Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
File: XEzh8ZMxT2k5vxw_nawjafYpWFo.mft (raw, json)
Hash identifier: 2aWfH3sSpU8dRa1SHfJPoRVsdiJ/t98VhaUcCAxy4is=
Subject key identifier: 80:FC:75:E5:78:E9:29:6F:CF:5A:2C:20:43:EC:0C:86:14:C4:6A:40
Authority key identifier: 5C:4C:E1:F1:93:31:4F:69:39:BF:1C:3F:9D:AC:23:69:F6:29:58:5A
Certificate issuer: /CN=5c4ce1f193314f6939bf1c3f9dac2369f629585a
Certificate serial: 0194BD4E5E1EDD5627F5FB0B3493240E64E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: NeVlE-PzPHn5ppNlSgj87PhylgM.roa (hash: +i1WA9cuFFrQg1WFh0BGIYlKWMIvdmOqwrDe9C8B0aM=)
2: XEzh8ZMxT2k5vxw_nawjafYpWFo.crl (hash: KNs33rOCqaNZSj5nIqd6aGwCAmvM5fnukfu+raEyHNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5e:1e:dd:56:27:f5:fb:0b:34:93:24:0e:64:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4ce1f193314f6939bf1c3f9dac2369f629585a
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=80fc75e578e9296fcf5a2c2043ec0c8614c46a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:ac:94:9c:83:45:93:1f:2d:71:a4:86:21:
d9:8f:ff:a5:5a:9b:ce:69:6f:25:53:7f:76:7f:b3:
9a:1a:c3:51:37:2c:53:5e:70:38:41:7c:ab:78:46:
48:62:60:a6:bb:59:7e:85:e7:ff:51:4e:19:eb:9f:
e4:5a:95:24:5f:21:5f:4a:0d:63:f5:84:be:f4:6e:
26:bd:41:ad:eb:36:24:a8:6d:3b:7d:09:20:2a:f1:
06:4c:95:32:7e:f2:23:ac:48:81:8d:22:fc:d2:7a:
e8:b0:38:eb:25:8a:a4:54:16:e6:77:85:44:b4:27:
35:6f:94:92:1f:52:92:d3:48:e9:0f:64:7d:85:db:
e4:c4:1e:ad:21:18:2a:ba:b1:bd:5c:dc:ea:55:19:
27:f3:11:60:07:07:2f:86:7f:41:d2:02:71:55:8f:
4f:87:3b:c1:04:4e:ae:55:78:0c:d5:cc:12:22:1e:
8e:03:bd:80:d7:f8:1b:3c:66:18:fe:8a:b1:e8:aa:
63:29:fd:13:3f:94:5a:1f:43:2f:0a:b2:d0:ee:fe:
1a:3b:11:cf:e0:a3:06:b6:ca:a4:ae:81:8d:97:ab:
07:61:24:b1:35:e3:41:75:88:1e:08:d5:4a:a6:3b:
e0:51:1b:c1:2b:68:7e:fd:65:51:c2:c6:e9:6a:6e:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FC:75:E5:78:E9:29:6F:CF:5A:2C:20:43:EC:0C:86:14:C4:6A:40
X509v3 Authority Key Identifier:
keyid:5C:4C:E1:F1:93:31:4F:69:39:BF:1C:3F:9D:AC:23:69:F6:29:58:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:27:48:0e:f1:28:d2:d6:a2:bc:d7:14:a2:39:0c:f4:9a:23:
bc:ad:ae:71:7b:f0:8a:cb:13:5d:df:79:6b:65:db:0e:34:9d:
1d:dd:da:eb:81:2b:5c:16:e6:9a:2b:bc:a1:8d:a3:87:d3:eb:
8d:e1:cd:0c:cb:98:fa:e0:13:32:a5:7d:61:90:e8:2b:7b:0f:
