Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/217e97-6b2c-4a5d-915b-949c628e5f3c/1/XX2xSVjPTXheWe9cbGefjvVMHYs.mft
File: XX2xSVjPTXheWe9cbGefjvVMHYs.mft (raw, json)
Hash identifier: EVHUHQ6iT08OaVXtQWw0NiYeGxm4bcecdrxxY/ePdr8=
Subject key identifier: E0:14:7E:4D:7C:97:3C:BE:6B:13:85:A0:DA:4B:E8:7A:94:60:A3:4F
Authority key identifier: 5D:7D:B1:49:58:CF:4D:78:5E:59:EF:5C:6C:67:9F:8E:F5:4C:1D:8B
Certificate issuer: /CN=5d7db14958cf4d785e59ef5c6c679f8ef54c1d8b
Certificate serial: 0194BC3C4D7A4EB52E0B8B52D91A74CC1C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XX2xSVjPTXheWe9cbGefjvVMHYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/217e97-6b2c-4a5d-915b-949c628e5f3c/1/XX2xSVjPTXheWe9cbGefjvVMHYs.mft
Manifest number: 0412
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: XX2xSVjPTXheWe9cbGefjvVMHYs.crl (hash: 2xFI8HZIOkKedMJQ1Zx8gbubjgrdlVy7gk1Qq2PlJbo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4d:7a:4e:b5:2e:0b:8b:52:d9:1a:74:cc:1c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7db14958cf4d785e59ef5c6c679f8ef54c1d8b
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=e0147e4d7c973cbe6b1385a0da4be87a9460a34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2c:ae:43:93:58:4b:7f:5e:07:4e:5d:4a:cb:
14:67:8f:44:87:a5:df:c9:00:8a:00:e2:ae:00:1d:
f1:3b:f1:58:55:17:39:ea:99:b5:8a:68:59:1d:38:
1f:ce:97:6e:00:1e:ce:3a:a6:26:50:17:33:af:72:
24:6c:6e:02:76:4c:47:90:3a:0f:ff:91:6e:d0:fd:
5d:1e:9e:6a:d9:1b:0e:86:cc:07:61:d2:d0:ed:9f:
8c:38:a3:91:27:60:45:c4:51:ff:18:99:69:59:7e:
37:fe:33:f5:97:08:2d:67:55:11:e3:a8:f2:1f:59:
a0:dc:06:80:5c:c8:22:36:62:ce:92:f0:7c:27:06:
cd:a6:f0:e7:6b:29:84:d5:2f:22:76:26:e3:b5:d9:
b5:76:5a:e1:f2:a1:a9:4e:34:07:32:e8:a7:01:42:
3c:10:9f:94:3c:e6:cd:7b:62:03:01:89:38:60:f1:
a3:77:c5:e1:bf:1c:15:62:dc:c7:c9:8a:d6:2a:6e:
fa:39:1f:d8:0d:95:1f:79:e9:ba:85:1c:f2:f9:e5:
80:d1:67:cd:a9:b8:af:47:58:de:87:2b:63:ab:be:
c1:b4:a9:74:88:ee:8b:37:03:cc:c1:f7:b8:65:ab:
11:4a:5d:e2:d0:9b:66:8e:e1:4f:3b:17:ac:c8:9f:
58:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:14:7E:4D:7C:97:3C:BE:6B:13:85:A0:DA:4B:E8:7A:94:60:A3:4F
X509v3 Authority Key Identifier:
keyid:5D:7D:B1:49:58:CF:4D:78:5E:59:EF:5C:6C:67:9F:8E:F5:4C:1D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX2xSVjPTXheWe9cbGefjvVMHYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/217e97-6b2c-4a5d-915b-949c628e5f3c/1/XX2xSVjPTXheWe9cbGefjvVMHYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/217e97-6b2c-4a5d-915b-949c628e5f3c/1/XX2xSVjPTXheWe9cbGefjvVMHYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2b:7a:20:02:0a:d9:78:34:c6:4b:06:7c:a8:9e:20:14:0a:
