgxNS00YTIwLThjMmUt
Mjg2YWRiZGRlNmQzLzEvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy81MDk3MTAtODgxNS00YTIwLThjMmUtMjg2YWRiZGRlNmQz
LzEvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcI6O79dn
I3kxKp5IJ2DzZElyqoqx/41ADxU2+71fcr5PkHio6XJMHAO4gwySHr5NiMK+HDn7
6KGgCS0/V7Ag00pmcTPUzd7gJDgrtC6ec86DT76lyK1WYUConKmeH1tSPC23yW24
vl18qy4ytgKkPhDhq1uEfdVY+CPrlejnht3oiqp/msqeHjvu9V0jZA8SboOoSotl
COGS+4wFRI5r1YpxS6Rj3d4BN6fm9JGpgfR3n52TGsO/qL3Qv1XFLork22vToHTv
PMvuGkekGzsVRT+DPGHpzCqISyjaTY1tJO+TdAfPOA0d0P1RkVAOH6qmk89vF+9D
y6mOVHhxgtXz3w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:40 2025 by rpki-client