Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
File: sxwNSGRgtxY3A-X_TYre2XiIx00.mft (raw, json)
Hash identifier: RHQpl8LBkctVdzS+leGcgPlzKY7Ot7kgdnqTsC713t0=
Subject key identifier: DA:86:D9:2F:21:11:5C:E4:98:E5:34:2D:D5:F9:79:ED:76:98:86:AA
Authority key identifier: B3:1C:0D:48:64:60:B7:16:37:03:E5:FF:4D:8A:DE:D9:78:88:C7:4D
Certificate issuer: /CN=b31c0d486460b7163703e5ff4d8aded97888c74d
Certificate serial: 0194BD178D56F33CB87266C3D54E73B81B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
Manifest number: 05DF
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: sxwNSGRgtxY3A-X_TYre2XiIx00.crl (hash: OUbbiI0MXyWdKKFlalZU55XC7jRTGl8pvYC0gzeEDOI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8d:56:f3:3c:b8:72:66:c3:d5:4e:73:b8:1b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c0d486460b7163703e5ff4d8aded97888c74d
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=da86d92f21115ce498e5342dd5f979ed769886aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:10:87:ff:33:e0:bf:ff:c8:25:fe:65:c5:c1:
8c:1e:6d:58:dc:49:c6:01:ae:f1:90:1b:e2:d3:1a:
02:eb:ad:37:41:9f:00:ad:c0:c9:3f:75:dd:77:5b:
3c:57:78:37:85:93:50:e7:57:3a:e9:15:4e:4e:8f:
dd:1d:51:0b:f7:8b:f3:ed:a6:e2:ba:29:73:ab:db:
24:43:53:61:63:0b:2e:a1:23:89:32:c6:6b:1d:10:
5e:44:87:b4:f4:37:f6:1d:ee:bf:b9:24:8d:08:02:
37:ec:e5:9b:e0:7b:7f:f8:91:f0:72:cf:bb:92:ed:
8b:88:11:52:e2:8d:3e:65:98:94:14:df:63:3d:5c:
6f:44:ea:e8:a5:73:25:b8:f8:19:31:30:24:8f:bd:
af:9d:2b:ff:23:08:4c:2a:57:7a:e3:6b:f5:d6:87:
37:6a:19:3c:5c:8e:28:7e:f4:12:94:2b:11:1d:e5:
fa:7f:af:72:db:4d:96:c6:f6:b0:00:06:fb:69:96:
a7:69:97:e9:ba:20:18:5f:06:f9:4c:7b:a4:eb:7f:
79:9f:87:52:c6:f7:06:5d:14:bf:50:e6:6f:7f:e1:
12:6d:58:08:41:66:d2:c9:bc:0d:bf:90:7e:27:ff:
a8:de:70:48:ab:af:37:ea:4e:75:a0:7f:ac:6d:15:
ed:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:86:D9:2F:21:11:5C:E4:98:E5:34:2D:D5:F9:79:ED:76:98:86:AA
X509v3 Authority Key Identifier:
keyid:B3:1C:0D:48:64:60:B7:16:37:03:E5:FF:4D:8A:DE:D9:78:88:C7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:42:20:a5:ee:f1:00:cc:3a:eb:fc:ac:ed:7d:ef:bb:fa:58:
12:6b:a3:00:31:12:ff:2d:9d:10:6d:b5:a6:43:51:5b:bc:83:
e4:d4:f7:e0:ad:38:7c:7b:a3:07:c7:88:98:b3:ec:b4:90:59:
fe:64:f8:68:d9:ce:8e:1b:a1:ec:e4:8c:38:b9:0b:31:14:87:
50:c9:79:cd:cb:73:92:68:8e:d4:18:29:0c:67:ba:78:27:88:
e1:34:73:47:bb:99:c4:66:6c:f7:bd:6f:76:28:bf:e1:f6:26:
6e:7c:e4:55:b0:00:55:5d:2e:1e:79:57:d0:d1:03:6a:de:51:
67:58:13:56:da:75:c1:67:95:ac:46:70:34:52:6d:2e:bd:17:
c0:8d:d5:d2:53:61:81:96:35:d9:8f:28:c5:44:7c:42:58:97:
69:03:2d:ac:c2:10:53:96:d1:29:56:b3:b3:e9:47:a2:c4:8f:
f6:87:32:5e:3b:10:58:ff:e0:77:ad:2f:c0:20:dd:ce:96:3d:
d1:d9:02:88:32:37:da:6e:93:6c:63:fd:36:6c:64:c8:7c:21:
62:2a:88:87:99:2c:fc:fa:44:f6:45:ab:98:f5:e9:2a:b8:6e:
56:00:f2:c7:3a:9e:d0:ed:d3:97:ed:95:1f:b7:4e:af:b7:ea:
e9:af:6b:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F41W8zy4cmbD1U5zuBs6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWMwZDQ4NjQ2MGI3MTYzNzAzZTVmZjRkOGFkZWQ5Nzg4
OGM3NGQwHhcNMjUwMTMxMTYwMDI0WhcNMjUwMjAxMTYwMDI0WjAzMTEwLwYDVQQD
EyhkYTg2ZDkyZjIxMTE1Y2U0OThlNTM0MmRkNWY5NzllZDc2OTg4NmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xCH/zPgv//IJf5lxcGMHm1Y3EnG
Aa7xkBvi0xoC6603QZ8ArcDJP3Xdd1s8V3g3hZNQ51c66RVOTo/dHVEL94vz7abi
uilzq9skQ1NhYwsuoSOJMsZrHRBeRIe09Df2He6/uSSNCAI37OWb4Ht/+JHwcs+7
ku2LiBFS4o0+ZZiUFN9jPVxvROropXMluPgZMTAkj72vnSv/IwhMKld642v11oc3
ahk8XI4ofvQSlCsRHeX6f69y202WxvawAAb7aZanaZfpuiAYXwb5THuk6395n4dS
xvcGXRS/UOZvf+ESbVgIQWbSybwNv5B+J/+o3nBIq6836k51oH+sbRXtxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqG2S8hEVzkmOU0LdX5ee12mIaqMB8GA1UdIwQY
MBaAFLMcDUhkYLcWNwPl/02K3tl4iMdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3h3TlNHUmd0eFkzQS1YX1RZcmUyWGlJeDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOTQ0MWMtMjgxYy00ZTAyLTlhOTEt
ODI0M2I3ZGIxMDVlLzEvc3h3TlNHUmd0eFkzQS1YX1RZcmUyWGlJeDAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yOTQ0MWMtMjgxYy00ZTAyLTlhOTEtODI0M2I3ZGIxMDVl
LzEvc3h3TlNHUmd0eFkzQS1YX1RZcmUyWGlJeDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0Igpe7x
AMw66/ys7X3vu/pYEmujADES/y2dEG21pkNRW7yD5NT34K04fHujB8eImLPstJBZ
/mT4aNnOjhuh7OSMOLkLMRSHUMl5zctzkmiO1BgpDGe6eCeI4TRzR7uZxGZs971v
dii/4fYmbnzkVbAAVV0uHnlX0NEDat5RZ1gTVtp1wWeVrEZwNFJtLr0XwI3V0lNh
gZY12Y8oxUR8QliXaQMtrMIQU5bRKVazs+lHosSP9ocyXjsQWP/gd60vwCDdzpY9
0dkCiDI32m6TbGP9NmxkyHwhYiqIh5ks/PpE9kWrmPXpKrhuVgDyxzqe0O3Tl+2V
H7dOr7fq6a9rqA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:49 2025 by rpki-client