Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
File: XX9jQBQHwcx5excDToE9IlT5dz4.mft (raw, json)
Hash identifier: yWBp6r8SghS4vl7rxTexqMBxd2e5iPWbwgIY0Kj7l9g=
Subject key identifier: 45:7D:CB:C2:44:65:92:9C:C3:9E:BA:8A:AA:2D:A6:33:A8:4B:1A:49
Authority key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
Certificate issuer: /CN=5d7f63401407c1cc797b17034e813d2254f9773e
Certificate serial: 0194BC0528E1EE0F3DF43CB3F0A5DB7EF366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
Manifest number: 0AC1
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: XX9jQBQHwcx5excDToE9IlT5dz4.crl (hash: TdVZDfGcjp8bAMkvRHcgxXowrMkt/sPONJlpm0Osxfs=)
2: d_GxW2d1XGEYH2UR9fC88UUW3QY.roa (hash: uor8f2a3ITsSo8ZIn5M2P4KmPLaok++1jFjqHJFf6Ko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:28:e1:ee:0f:3d:f4:3c:b3:f0:a5:db:7e:f3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7f63401407c1cc797b17034e813d2254f9773e
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=457dcbc24465929cc39eba8aaa2da633a84b1a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4b:7d:e4:75:54:f1:86:a6:c4:b8:e1:0f:0d:
63:13:4f:c0:fb:84:3a:79:91:34:5f:27:c4:2e:f0:
5a:5b:aa:c7:9f:2b:81:c9:f2:7e:bc:93:fe:df:42:
26:e4:af:5d:d4:33:12:4e:13:10:0e:d2:11:8e:a9:
d4:b2:5e:67:96:68:f0:e2:a1:cd:a3:9c:61:2c:08:
68:8e:ce:ef:63:c9:5e:2e:6e:35:dd:d8:46:0a:64:
6e:fb:04:69:e2:31:6a:96:25:7e:02:04:86:d0:09:
fa:e1:0c:c2:65:93:98:28:9c:f0:33:24:ae:ef:73:
19:6f:9b:00:28:f3:91:95:2a:f5:02:b4:a4:6b:5b:
e7:7c:0e:c3:0a:da:b1:17:94:69:16:04:05:a5:45:
69:ab:17:de:ad:77:1f:cc:88:73:e2:4f:fb:0b:de:
2a:f3:cf:f2:78:c3:c2:64:a4:8a:e1:2a:28:0b:cd:
46:37:07:9b:d3:78:b0:8a:44:fe:6e:a9:38:a2:db:
85:08:14:fc:a2:ff:3a:3c:b2:c7:d2:34:16:a9:4f:
fc:94:b1:fb:5e:1d:58:f1:60:09:67:45:b1:0e:db:
1d:2b:d6:67:f0:5c:f9:b0:95:30:48:33:db:f5:33:
df:d3:a1:ed:7e:3c:1c:e0:67:e7:ff:fb:89:8d:19:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7D:CB:C2:44:65:92:9C:C3:9E:BA:8A:AA:2D:A6:33:A8:4B:1A:49
X509v3 Authority Key Identifier:
keyid:5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:35:e5:8d:4d:37:df:7e:e2:a8:16:e8:68:52:2a:71:bc:93:
d1:41:9d:fd:fd:6a:34:50:57:62:1d:7b:49:73:ec:d2:03:56:
8c:f4:33:ed:a4:ca:96:f1:7a:ec:aa:74:50:09:28:04:f2:79:
b6:9d:56:42:30:52:79:1e:6d:f4:09:93:d7:b9:4b:67:ba:f1:
43:9c:90:25:fe:9f:22:67:f4:cf:d2:9a:3b:c8:9c:e7:55:67:
eb:2c:8b:ba:65:f5:68:32:a0:f7:b8:83:24:30:7a:0d:78:91:
07:d9:35:a1:be:9d:16:f9:61:6a:12:b1:35:7a:10:70:c4:83:
2a:cc:e4:90:20:09:0f:9d:91:ef:b9:7f:81:98:e3:c6:f7:bc:
87:b6:42:54:ba:65:bb:b7:39:4d:6e:b2:5b:fd:e4:91:a0:01:
66:37:5d:84:62:2d:c7:58:ad:ab:f2:c3:2b:e3:7a:2e:b7:bf:
2d:7c:35:3a:7d:5b:db:aa:00:ac:e3:27:91:a9:4d:41:a6:a3:
d5:71:47:6d:19:1e:dd:40:95:f2:08:98:b0:84:64:b0:2f:32:
de:7f:24:15:0a:75:4a:94:98:ae:3e:21:9f:7e:e7:35:00:00:
c9:b4:0b:d1:bf:ad:88:93:dd:84:8e:88:80:16:5a:e2:95:cd:
cc:82:d4:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BSjh7g899Dyz8KXbfvNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkN2Y2MzQwMTQwN2MxY2M3OTdiMTcwMzRlODEzZDIyNTRm
OTc3M2UwHhcNMjUwMTMxMTEwMDQyWhcNMjUwMjAxMTEwMDQyWjAzMTEwLwYDVQQD
Eyg0NTdkY2JjMjQ0NjU5MjljYzM5ZWJhOGFhYTJkYTYzM2E4NGIxYTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEt95HVU8YamxLjhDw1jE0/A+4Q6
eZE0XyfELvBaW6rHnyuByfJ+vJP+30Im5K9d1DMSThMQDtIRjqnUsl5nlmjw4qHN
o5xhLAhojs7vY8leLm413dhGCmRu+wRp4jFqliV+AgSG0An64QzCZZOYKJzwMySu
73MZb5sAKPORlSr1ArSka1vnfA7DCtqxF5RpFgQFpUVpqxferXcfzIhz4k/7C94q
88/yeMPCZKSK4SooC81GNweb03iwikT+bqk4otuFCBT8ov86PLLH0jQWqU/8lLH7
Xh1Y8WAJZ0WxDtsdK9Zn8Fz5sJUwSDPb9TPf06Htfjwc4Gfn//uJjRnsywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEV9y8JEZZKcw566iqotpjOoSxpJMB8GA1UdIwQY
MBaAFF1/Y0AUB8HMeXsXA06BPSJU+Xc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFg5alFCUUh3Y3g1ZXhjRFRvRTlJbFQ1ZHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81NTAwMDQtZTFhNi00NTY5LWFlNjMt
MzNmYjE0NTJiYjBhLzEvWFg5alFCUUh3Y3g1ZXhjRFRvRTlJbFQ1ZHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81NTAwMDQtZTFhNi00NTY5LWFlNjMtMzNmYjE0NTJiYjBh
LzEvWFg5alFCUUh3Y3g1ZXhjRFRvRTlJbFQ1ZHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDXljU03
337iqBboaFIqcbyT0UGd/f1qNFBXYh17SXPs0gNWjPQz7aTKlvF67Kp0UAkoBPJ5
tp1WQjBSeR5t9AmT17lLZ7rxQ5yQJf6fImf0z9KaO8ic51Vn6yyLumX1aDKg97iD
JDB6DXiRB9k1ob6dFvlhahKxNXoQcMSDKszkkCAJD52R77l/gZjjxve8h7ZCVLpl
u7c5TW6yW/3kkaABZjddhGItx1itq/LDK+N6Lre/LXw1On1b26oArOMnkalNQaaj
1XFHbRke3UCV8giYsIRksC8y3n8kFQp1SpSYrj4hn37nNQAAybQL0b+tiJPdhI6I
gBZa4pXNzILUuw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:52 2025 by rpki-client