Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
File: xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json)
Hash identifier: 00YNGumZdGyJMLWnbG/sFs4SSecXcr1O0Nv2lJhneTU=
Subject key identifier: A5:99:BF:EE:09:58:20:87:2E:F8:AE:AB:B3:3D:A4:61:53:B9:A7:0E
Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
Certificate issuer: /CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Certificate serial: 0194BC3BD98EF9929DF6AB54BE78EDD2F204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
Manifest number: 0343
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: tSYSYm63yj3qobuZYMSr1LAsH4E.roa (hash: e9vbUkUz5x9f5ya8J4QgHE0l9ibgPIgGHQ86whMQdU8=)
2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: ylPhyMxuGEibgRRkMgVKLfHYiyv9CvgrwBuxW8Cr34M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d9:8e:f9:92:9d:f6:ab:54:be:78:ed:d2:f2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=a599bfee095820872ef8aeabb33da46153b9a70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:b2:58:dd:32:a3:e2:30:20:70:38:0d:c1:
b4:49:0d:38:5c:28:cb:5a:f5:80:d5:ed:48:79:24:
56:85:5d:1f:80:af:0e:fa:59:90:68:81:ee:b8:0f:
67:29:dd:1d:0e:73:ab:15:42:1b:82:44:77:63:21:
d2:ff:b3:61:7d:28:9d:68:78:c1:fb:47:b3:3d:b6:
ab:7e:ba:5e:56:36:c5:9f:2e:d5:f2:83:d5:89:49:
c6:d1:d1:5c:20:8e:49:67:8d:02:68:6c:5e:0e:3f:
e5:88:16:6e:74:e5:b3:c0:50:77:ea:7c:e3:88:99:
bf:ac:8b:29:eb:cc:7e:eb:41:ba:c9:85:73:cf:84:
d1:5f:61:c1:f3:23:3b:f6:f6:99:5e:cd:50:df:d8:
d5:7f:8a:4a:55:b6:c6:82:e8:21:2e:55:38:4f:57:
92:47:ae:21:b8:62:1c:3a:03:84:8a:eb:e2:db:c4:
c3:c5:fc:c1:3d:65:70:21:83:6d:18:88:7e:95:18:
45:83:a3:4b:b4:1b:9f:3c:6b:d1:f0:00:1c:ea:92:
9b:28:e8:65:3c:62:04:16:fc:06:1d:0c:2a:a8:79:
91:b8:43:28:6b:3e:95:9e:59:0e:63:60:46:19:3b:
48:89:4f:c2:7a:e0:b7:58:f8:98:fe:cf:c9:29:08:
26:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:99:BF:EE:09:58:20:87:2E:F8:AE:AB:B3:3D:A4:61:53:B9:A7:0E
X509v3 Authority Key Identifier:
keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:49:18:ff:2c:f5:e8:94:c9:e0:e2:81:e5:f0:d6:5d:f3:b9:
d9:79:12:8e:b8:79:68:c4:02:bc:45:9d:bf:c5:5b:01:d5:08:
df:f7:04:72:5e:3e:5a:78:1d:15:73:d3:1e:2d:cb:4a:ff:0a:
c6:49:d2:9a:86:b9:8e:2e:16:78:b4:54:1e:c8:ec:c3:a6:8b:
8b:12:de:15:6c:12:05:3d:c8:c1:49:03:8f:a3:99:1d:1e:f3:
3e:cc:66:59:ec:49:33:36:a9:1b:00:21:de:e7:42:d0:7f:e6:
ca:7e:90:a1:45:73:80:58:24:5c:a1:e6:0a:dd:89:32:f6:43:
d2:18:37:85:3c:3b:9e:e1:0e:c1:19:3c:ed:fc:4a:67:6e:74:
be:84:62:0e:4d:bc:db:b8:3b:b5:a7:84:88:d4:fc:a9:c1:4a:
a4:4f:3b:99:30:9f:28:a6:55:50:a3:5a:6e:33:bc:f1:fd:3d:
48:16:6a:b3:9d:42:fe:9f:b5:8a:eb:1b:34:d5:84:f0:2f:cc:
c0:b9:70:5f:ca:b8:58:39:29:ca:cc:59:b2:e4:e1:f5:42:bd:
ae:db:30:6d:72:53:f1:0f:aa:e8:aa:f2:9e:28:84:ee:b8:17:
9c:9a:78:24:28:4f:6c:4c:0c:a3:a7:83:da:3f:71:26:67:66:
bf:2f:67:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9mO+ZKd9qtUvnjt0vIEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YzRiM2FlNTlkOTgxZjI1MGNjODdkYWI1OTc4NTRhYmVk
N2EzMDAwHhcNMjUwMTMxMTIwMDI2WhcNMjUwMjAxMTIwMDI2WjAzMTEwLwYDVQQD
EyhhNTk5YmZlZTA5NTgyMDg3MmVmOGFlYWJiMzNkYTQ2MTUzYjlhNzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLGyWN0yo+IwIHA4DcG0SQ04XCjL
WvWA1e1IeSRWhV0fgK8O+lmQaIHuuA9nKd0dDnOrFUIbgkR3YyHS/7NhfSidaHjB
+0ezPbarfrpeVjbFny7V8oPViUnG0dFcII5JZ40CaGxeDj/liBZudOWzwFB36nzj
iJm/rIsp68x+60G6yYVzz4TRX2HB8yM79vaZXs1Q39jVf4pKVbbGgughLlU4T1eS
R64huGIcOgOEiuvi28TDxfzBPWVwIYNtGIh+lRhFg6NLtBufPGvR8AAc6pKbKOhl
PGIEFvwGHQwqqHmRuEMoaz6VnlkOY2BGGTtIiU/CeuC3WPiY/s/JKQgm5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWZv+4JWCCHLviuq7M9pGFTuacOMB8GA1UdIwQY
MBaAFMXEs65Z2YHyUMyH2rWXhUq+16MAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGNTenJsblpnZkpReklmYXRaZUZTcjdYb3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS85ZjU0YTYtOTMzZi00N2RlLTg3MjYt
ZWRkZjUyN2U4ZjJkLzEveGNTenJsblpnZkpReklmYXRaZUZTcjdYb3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS85ZjU0YTYtOTMzZi00N2RlLTg3MjYtZWRkZjUyN2U4ZjJk
LzEveGNTenJsblpnZkpReklmYXRaZUZTcjdYb3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUkY/yz1
6JTJ4OKB5fDWXfO52XkSjrh5aMQCvEWdv8VbAdUI3/cEcl4+WngdFXPTHi3LSv8K
xknSmoa5ji4WeLRUHsjsw6aLixLeFWwSBT3IwUkDj6OZHR7zPsxmWexJMzapGwAh
3udC0H/myn6QoUVzgFgkXKHmCt2JMvZD0hg3hTw7nuEOwRk87fxKZ250voRiDk28
27g7taeEiNT8qcFKpE87mTCfKKZVUKNabjO88f09SBZqs51C/p+1iusbNNWE8C/M
wLlwX8q4WDkpysxZsuTh9UK9rtswbXJT8Q+q6KryniiE7rgXnJp4JChPbEwMo6eD
2j9xJmdmvy9nRQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:30 2025 by rpki-client