Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
File: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft (raw, json)
Hash identifier: Zj5n13adCviyXw0Bbx/ZjQJrRaRO/Zz5FbdWQ95aCnU=
Subject key identifier: B7:78:B8:ED:66:26:62:FE:89:81:6F:D6:94:F2:0E:61:EE:C7:0D:1E
Authority key identifier: C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
Certificate issuer: /CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
Certificate serial: 0194BCA9EA3245DC3A3FE265EBA147747F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
Manifest number: 0396
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: e-ekxZnIJuci57HrEPz7zGue28s.roa (hash: 8H4l0N/E0NCOJoBHvZIBH7Jz+P9G/e+mdO0E4zzVLoo=)
2: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl (hash: RwFbr7hinP49K2Q3y/zMvUK0OthPh5Qtn9wpIwmJU08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ea:32:45:dc:3a:3f:e2:65:eb:a1:47:74:7f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=b778b8ed662662fe89816fd694f20e61eec70d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fc:7d:1f:fa:df:5f:3b:46:fa:8d:a0:38:7c:
87:61:e3:58:f0:fa:6d:b1:6f:f6:c1:e5:a3:38:66:
8a:f5:8c:68:03:05:ca:54:4e:6a:7f:49:fe:56:f4:
8e:f0:bc:18:8f:12:cb:32:44:99:67:b8:e5:57:f6:
8e:d0:35:19:94:e1:cc:e5:53:43:83:25:6d:36:b3:
b0:57:d8:f5:5e:0f:74:b9:1f:00:b2:94:1b:53:39:
bc:27:98:36:14:0d:f9:50:07:09:eb:74:f6:2c:96:
7e:df:66:0d:ff:3d:e1:29:2d:bc:47:59:d1:19:40:
60:a2:7a:3c:31:c8:66:1e:32:c3:60:77:00:9c:85:
b4:db:be:53:23:10:e3:33:80:3f:62:16:f7:01:54:
a7:a2:09:c1:0a:0f:59:61:70:63:8e:45:23:75:3d:
2a:31:1a:34:c0:76:46:bb:76:49:8c:83:ba:ae:1c:
21:4a:87:b7:1a:a4:3c:bd:d9:32:07:d5:b5:7d:11:
25:7e:8c:e4:26:52:07:a0:59:c9:b7:1d:58:4a:78:
16:d8:8c:ed:cd:1f:99:c9:ed:b0:2e:26:de:2a:ed:
86:e0:b1:43:e8:2d:b5:aa:63:c5:7a:8e:74:7c:5d:
4e:79:b8:36:ea:60:24:8a:22:f4:0f:c6:3e:51:be:
b1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:78:B8:ED:66:26:62:FE:89:81:6F:D6:94:F2:0E:61:EE:C7:0D:1E
X509v3 Authority Key Identifier:
keyid:C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:68:bd:3e:18:07:dc:d7:b0:46:1e:24:a0:30:09:bf:09:66:
1c:70:03:de:16:9d:eb:d0:dd:36:66:1a:b8:36:9f:dc:ce:88:
70:84:e2:e8:d0:07:dc:36:2f:f5:a3:a0:2a:a8:d8:1d:60:ff:
21:7c:b6:a0:85:3e:7f:ee:22:09:32:65:4c:d8:c6:56:3a:5c:
ae:c3:ef:d6:ba:48:87:4b:72:81:3f:71:49:c9:e7:4b:5b:99:
87:f5:a8:f6:40:fc:80:fb:b6:b9:70:3b:81:1a:3e:94:a0:49:
ac:48:96:93:88:76:27:eb:14:fd:be:04:e5:52:25:27:60:a7:
7d:12:6f:fb:c4:53:34:9d:d6:e0:22:7a:f8:bd:34:b5:3a:99:
c8:e6:00:b1:f9:b3:71:df:ce:c8:f8:07:81:60:cd:38:91:e2:
60:7b:c7:20:60:60:ca:e1:fe:52:78:ab:88:9b:7b:92:44:88:
2e:c8:28:c2:ab:fd:8a:74:b3:76:95:dd:35:17:bd:f6:0a:48:
43:36:d6:c7:7b:5e:e9:5a:61:db:60:0e:ee:d4:8e:50:1e:eb:
59:0c:e5:50:d2:82:02:7f:07:85:34:25:15:e9:30:f3:7c:f2:
44:44:24:81:87:8f:4a:91:5e:ca:93:c8:2e:90:dd:1c:c6:8f:
74:3f:35:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qeoyRdw6P+Jl66FHdH9lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2M2JlNzUzNzQ2NzhkYjNhMDQ5ZjZhM2VmMmFmYWI3MGQ0
ZjZmMjcwHhcNMjUwMTMxMTQwMDM5WhcNMjUwMjAxMTQwMDM5WjAzMTEwLwYDVQQD
EyhiNzc4YjhlZDY2MjY2MmZlODk4MTZmZDY5NGYyMGU2MWVlYzcwZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivx9H/rfXztG+o2gOHyHYeNY8Ppt
sW/2weWjOGaK9YxoAwXKVE5qf0n+VvSO8LwYjxLLMkSZZ7jlV/aO0DUZlOHM5VND
gyVtNrOwV9j1Xg90uR8AspQbUzm8J5g2FA35UAcJ63T2LJZ+32YN/z3hKS28R1nR
GUBgono8MchmHjLDYHcAnIW0275TIxDjM4A/Yhb3AVSnognBCg9ZYXBjjkUjdT0q
MRo0wHZGu3ZJjIO6rhwhSoe3GqQ8vdkyB9W1fRElfozkJlIHoFnJtx1YSngW2Izt
zR+Zye2wLibeKu2G4LFD6C21qmPFeo50fF1Oebg26mAkiiL0D8Y+Ub6x1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLd4uO1mJmL+iYFv1pTyDmHuxw0eMB8GA1UdIwQY
MBaAFMY751N0Z42zoEn2o+8q+rcNT28nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGp2blUzUm5qYk9nU2Zhajd5cjZ0dzFQYnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wNTY2NzctMWE0YS00OGE2LWE5MmQt
NmIzYjg2N2JkMjMyLzEveGp2blUzUm5qYk9nU2Zhajd5cjZ0dzFQYnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8wNTY2NzctMWE0YS00OGE2LWE5MmQtNmIzYjg2N2JkMjMy
LzEveGp2blUzUm5qYk9nU2Zhajd5cjZ0dzFQYnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWi9PhgH
3NewRh4koDAJvwlmHHAD3had69DdNmYauDaf3M6IcITi6NAH3DYv9aOgKqjYHWD/
IXy2oIU+f+4iCTJlTNjGVjpcrsPv1rpIh0tygT9xScnnS1uZh/Wo9kD8gPu2uXA7
gRo+lKBJrEiWk4h2J+sU/b4E5VIlJ2CnfRJv+8RTNJ3W4CJ6+L00tTqZyOYAsfmz
cd/OyPgHgWDNOJHiYHvHIGBgyuH+UniriJt7kkSILsgowqv9inSzdpXdNRe99gpI
QzbWx3te6Vph22AO7tSOUB7rWQzlUNKCAn8HhTQlFekw83zyREQkgYePSpFeypPI
LpDdHMaPdD812w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:02 2025 by rpki-client