Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
File: xb14VKoFD9blUPx80CtVhzC_u3o.mft (raw, json)
Hash identifier: BsjR+0KObzVbUtiAEO7lVUd4hOisqJYXvgBUwsw1nCg=
Subject key identifier: 22:A7:04:67:75:EF:2F:33:5C:EA:35:D7:79:62:5B:A8:F6:06:B1:91
Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
Certificate issuer: /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Certificate serial: 0194BD85960E4A0EC5CBE1B89129256315C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
Manifest number: 0379
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: 5uFqMN3aXlbPQyR_zV-aShdoN_Y.roa (hash: jy9SGKilmmhulS0SQ8USL/F90L5q42BS/yYoLYQj470=)
2: xb14VKoFD9blUPx80CtVhzC_u3o.crl (hash: fdppXPrrAqZqUN4zuF0mdxbFDRjRFU/HMoEgx5qFniU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:96:0e:4a:0e:c5:cb:e1:b8:91:29:25:63:15:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=22a7046775ef2f335cea35d779625ba8f606b191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:a4:2f:89:16:42:1c:90:52:40:61:c1:7a:
9e:87:bb:0e:b7:81:ce:60:f5:a5:a4:53:d8:c4:7d:
7a:1f:cf:8c:bb:28:6b:4d:9d:f6:51:91:1f:62:5e:
d2:b8:1d:73:d5:cc:31:41:db:f5:af:0b:c7:6f:3c:
78:9b:eb:f6:c8:02:d8:59:b9:a9:aa:a5:b0:e6:7d:
d1:f5:db:3f:07:97:9d:55:57:0e:f7:83:de:09:a9:
0a:d7:eb:38:c9:3b:5c:e6:fb:46:94:30:f1:44:fb:
df:9c:cb:37:28:8a:34:9c:9c:91:d4:5c:6b:de:0e:
9a:f6:23:a1:0a:b3:c5:e6:89:c1:5c:1a:ca:19:62:
b5:c5:1b:fb:34:07:97:e2:36:cc:72:86:3d:f1:b7:
0e:06:c2:2f:8d:44:43:32:54:56:4a:73:fd:1c:41:
b6:7d:32:14:40:4c:31:18:02:82:6b:c2:06:5d:66:
a2:5b:a9:f9:9b:f7:83:06:8c:17:19:e2:9d:32:6a:
d5:a7:e4:5a:b1:32:48:32:ba:20:36:74:4e:6c:2f:
45:97:65:2f:15:1d:e3:5b:d5:39:90:0a:a4:4d:4c:
0d:97:36:7a:b0:ef:ce:e2:c8:fb:0d:37:d7:3d:8d:
30:74:96:7c:c5:cc:f5:c4:66:3a:b8:94:96:2d:a4:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A7:04:67:75:EF:2F:33:5C:EA:35:D7:79:62:5B:A8:F6:06:B1:91
X509v3 Authority Key Identifier:
keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:99:aa:29:1a:20:9f:2f:ac:69:cb:b2:92:d3:a8:11:88:78:
0a:8f:bf:ae:24:5c:a2:de:e8:8a:3f:fa:35:f5:14:41:98:62:
3b:99:71:26:b7:69:c9:b9:73:f5:13:8b:32:5f:27:fc:e0:23:
8e:65:6e:f5:ce:b4:4e:bd:e2:fb:c1:08:7e:ea:f8:5b:be:ba:
83:30:ec:3e:e9:43:f9:70:b3:29:64:a3:3c:c3:ee:8a:b6:f1:
50:db:4a:87:e9:fd:ec:6a:e6:d8:29:13:5d:ec:aa:5b:3e:14:
53:fb:81:94:5d:48:89:ae:cd:54:ff:13:31:d7:41:12:ba:1d:
93:cf:76:8e:c8:b9:73:90:cf:79:6c:83:39:4f:67:89:e1:03:
35:ef:9f:f9:a1:d2:8b:35:14:38:63:39:85:31:cd:a3:2d:37:
30:d6:78:7b:e4:73:1d:09:08:9f:28:31:d8:64:c2:17:c3:82:
da:55:38:91:e9:27:09:94:8c:ff:e1:9e:a8:1a:a6:84:44:13:
83:41:fb:79:7d:29:92:63:1c:b6:b7:bd:a1:e0:25:29:7e:0b:
95:57:10:cf:6b:8b:21:91:7f:d0:66:75:70:b2:5f:91:87:a7:
0d:06:e1:20:3c:7c:8b:dc:24:bf:52:3f:e5:49:d7:2c:1d:f4:
e5:9a:3e:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZYOSg7Fy+G4kSklYxXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YmQ3ODU0YWEwNTBmZDZlNTUwZmM3Y2QwMmI1NTg3MzBi
ZmJiN2EwHhcNMjUwMTMxMTgwMDM1WhcNMjUwMjAxMTgwMDM1WjAzMTEwLwYDVQQD
EygyMmE3MDQ2Nzc1ZWYyZjMzNWNlYTM1ZDc3OTYyNWJhOGY2MDZiMTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU2kL4kWQhyQUkBhwXqeh7sOt4HO
YPWlpFPYxH16H8+MuyhrTZ32UZEfYl7SuB1z1cwxQdv1rwvHbzx4m+v2yALYWbmp
qqWw5n3R9ds/B5edVVcO94PeCakK1+s4yTtc5vtGlDDxRPvfnMs3KIo0nJyR1Fxr
3g6a9iOhCrPF5onBXBrKGWK1xRv7NAeX4jbMcoY98bcOBsIvjURDMlRWSnP9HEG2
fTIUQEwxGAKCa8IGXWaiW6n5m/eDBowXGeKdMmrVp+RasTJIMrogNnRObC9Fl2Uv
FR3jW9U5kAqkTUwNlzZ6sO/O4sj7DTfXPY0wdJZ8xcz1xGY6uJSWLaQoTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKnBGd17y8zXOo113liW6j2BrGRMB8GA1UdIwQY
MBaAFMW9eFSqBQ/W5VD8fNArVYcwv7t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zZjY2NDAtNWQ4Mi00YWM2LTkzODkt
NmZmMWQ0MjdkOTcxLzEveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8zZjY2NDAtNWQ4Mi00YWM2LTkzODktNmZmMWQ0MjdkOTcx
LzEveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyZmqKRog
ny+sacuyktOoEYh4Co+/riRcot7oij/6NfUUQZhiO5lxJrdpyblz9ROLMl8n/OAj
jmVu9c60Tr3i+8EIfur4W766gzDsPulD+XCzKWSjPMPuirbxUNtKh+n97Grm2CkT
XeyqWz4UU/uBlF1Iia7NVP8TMddBErodk892jsi5c5DPeWyDOU9nieEDNe+f+aHS
izUUOGM5hTHNoy03MNZ4e+RzHQkInygx2GTCF8OC2lU4keknCZSM/+GeqBqmhEQT
g0H7eX0pkmMctre9oeAlKX4LlVcQz2uLIZF/0GZ1cLJfkYenDQbhIDx8i9wkv1I/
5UnXLB305Zo+Ug==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:25:47 2025 by rpki-client