Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: q3wN8IF2eNA+8iTWx8C2D7bMz5MGXrkhqi+gAStVYIE=
Subject key identifier: 65:2A:EE:B4:7F:A3:22:31:67:B1:AA:25:68:0C:B7:07:AF:BB:DD:CB
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 0194BCAA20A4EE0B2E0AF25C064DB3486A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 0417
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: Wk_9wtGClVrtYODuHEtURJ-3oHQ.roa (hash: s/nXb34IkLeKLlmquub76FOlWdViv6YcrY3Wh7bVOcc=)
2: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: kzMyNfyITyYI4qA42MWMY8kU/Zg2kv8m9jOEWVwlknU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:20:a4:ee:0b:2e:0a:f2:5c:06:4d:b3:48:6a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=652aeeb47fa3223167b1aa25680cb707afbbddcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:a4:6c:4a:6b:b0:a0:d5:65:09:f9:64:4f:
1b:7d:fa:4d:26:94:d0:06:39:2c:89:5f:c8:ad:b3:
ec:3f:e4:22:6a:09:e6:77:79:a8:3b:ce:09:a3:90:
9a:df:a3:29:47:29:4e:ea:0e:72:dc:bc:a1:8b:dd:
e1:30:da:0d:1f:25:89:f4:7c:3a:a2:c2:20:bf:fa:
e0:7f:67:21:c5:93:67:04:84:e8:1a:02:2a:f9:95:
89:a4:6b:8c:6c:ea:4a:8b:0f:9a:8e:da:31:3f:e7:
3f:ac:c0:2a:25:ff:74:0e:c3:e9:32:65:ee:65:72:
5a:af:33:76:04:97:e9:15:18:a8:c7:ea:66:77:b0:
8c:c3:00:24:ff:ba:ec:f3:d7:f4:10:db:08:fa:43:
77:52:30:ae:d6:7a:4f:c8:a0:1c:c9:71:5d:c7:74:
16:a8:3f:9d:fa:80:03:3e:1a:90:59:5e:51:7f:e9:
dd:35:46:22:ea:06:dd:c7:d6:63:2e:be:50:d5:9a:
ff:df:fc:22:b8:c0:71:3b:e6:9e:90:ca:26:c7:c5:
42:c6:a7:c3:4b:02:e2:4c:9c:d8:24:69:3a:27:36:
44:6c:8c:35:40:c1:bd:5b:99:77:3b:ec:47:c5:cb:
08:69:a1:60:bd:ae:59:e2:d4:a0:6b:84:44:69:3d:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2A:EE:B4:7F:A3:22:31:67:B1:AA:25:68:0C:B7:07:AF:BB:DD:CB
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e0:33:d4:ac:9c:af:c4:e0:b6:4e:2c:fe:b1:37:66:79:ee:
ab:ee:06:3b:46:ca:de:ea:10:d7:18:a5:fb:a1:bd:36:31:68:
2d:fa:8b:8e:e5:96:86:90:ae:b1:6a:99:51:38:6a:6b:4f:cb:
99:17:73:97:96:a8:17:41:df:22:f0:dd:00:0e:d9:42:e8:2b:
24:70:5e:e4:32:31:f0:d3:4e:74:0a:93:0c:cb:6e:0c:f2:c4:
4b:26:29:49:5d:1c:37:3c:22:39:43:16:bf:d5:08:b1:96:87:
83:32:b1:26:ae:83:08:22:fe:be:48:f9:5c:2c:12:56:c0:71:
7d:b9:02:38:93:e8:87:48:04:75:6e:94:4e:c9:7b:e5:8a:48:
fd:c6:7d:e0:00:53:33:35:f8:dc:4e:ed:8f:8c:26:1c:a5:bd:
c4:04:18:1c:d6:c1:46:82:41:73:44:fa:24:97:d8:94:93:78:
5d:a0:47:63:90:23:4a:0a:01:08:64:ca:5d:1c:5c:c2:54:5e:
b8:c6:b6:cb:24:87:5f:db:d2:05:3c:95:79:d2:98:d9:8c:a3:
b9:88:3c:64:0d:fc:29:a7:d5:3d:09:59:20:b5:4b:bf:6a:43:
69:6f:30:b1:bd:51:f5:b8:dc:4b:41:63:51:c3:ce:08:3c:e2:
2d:15:f5:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qiCk7gsuCvJcBk2zSGqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZTE0MDcwMjEwNjI3YmZjYTQ2NTRiNDJkZTc5N2FjZDZk
MmM0ZjQwHhcNMjUwMTMxMTQwMDUzWhcNMjUwMjAxMTQwMDUzWjAzMTEwLwYDVQQD
Eyg2NTJhZWViNDdmYTMyMjMxNjdiMWFhMjU2ODBjYjcwN2FmYmJkZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVykbEprsKDVZQn5ZE8bffpNJpTQ
BjksiV/IrbPsP+Qiagnmd3moO84Jo5Ca36MpRylO6g5y3Lyhi93hMNoNHyWJ9Hw6
osIgv/rgf2chxZNnBIToGgIq+ZWJpGuMbOpKiw+ajtoxP+c/rMAqJf90DsPpMmXu
ZXJarzN2BJfpFRiox+pmd7CMwwAk/7rs89f0ENsI+kN3UjCu1npPyKAcyXFdx3QW
qD+d+oADPhqQWV5Rf+ndNUYi6gbdx9ZjLr5Q1Zr/3/wiuMBxO+aekMomx8VCxqfD
SwLiTJzYJGk6JzZEbIw1QMG9W5l3O+xHxcsIaaFgva5Z4tSga4REaT050QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUq7rR/oyIxZ7GqJWgMtwevu93LMB8GA1UdIwQY
MBaAFMXhQHAhBie/ykZUtC3nl6zW0sT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGVGQWNDRUdKN19LUmxTMExlZVhyTmJTeFBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YmQ1MDAtNWQ0Zi00ODg5LTkxNDIt
M2M0ODM5YzhlODUxLzEveGVGQWNDRUdKN19LUmxTMExlZVhyTmJTeFBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80YmQ1MDAtNWQ0Zi00ODg5LTkxNDItM2M0ODM5YzhlODUx
LzEveGVGQWNDRUdKN19LUmxTMExlZVhyTmJTeFBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeAz1Kyc
r8Tgtk4s/rE3Znnuq+4GO0bK3uoQ1xil+6G9NjFoLfqLjuWWhpCusWqZUThqa0/L
mRdzl5aoF0HfIvDdAA7ZQugrJHBe5DIx8NNOdAqTDMtuDPLESyYpSV0cNzwiOUMW
v9UIsZaHgzKxJq6DCCL+vkj5XCwSVsBxfbkCOJPoh0gEdW6UTsl75YpI/cZ94ABT
MzX43E7tj4wmHKW9xAQYHNbBRoJBc0T6JJfYlJN4XaBHY5AjSgoBCGTKXRxcwlRe
uMa2yySHX9vSBTyVedKY2YyjuYg8ZA38KafVPQlZILVLv2pDaW8wsb1R9bjcS0Fj
UcPOCDziLRX12g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:31 2025 by rpki-client