Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: HwTeVcB6gZhFyotX6Vbz4yNW06NpoyE7X2gF+T11bRI=
Subject key identifier: 1F:0A:8E:78:14:40:58:6B:86:81:9F:B8:42:36:6D:50:9C:FB:F8:D8
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 0194BCAA0E14BF392B29805B9450EF9517FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=)
2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: XxB1ev/ATueJ6b311ZR2fU982Qiwv+RHH8AtEfIDCUQ=)
3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0e:14:bf:39:2b:29:80:5b:94:50:ef:95:17:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=1f0a8e781440586b86819fb842366d509cfbf8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:7e:89:aa:ca:fe:57:40:b9:07:3e:27:a0:
36:10:67:f8:c3:1f:5f:e7:53:29:6f:74:00:40:bb:
24:2a:0c:02:55:b3:46:2f:bb:87:13:4c:2f:f0:a4:
b1:c4:99:eb:e0:fa:ab:23:3b:9b:b0:fa:33:c5:bb:
19:43:e4:c8:3d:ec:6a:6a:5c:88:30:e7:c8:de:ee:
d6:69:29:c9:9b:3a:61:3f:2f:a6:34:de:ea:4b:1d:
90:b1:28:9b:79:1b:86:5e:5d:0d:0e:7c:83:8d:f6:
39:8d:6e:3a:b4:3d:aa:45:20:40:cb:6f:70:02:4c:
85:87:c1:96:80:17:6f:e9:31:29:7d:47:f4:19:74:
c3:d6:d5:96:04:a8:8b:6c:8f:d5:62:ea:94:83:c5:
e7:51:18:06:f0:07:62:41:ae:aa:67:4f:bd:d0:0f:
9c:2b:e2:4b:f8:8e:22:93:d9:42:f6:b4:ae:26:f6:
36:73:a2:0b:c6:9e:c1:64:dc:a5:48:db:65:bc:73:
b1:8e:a2:0b:77:12:05:20:78:f2:db:a8:1a:b2:fa:
ff:42:d0:20:5a:19:84:06:f5:61:a9:63:21:de:13:
09:05:99:88:64:d6:36:cd:f7:4a:87:48:14:2d:6a:
59:58:dd:c5:00:9b:87:f6:29:44:8c:d2:e8:c6:e7:
9f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0A:8E:78:14:40:58:6B:86:81:9F:B8:42:36:6D:50:9C:FB:F8:D8
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fd:43:94:70:7b:83:f9:f7:8b:3c:cb:80:c1:57:4f:13:21:
75:b9:03:2c:dc:bb:32:fa:8e:50:cf:72:d0:95:a8:f4:9a:ae:
b8:4e:1d:cd:33:f7:eb:bd:3d:ce:58:10:25:c2:53:9c:53:64:
a4:30:b7:b0:af:62:6b:b8:62:df:33:f1:b3:34:9a:f5:ad:c5:
d8:06:48:2c:93:6d:2b:32:95:ea:a2:c7:fd:7b:c1:cd:05:ec:
5f:99:b3:0b:c4:34:fb:a7:57:ab:53:bc:e7:60:be:92:59:e8:
7e:b4:4f:af:3f:4a:b6:f2:ee:03:13:9c:47:7c:c7:65:3e:85:
42:fe:b9:d7:79:88:bf:f4:07:b3:c6:20:e6:77:dc:67:e7:25:
4e:29:46:47:ec:4d:f5:d5:12:01:0a:40:be:cc:de:b1:61:83:
1c:58:8b:da:64:3a:02:76:7d:c0:52:5f:0e:d3:7b:8f:50:5b:
8c:a7:2a:d4:eb:b6:61:c5:d0:97:92:53:85:ef:ed:67:27:8c:
f1:82:f6:d6:70:92:10:5f:36:01:d2:b8:11:b0:ff:33:eb:6b:
f7:b1:68:8a:8d:6f:2b:59:a0:0e:3f:a0:50:13:90:c2:0f:1f:
e4:74:c0:6c:56:2a:9e:a0:a7:f4:ab:6f:8f:8b:e5:2c:3e:9e:
d9:44:7e:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qg4UvzkrKYBblFDvlRf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNDFjNjY0YzBjMDEzZGZmYjZlMGRkMWQ3M2IzNjljYmE1
ZmJkMWMwHhcNMjUwMTMxMTQwMDQ4WhcNMjUwMjAxMTQwMDQ4WjAzMTEwLwYDVQQD
EygxZjBhOGU3ODE0NDA1ODZiODY4MTlmYjg0MjM2NmQ1MDljZmJmOGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u9+iarK/ldAuQc+J6A2EGf4wx9f
51Mpb3QAQLskKgwCVbNGL7uHE0wv8KSxxJnr4PqrIzubsPozxbsZQ+TIPexqalyI
MOfI3u7WaSnJmzphPy+mNN7qSx2QsSibeRuGXl0NDnyDjfY5jW46tD2qRSBAy29w
AkyFh8GWgBdv6TEpfUf0GXTD1tWWBKiLbI/VYuqUg8XnURgG8AdiQa6qZ0+90A+c
K+JL+I4ik9lC9rSuJvY2c6ILxp7BZNylSNtlvHOxjqILdxIFIHjy26gasvr/QtAg
WhmEBvVhqWMh3hMJBZmIZNY2zfdKh0gULWpZWN3FAJuH9ilEjNLoxuefmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8KjngUQFhrhoGfuEI2bVCc+/jYMB8GA1UdIwQY
MBaAFF9BxmTAwBPf+24N0dc7Npy6X70cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUt
NjIzMDZhYmRmYTAzLzEvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUtNjIzMDZhYmRmYTAz
LzEvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbf1DlHB7
g/n3izzLgMFXTxMhdbkDLNy7MvqOUM9y0JWo9JquuE4dzTP36709zlgQJcJTnFNk
pDC3sK9ia7hi3zPxszSa9a3F2AZILJNtKzKV6qLH/XvBzQXsX5mzC8Q0+6dXq1O8
52C+klnofrRPrz9KtvLuAxOcR3zHZT6FQv6513mIv/QHs8Yg5nfcZ+clTilGR+xN
9dUSAQpAvszesWGDHFiL2mQ6AnZ9wFJfDtN7j1BbjKcq1Ou2YcXQl5JThe/tZyeM
8YL21nCSEF82AdK4EbD/M+tr97Foio1vK1mgDj+gUBOQwg8f5HTAbFYqnqCn9Ktv
j4vlLD6e2UR+Jw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:14:37 2025 by rpki-client