Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: MnCfw/DtQTkSH1T524/7Fsw5hSsspLh2olvI+xDKNX4=
Subject key identifier: AC:C4:EF:DF:32:C5:5E:BF:2C:2B:99:E9:88:18:DC:E1:06:60:CD:17
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 0194BD17BBE83E5858D24156EC72B9922364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 0759
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: xPJn9HaU4t51hbW5OBuJoCsPyo4.roa (hash: uz1JqEO2ZedJ66isTlXBDY0hlcT6/Q49MhmsWTQhugM=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: CuSmyoOiAOJRFT3s1j/fU/M2Fp6qEWOabq3a8M4eNpE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bb:e8:3e:58:58:d2:41:56:ec:72:b9:92:23:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=acc4efdf32c55ebf2c2b99e98818dce10660cd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:8e:f7:fb:c0:00:f0:b1:1a:a5:5c:0f:fa:
64:ba:8f:3b:89:83:d4:0b:d6:bb:dd:b1:19:30:82:
69:8d:ac:76:f4:d4:a4:86:2b:db:da:c4:2a:4d:7e:
44:9a:90:8e:da:33:a2:5d:e0:1f:f8:07:4c:02:60:
a5:40:ac:e2:9e:83:57:99:4e:b8:12:9f:ed:76:fc:
b2:d6:20:98:c5:58:1b:a9:4f:c6:af:57:f2:bc:a2:
7f:60:6c:ad:28:11:5f:3e:47:6a:b4:09:3c:3d:0d:
02:a9:07:3c:af:dc:f7:76:43:8f:7c:c4:44:1f:21:
be:e8:20:ed:8c:18:4b:2c:c0:a9:7b:1f:b8:6c:f0:
14:b0:46:9a:be:3d:a1:a1:0d:65:cb:9d:97:12:b9:
ed:68:44:0c:fb:7b:85:eb:69:f1:4f:d6:32:e8:9b:
c0:60:d6:8e:6b:6e:19:a3:78:76:9d:76:07:dc:e7:
5a:a7:72:50:16:81:0b:46:a9:82:25:5a:01:14:48:
f0:07:fe:fc:48:7a:a7:51:09:77:54:8a:ee:bd:19:
83:bb:06:3f:c4:d5:75:ab:9e:8f:e1:ca:9c:ac:b5:
09:f2:ae:d0:cf:ef:ad:3f:7e:61:d8:15:5e:ef:a9:
86:86:ad:e6:0c:fe:01:19:35:16:e4:0c:e3:1c:5f:
12:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C4:EF:DF:32:C5:5E:BF:2C:2B:99:E9:88:18:DC:E1:06:60:CD:17
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:53:b6:94:a9:98:ea:f0:42:61:fe:70:57:d8:51:7e:05:59:
8c:9c:5c:9e:28:aa:31:a8:e0:a2:88:1c:cc:08:34:34:fa:58:
75:e4:57:0f:40:c3:b1:00:e4:b4:41:2d:3c:df:fd:0b:32:73:
2d:3a:80:bf:2f:9f:a9:9f:d6:95:e1:9d:e5:cd:e2:57:3c:94:
10:56:98:94:c6:2e:64:a3:8e:47:04:70:86:55:17:c9:77:7d:
df:51:94:98:0f:b7:a0:47:e6:48:e3:4a:10:1a:6f:e9:97:ff:
34:47:0a:fa:e4:0d:a6:e0:65:86:b5:ce:63:dd:17:a7:89:b4:
91:25:1a:b8:8b:09:7d:f2:42:eb:42:ae:8f:cf:6f:e5:b5:62:
dd:48:5a:bd:09:89:cd:11:3c:35:09:27:d2:fe:94:84:67:d2:
f1:0d:e6:14:d3:56:2b:0b:69:7a:bf:38:83:99:2c:32:da:3c:
5a:39:0c:5e:3f:db:94:fb:75:d5:a8:6f:eb:8c:a5:a5:b5:ab:
76:eb:c4:93:08:4a:66:56:df:ae:78:13:4b:5f:8a:bb:06:3d:
f9:46:9f:fc:19:a0:42:d6:54:84:0f:91:c4:c6:00:b9:97:ed:
63:aa:45:74:3c:2e:0d:fd:fc:eb:09:8f:80:99:d4:86:ed:19:
b7:29:a7:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7voPlhY0kFW7HK5kiNkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTlkNDY5MzU1NWI5ZjJhZDY4MDdiYWNlZGM0YjVhMmU3
MDFhNDgwHhcNMjUwMTMxMTYwMDM2WhcNMjUwMjAxMTYwMDM2WjAzMTEwLwYDVQQD
EyhhY2M0ZWZkZjMyYzU1ZWJmMmMyYjk5ZTk4ODE4ZGNlMTA2NjBjZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwSO9/vAAPCxGqVcD/pkuo87iYPU
C9a73bEZMIJpjax29NSkhivb2sQqTX5EmpCO2jOiXeAf+AdMAmClQKzinoNXmU64
Ep/tdvyy1iCYxVgbqU/Gr1fyvKJ/YGytKBFfPkdqtAk8PQ0CqQc8r9z3dkOPfMRE
HyG+6CDtjBhLLMCpex+4bPAUsEaavj2hoQ1ly52XErntaEQM+3uF62nxT9Yy6JvA
YNaOa24Zo3h2nXYH3Odap3JQFoELRqmCJVoBFEjwB/78SHqnUQl3VIruvRmDuwY/
xNV1q56P4cqcrLUJ8q7Qz++tP35h2BVe76mGhq3mDP4BGTUW5AzjHF8SyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzE798yxV6/LCuZ6YgY3OEGYM0XMB8GA1UdIwQY
MBaAFMVZ1Gk1VbnyrWgHus7cS1oucBpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUt
ZDJlMzUxNjA5NzU5LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUtZDJlMzUxNjA5NzU5
LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFO2lKmY
6vBCYf5wV9hRfgVZjJxcniiqMajgoogczAg0NPpYdeRXD0DDsQDktEEtPN/9CzJz
LTqAvy+fqZ/WleGd5c3iVzyUEFaYlMYuZKOORwRwhlUXyXd931GUmA+3oEfmSONK
EBpv6Zf/NEcK+uQNpuBlhrXOY90Xp4m0kSUauIsJffJC60Kuj89v5bVi3UhavQmJ
zRE8NQkn0v6UhGfS8Q3mFNNWKwtper84g5ksMto8WjkMXj/blPt11ahv64ylpbWr
duvEkwhKZlbfrngTS1+KuwY9+Uaf/BmgQtZUhA+RxMYAuZftY6pFdDwuDf386wmP
gJnUhu0ZtymnDg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:15 2025 by rpki-client