Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier: /yxtCx21qkwcldtVDZIDrtue+pK96U36fgll7YLQChM=
Subject key identifier: A6:A2:72:CA:72:E2:4E:0C:8A:E6:00:24:7C:B3:C4:26:D8:F7:54:07
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 0194BCE0E9387598A8B3AB86A1D506F75AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number: 1066
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: UISsCJTg4vC+4cPGlqqiY6S38NHUM2N0MTKakXMReIk=)
2: uOaT4j9EVJiz8EIOTgjvWTshz84.roa (hash: 6VQK7lQU8B+WO6nBknTZwm7r/sjint5WViRnRUFwHxU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e9:38:75:98:a8:b3:ab:86:a1:d5:06:f7:5a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=a6a272ca72e24e0c8ae600247cb3c426d8f75407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:aa:3d:a9:a4:98:f5:12:14:38:7d:6f:81:c0:
20:7d:5b:2b:13:cb:a9:28:ae:b0:4b:e2:c6:0c:fc:
e0:f0:ac:5d:27:96:a4:b3:97:06:e5:64:ab:ab:d2:
b1:75:a8:f4:a7:b3:b5:f6:c9:02:5e:15:7b:2a:71:
7c:54:e3:04:1c:51:67:9a:57:00:28:19:33:c4:3d:
cd:7a:d8:d0:9c:e8:c7:6c:70:80:72:f9:df:12:0e:
0b:0c:a2:c0:78:3c:52:e2:2a:89:a3:29:e9:63:c7:
a8:2d:4c:20:6d:39:86:e0:c2:17:5d:14:d2:b5:0c:
ba:de:e2:9e:01:78:66:62:50:43:47:d0:8a:3d:94:
42:a6:dc:af:6a:c0:a1:0b:9c:7e:f2:04:b2:b7:5d:
72:6f:29:fe:95:60:6f:38:a4:92:0c:a0:cb:59:6f:
35:d7:88:98:4a:0f:d5:71:81:3c:6a:dc:01:0e:6f:
a2:b6:41:e4:26:1d:43:b4:84:46:88:71:26:8b:e3:
86:5c:6e:57:53:74:0f:35:9e:da:b2:58:6a:5d:b8:
f1:1e:aa:17:3c:d1:d2:a7:33:1c:58:7b:c9:8c:5d:
c5:4b:c8:10:d5:8c:5c:0f:1b:44:0a:ea:ee:02:55:
04:3e:e9:3f:3f:a2:d3:98:15:4e:12:cb:87:54:29:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A2:72:CA:72:E2:4E:0C:8A:E6:00:24:7C:B3:C4:26:D8:F7:54:07
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f6:b5:1d:42:06:2d:55:39:15:2b:4f:31:e3:4f:3d:ec:27:
1a:1a:99:ee:ed:c8:38:bd:55:7b:90:75:27:86:77:21:ed:39:
40:54:3a:b5:a3:55:44:57:a5:f3:51:8a:85:eb:08:b7:53:90:
62:75:d4:08:b9:d0:21:aa:2e:8c:85:f3:2e:95:c0:84:1d:49:
0b:4a:be:ca:d6:e5:76:fa:7c:ad:bc:32:a3:f7:a2:11:44:56:
79:db:a5:99:af:17:44:7c:79:42:cb:7b:29:6c:90:a5:fd:f5:
3b:3d:00:82:b3:22:ef:58:ce:61:5c:d8:ef:63:7a:54:1b:ad:
59:c2:b0:e3:35:2e:4a:d7:75:61:b5:83:fd:19:1a:b3:1c:ab:
2b:e3:41:87:db:d7:cc:0f:37:bb:9f:cc:26:a1:ac:95:c1:6c:
38:b1:b9:7d:32:8e:a1:d4:e5:11:8a:a7:aa:ce:ba:b6:4f:95:
9f:19:f6:59:fe:49:1c:c7:be:fb:5e:36:1e:6b:a8:57:1e:82:
39:f5:d2:da:69:7d:a0:df:d4:a3:9b:a5:ae:cb:54:e3:88:7f:
59:a5:bd:a1:ae:cf:2f:7c:f7:21:7d:56:a4:4e:bb:5c:19:00:
0c:a9:ce:b3:6b:e0:65:79:b4:5c:10:7c:0f:8a:4b:a5:51:0e:
de:be:4c:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Ok4dZios6uGodUG91rxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkODI2NjcyZTY4ZjNkYTVkYjUwZWQ4MWJhZGI4ZDMzYmRj
Y2QyYmEwHhcNMjUwMTMxMTUwMDQzWhcNMjUwMjAxMTUwMDQzWjAzMTEwLwYDVQQD
EyhhNmEyNzJjYTcyZTI0ZTBjOGFlNjAwMjQ3Y2IzYzQyNmQ4Zjc1NDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ko9qaSY9RIUOH1vgcAgfVsrE8up
KK6wS+LGDPzg8KxdJ5aks5cG5WSrq9Kxdaj0p7O19skCXhV7KnF8VOMEHFFnmlcA
KBkzxD3NetjQnOjHbHCAcvnfEg4LDKLAeDxS4iqJoynpY8eoLUwgbTmG4MIXXRTS
tQy63uKeAXhmYlBDR9CKPZRCptyvasChC5x+8gSyt11ybyn+lWBvOKSSDKDLWW81
14iYSg/VcYE8atwBDm+itkHkJh1DtIRGiHEmi+OGXG5XU3QPNZ7aslhqXbjxHqoX
PNHSpzMcWHvJjF3FS8gQ1YxcDxtECuruAlUEPuk/P6LTmBVOEsuHVCm9jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaicspy4k4MiuYAJHyzxCbY91QHMB8GA1UdIwQY
MBaAFF2CZnLmjz2l21DtgbrbjTO9zNK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFlKbWN1YVBQYVhiVU8yQnV0dU5NNzNNMHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jNzlkMTMtOWVhMi00ZWVkLThkZDIt
Y2VkYWI0NjNlZTViLzEvWFlKbWN1YVBQYVhiVU8yQnV0dU5NNzNNMHJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jNzlkMTMtOWVhMi00ZWVkLThkZDItY2VkYWI0NjNlZTVi
LzEvWFlKbWN1YVBQYVhiVU8yQnV0dU5NNzNNMHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARva1HUIG
LVU5FStPMeNPPewnGhqZ7u3IOL1Ve5B1J4Z3Ie05QFQ6taNVRFel81GKhesIt1OQ
YnXUCLnQIaoujIXzLpXAhB1JC0q+ytbldvp8rbwyo/eiEURWedulma8XRHx5Qst7
KWyQpf31Oz0AgrMi71jOYVzY72N6VButWcKw4zUuStd1YbWD/RkasxyrK+NBh9vX
zA83u5/MJqGslcFsOLG5fTKOodTlEYqnqs66tk+Vnxn2Wf5JHMe++142HmuoVx6C
OfXS2ml9oN/Uo5ulrstU44h/WaW9oa7PL3z3IX1WpE67XBkADKnOs2vgZXm0XBB8
D4pLpVEO3r5MyQ==
-----END CERTIFICATE-----
Generated at Thu May 1 10:18:02 2025 by rpki-client