05:95:a8:c2:75:67:a8:0e:b8:91:12:15:d0:58:4c:83:d4:65:
4a:29:af:5c:c5:f7:6b:30:d7:99:40:2d:c9:77:b1:05:ae:7d:
60:4d:33:b0:db:e1:c1:92:7e:b9:ab:a1:e2:80:ed:0c:c3:6d:
b5:6a:70:6f:22:20:1c:86:b1:ea:41:8a:b3:35:03:aa:cf:21:
e7:f8:9b:e3:95:e3:76:12:ed:80:97:6a:2c:0d:8d:3a:00:0c:
f4:7b:49:41:e8:55:e5:02:15:b7:c7:e2:60:fb:20:29:75:d0:
4d:cf:50:21:39:64:92:cf:da:4d:0e:64:02:23:24:0e:b0:37:
1b:02:f0:21:79:59:aa:10:da:58:5b:7c:b2:80:52:be:8d:49:
42:28:05:c2:54:f2:41:76:33:55:fe:c3:80:b7:36:7c:eb:74:
3a:18:b9:08:3f:01:82:32:8f:ab:13:3d:e1:b3:52:e0:bd:56:
16:47:32:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tl4e3VYn9fsLNJMkDmTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNGNlMWYxOTMzMTRmNjkzOWJmMWMzZjlkYWMyMzY5ZjYy
OTU4NWEwHhcNMjUwMTMxMTcwMDE3WhcNMjUwMjAxMTcwMDE3WjAzMTEwLwYDVQQD
Eyg4MGZjNzVlNTc4ZTkyOTZmY2Y1YTJjMjA0M2VjMGM4NjE0YzQ2YTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKKslJyDRZMfLXGkhiHZj/+lWpvO
aW8lU392f7OaGsNRNyxTXnA4QXyreEZIYmCmu1l+hef/UU4Z65/kWpUkXyFfSg1j
9YS+9G4mvUGt6zYkqG07fQkgKvEGTJUyfvIjrEiBjSL80nrosDjrJYqkVBbmd4VE
tCc1b5SSH1KS00jpD2R9hdvkxB6tIRgqurG9XNzqVRkn8xFgBwcvhn9B0gJxVY9P
hzvBBE6uVXgM1cwSIh6OA72A1/gbPGYY/oqx6KpjKf0TP5RaH0MvCrLQ7v4aOxHP
4KMGtsqkroGNl6sHYSSxNeNBdYgeCNVKpjvgURvBK2h+/WVRwsbpam4LNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFID8deV46Slvz1osIEPsDIYUxGpAMB8GA1UdIwQY
MBaAFFxM4fGTMU9pOb8cP52sI2n2KVhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEV6aDhaTXhUMms1dnh3X25hd2phZllwV0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYmY1MDItOWYzMS00ZDcwLTg3ZDQt
ZTA2NmQwMjJlOTI3LzEvWEV6aDhaTXhUMms1dnh3X25hd2phZllwV0ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9kYmY1MDItOWYzMS00ZDcwLTg3ZDQtZTA2NmQwMjJlOTI3
LzEvWEV6aDhaTXhUMms1dnh3X25hd2phZllwV0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkidIDvEo
0taivNcUojkM9JojvK2ucXvwissTXd95a2XbDjSdHd3a64ErXBbmmiu8oY2jh9Pr
jeHNDMuY+uATMqV9YZDoK3sPBZWownVnqA64kRIV0FhMg9RlSimvXMX3azDXmUAt
yXexBa59YE0zsNvhwZJ+uauh4oDtDMNttWpwbyIgHIax6kGKszUDqs8h5/ib45Xj
dhLtgJdqLA2NOgAM9HtJQehV5QIVt8fiYPsgKXXQTc9QITlkks/aTQ5kAiMkDrA3
GwLwIXlZqhDaWFt8soBSvo1JQigFwlTyQXYzVf7DgLc2fOt0Ohi5CD8BgjKPqxM9
4bNS4L1WFkcylg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:37 2025 by rpki-client