fc:5e:6e:78:f4:64:c8:49:88:15:00:05:49:5a:a6:8e:cf:e5:
21:0e:72:15:be:d6:dc:bb:41:27:f5:7e:da:42:86:25:6b:a4:
37:98:4c:15:13:66:e9:47:ed:ce:9e:5b:f1:bf:28:49:b9:47:
47:ef:18:28:0c:a1:74:2d:dc:19:ea:fc:1d:24:74:7e:b4:81:
2b:87:fc:e0:35:f5:69:ab:0a:12:f4:10:d9:23:51:ef:89:7f:
dd:f5:09:18:38:0d:00:a1:0f:8c:1b:e6:fa:23:c2:ae:be:60:
c0:2e:9d:cb:f8:2d:19:5d:c3:1c:9e:21:8e:e2:a5:15:69:22:
05:58:a4:0b:d2:6c:67:78:67:63:29:99:a7:1b:d7:0d:a8:27:
06:e0:19:6e:f9:29:d8:a3:c5:f7:f0:9d:33:a4:57:74:2d:a3:
f6:68:c7:6a:63:13:2c:09:7d:a9:ca:02:75:83:d4:86:3f:75:
df:8d:17:99:b9:da:fc:be:f4:a9:ad:1a:d2:50:73:f6:39:00:
b4:7b:aa:12:24:58:bc:fd:a5:7f:44:9e:03:51:d5:b0:b3:3a:
7f:25:1e:0f:e3:c4:15:9f:65:35:44:6e:ee:b7:c1:10:37:2a:
6c:33:85:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PE16TrUuC4tS2Rp0zBwQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkN2RiMTQ5NThjZjRkNzg1ZTU5ZWY1YzZjNjc5ZjhlZjU0
YzFkOGIwHhcNMjUwMTMxMTIwMDU2WhcNMjUwMjAxMTIwMDU2WjAzMTEwLwYDVQQD
EyhlMDE0N2U0ZDdjOTczY2JlNmIxMzg1YTBkYTRiZTg3YTk0NjBhMzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SyuQ5NYS39eB05dSssUZ49Eh6Xf
yQCKAOKuAB3xO/FYVRc56pm1imhZHTgfzpduAB7OOqYmUBczr3IkbG4CdkxHkDoP
/5Fu0P1dHp5q2RsOhswHYdLQ7Z+MOKORJ2BFxFH/GJlpWX43/jP1lwgtZ1UR46jy
H1mg3AaAXMgiNmLOkvB8JwbNpvDnaymE1S8idibjtdm1dlrh8qGpTjQHMuinAUI8
EJ+UPObNe2IDAYk4YPGjd8XhvxwVYtzHyYrWKm76OR/YDZUfeem6hRzy+eWA0WfN
qbivR1jehytjq77BtKl0iO6LNwPMwfe4ZasRSl3i0JtmjuFPOxesyJ9YpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAUfk18lzy+axOFoNpL6HqUYKNPMB8GA1UdIwQY
MBaAFF19sUlYz014XlnvXGxnn471TB2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFgyeFNWalBUWGhlV2U5Y2JHZWZqdlZNSFlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yMTdlOTctNmIyYy00YTVkLTkxNWIt
OTQ5YzYyOGU1ZjNjLzEvWFgyeFNWalBUWGhlV2U5Y2JHZWZqdlZNSFlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yMTdlOTctNmIyYy00YTVkLTkxNWItOTQ5YzYyOGU1ZjNj
LzEvWFgyeFNWalBUWGhlV2U5Y2JHZWZqdlZNSFlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmyt6IAIK
2Xg0xksGfKieIBQK/F5uePRkyEmIFQAFSVqmjs/lIQ5yFb7W3LtBJ/V+2kKGJWuk
N5hMFRNm6Uftzp5b8b8oSblHR+8YKAyhdC3cGer8HSR0frSBK4f84DX1aasKEvQQ
2SNR74l/3fUJGDgNAKEPjBvm+iPCrr5gwC6dy/gtGV3DHJ4hjuKlFWkiBVikC9Js
Z3hnYymZpxvXDagnBuAZbvkp2KPF9/CdM6RXdC2j9mjHamMTLAl9qcoCdYPUhj91
340Xmbna/L70qa0a0lBz9jkAtHuqEiRYvP2lf0SeA1HVsLM6fyUeD+PEFZ9lNURu
7rfBEDcqbDOFvw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:05 2025 by rpki-client