Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier: z2vI2v5b5sq9Mfh6FjUr+gmQD016+G9hjg6K6L26HPM=
Subject key identifier: 3B:10:35:C1:93:F5:58:49:85:21:30:4D:CC:EE:94:19:A8:BF:87:B3
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 0194BCA99C04A34B51F668A26B9518D2246A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number: 143D
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: kvgwT2CIxiAz0KGy17PsocByagw.roa (hash: uswWYZe8p+8Gmx/n8zkQaGQ6Q2+Rru2JGoDveoK/xUw=)
2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: Jqv/qATeBFh559S+w1e8Ptw4RiDdMmrd/6+7iz6j3u0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9c:04:a3:4b:51:f6:68:a2:6b:95:18:d2:24:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=3b1035c193f558498521304dccee9419a8bf87b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:64:93:9b:7e:d0:f4:20:a1:70:d5:92:0c:
10:1a:d2:74:b6:93:75:85:a0:89:0f:60:2d:3d:b0:
8a:00:18:be:11:35:ae:2e:40:b4:08:44:0e:11:81:
72:66:00:f5:50:2b:f6:d8:48:f6:d5:e7:c5:f9:34:
e3:b8:85:63:4f:85:ff:e3:70:9d:74:0e:00:6a:ce:
62:99:9a:11:81:87:cb:5d:e8:11:79:f1:6a:30:26:
8d:51:cf:7b:8e:6f:55:26:7a:a6:a3:93:99:bf:8c:
de:d5:ae:68:69:ca:c2:80:ee:38:bf:8e:a9:73:74:
4d:79:fc:e6:f4:2d:44:3c:5b:d5:00:a1:7f:5b:61:
8e:aa:89:8b:a4:6b:bb:57:68:46:83:a2:c0:dd:1f:
56:36:8c:07:20:df:34:35:1d:d4:c0:54:a3:83:b7:
95:ca:14:3e:5a:6a:ec:72:1b:ac:9f:7d:f3:a5:9b:
fa:89:5c:c3:e2:32:86:95:15:1f:f7:b5:1a:45:c9:
43:34:99:a6:31:37:c1:eb:1e:af:58:fe:5b:33:f3:
fb:50:4f:8f:c2:76:50:a1:b3:e4:9d:c4:f5:a3:60:
43:d3:c7:89:1c:e5:bd:63:29:c4:52:99:f3:e0:28:
ed:c6:48:1d:8b:b9:16:36:49:fd:01:b6:81:a1:8e:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:10:35:C1:93:F5:58:49:85:21:30:4D:CC:EE:94:19:A8:BF:87:B3
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:26:f6:49:8e:d8:21:5b:4c:98:19:4a:7e:6a:c3:5c:fb:b3:
00:07:24:e8:34:e3:5d:b6:59:83:0f:cc:b2:0e:9a:4f:93:f6:
7d:8e:d7:43:a1:ec:c1:2e:6c:cb:20:e8:2c:c2:de:56:7b:81:
f4:47:d1:01:6b:55:1c:29:4a:17:32:e4:85:4e:f8:f7:1f:90:
54:b3:a4:40:86:00:5e:01:3f:da:24:bd:bc:07:c2:1c:7f:fe:
69:a6:99:27:05:ba:22:86:bc:c0:06:a6:e9:8f:ad:c6:c7:18:
2d:54:57:73:98:30:20:62:c2:24:8d:5f:e0:8c:ea:c0:b8:21:
c3:11:2e:b6:32:c2:62:0b:28:68:65:1c:7c:92:b7:4b:f7:39:
25:bc:89:e5:e5:73:01:67:9d:31:57:8a:0e:60:ff:8e:39:af:
fb:ce:6b:2f:62:53:f9:38:c7:b4:46:d0:7f:4e:70:e9:cd:f9:
54:41:b2:e9:b7:08:d7:eb:6b:1c:f2:4b:02:7a:8a:08:a5:ec:
4c:ac:9a:ea:9e:d9:f8:a3:8d:34:2c:37:b3:b8:8b:92:5b:41:
9f:63:ec:a8:bd:b7:4c:2e:ff:3c:99:1b:19:c7:64:0b:dd:f9:
2b:a9:8f:fa:e4:f7:86:bc:52:c7:11:e1:ca:5e:6e:09:29:d1:
e8:f8:00:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZwEo0tR9miia5UY0iRqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTJmNDI0MDdmMjFjOWQ3NjkwZmIzMGZkOGNkYjJiZmRm
NmQwMzAwHhcNMjUwMTMxMTQwMDE5WhcNMjUwMjAxMTQwMDE5WjAzMTEwLwYDVQQD
EygzYjEwMzVjMTkzZjU1ODQ5ODUyMTMwNGRjY2VlOTQxOWE4YmY4N2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgxkk5t+0PQgoXDVkgwQGtJ0tpN1
haCJD2AtPbCKABi+ETWuLkC0CEQOEYFyZgD1UCv22Ej21efF+TTjuIVjT4X/43Cd
dA4Aas5imZoRgYfLXegRefFqMCaNUc97jm9VJnqmo5OZv4ze1a5oacrCgO44v46p
c3RNefzm9C1EPFvVAKF/W2GOqomLpGu7V2hGg6LA3R9WNowHIN80NR3UwFSjg7eV
yhQ+Wmrschusn33zpZv6iVzD4jKGlRUf97UaRclDNJmmMTfB6x6vWP5bM/P7UE+P
wnZQobPkncT1o2BD08eJHOW9YynEUpnz4Cjtxkgdi7kWNkn9AbaBoY7B3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsQNcGT9VhJhSEwTczulBmov4ezMB8GA1UdIwQY
MBaAFMWi9CQH8hyddpD7MP2M2yv99tAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xYTE4ZTEtNjdjOC00OTJlLThmYmEt
ZmI1YzYyZTQyZjZiLzEveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xYTE4ZTEtNjdjOC00OTJlLThmYmEtZmI1YzYyZTQyZjZi
LzEveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnyb2SY7Y
IVtMmBlKfmrDXPuzAAck6DTjXbZZgw/Msg6aT5P2fY7XQ6HswS5syyDoLMLeVnuB
9EfRAWtVHClKFzLkhU749x+QVLOkQIYAXgE/2iS9vAfCHH/+aaaZJwW6Ioa8wAam
6Y+txscYLVRXc5gwIGLCJI1f4IzqwLghwxEutjLCYgsoaGUcfJK3S/c5JbyJ5eVz
AWedMVeKDmD/jjmv+85rL2JT+TjHtEbQf05w6c35VEGy6bcI1+trHPJLAnqKCKXs
TKya6p7Z+KONNCw3s7iLkltBn2PsqL23TC7/PJkbGcdkC935K6mP+uT3hrxSxxHh
yl5uCSnR6PgAIQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:21:07 2025 by rpki-client