Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier: K17w1aK9ZtT9NalKsrfjhYg7/UEOMNxzGx5gh5SfZSI=
Subject key identifier: BE:80:A2:17:FA:9E:91:1E:F3:42:DA:60:67:E0:90:D6:76:33:C6:D0
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 0194BCA9ABF47A92FCDAD235CE16B0DE801C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number: 0368
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: Cp3a8QStnqXfkMEt3MzPv0NPLfw.roa (hash: JHMaMdRFsj91Cuvd913r35tABZ3iUgx4wHKDhRus+w0=)
2: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: 553QSAcgZ85Q/q7dYJhN9j9iSRXnmktj/ga3sqRwRq0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ab:f4:7a:92:fc:da:d2:35:ce:16:b0:de:80:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=be80a217fa9e911ef342da6067e090d67633c6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:e5:44:88:8b:9e:51:c5:0c:2b:8c:9f:8c:
4c:54:31:ee:b2:e3:d6:58:85:dd:cf:6c:c7:d7:c1:
01:ec:b0:fe:d4:82:ff:b3:80:e3:b9:4f:5f:09:fa:
47:8d:42:f0:1e:bb:d0:8f:2a:3e:20:26:ff:be:d8:
1a:a0:d9:9e:7f:d4:d7:7f:8a:7e:dd:44:8b:7d:e1:
d6:a6:c1:eb:f0:b9:96:67:82:af:00:c5:92:d9:6b:
b7:1b:1a:10:38:e9:ac:fb:b9:58:af:74:d5:29:2f:
31:d1:d4:7a:2c:d8:2e:42:43:56:7f:5d:ca:c3:04:
2b:d0:5a:c4:d6:c1:8a:89:18:3a:db:68:7c:3a:00:
ce:1a:5d:f9:f2:f7:61:f8:fb:2a:05:c2:a1:7b:7f:
57:b3:cd:a2:b0:7e:4f:95:a1:8f:83:ef:10:50:b8:
0e:e9:12:b6:27:8b:d6:86:7d:e4:cb:71:fe:62:8b:
b7:77:d1:d3:a2:65:54:83:af:a9:0c:4f:c5:2c:c3:
5a:6e:1c:1d:cf:cc:74:a8:19:b4:86:d3:b3:0a:65:
e0:c4:4e:7b:ab:3d:95:07:cf:7b:59:ed:cf:8b:51:
0a:75:1f:13:78:a0:d5:59:da:a3:3e:75:44:44:39:
09:f6:c7:ad:57:b6:85:56:7a:d2:1f:1e:62:4a:93:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:80:A2:17:FA:9E:91:1E:F3:42:DA:60:67:E0:90:D6:76:33:C6:D0
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:54:69:dc:30:5c:2e:54:62:14:e1:92:9d:c5:d9:fe:10:13:
80:31:72:7e:14:df:84:89:b5:51:b9:5e:c3:6a:16:79:62:8b:
9c:c4:5a:f9:78:5f:77:41:fa:67:8a:d6:67:64:5f:c4:fa:09:
f4:67:41:32:25:d0:cc:58:17:ce:fb:bd:d8:31:91:da:f8:bd:
26:47:70:f9:1e:27:e6:5e:8d:8b:c6:46:ce:57:aa:f1:4e:38:
73:ac:d2:9d:be:aa:8c:4e:38:26:00:b1:24:d3:e5:3f:86:1b:
e2:ce:78:31:08:a9:19:af:6f:5c:b4:e1:69:39:7c:00:2a:7c:
cc:2a:79:e1:ae:cb:a7:8f:4b:76:f3:78:eb:7d:56:11:e4:f8:
a5:76:17:a2:97:75:13:4b:d5:77:8d:59:87:86:ff:13:fe:58:
43:1b:ba:3d:84:ff:d6:37:da:7e:5b:4c:80:98:a2:48:6f:96:
b6:6b:79:fb:7e:a6:40:d2:1a:9d:cd:90:11:b5:4d:10:33:78:
a5:bf:4c:f2:ff:e2:06:ba:92:0f:97:10:44:9d:31:86:e5:f4:
48:6a:e0:83:8f:0c:64:62:4d:e7:ae:c2:2f:55:2c:a1:09:1c:
1e:ea:7f:7e:b2:a5:cd:8e:9f:6c:c7:c0:a8:e0:ea:80:b7:ca:
b5:d2:ab:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qav0epL82tI1zhaw3oAcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OTQ3YTQxNGE4ODMwNTE1NjU2ZDczOGE3ODM4Mjg5MDE2
MDM3N2QwHhcNMjUwMTMxMTQwMDIzWhcNMjUwMjAxMTQwMDIzWjAzMTEwLwYDVQQD
EyhiZTgwYTIxN2ZhOWU5MTFlZjM0MmRhNjA2N2UwOTBkNjc2MzNjNmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAravlRIiLnlHFDCuMn4xMVDHusuPW
WIXdz2zH18EB7LD+1IL/s4DjuU9fCfpHjULwHrvQjyo+ICb/vtgaoNmef9TXf4p+
3USLfeHWpsHr8LmWZ4KvAMWS2Wu3GxoQOOms+7lYr3TVKS8x0dR6LNguQkNWf13K
wwQr0FrE1sGKiRg622h8OgDOGl358vdh+PsqBcKhe39Xs82isH5PlaGPg+8QULgO
6RK2J4vWhn3ky3H+You3d9HTomVUg6+pDE/FLMNabhwdz8x0qBm0htOzCmXgxE57
qz2VB897We3Pi1EKdR8TeKDVWdqjPnVERDkJ9setV7aFVnrSHx5iSpMYZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6Aohf6npEe80LaYGfgkNZ2M8bQMB8GA1UdIwQY
MBaAFMWUekFKiDBRVlbXOKeDgokBYDd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85MmUwYTYtYjNlMy00NTVkLTkyY2Yt
MGU1NDk0YWY1ODQwLzEveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85MmUwYTYtYjNlMy00NTVkLTkyY2YtMGU1NDk0YWY1ODQw
LzEveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1Rp3DBc
LlRiFOGSncXZ/hATgDFyfhTfhIm1Ublew2oWeWKLnMRa+Xhfd0H6Z4rWZ2RfxPoJ
9GdBMiXQzFgXzvu92DGR2vi9Jkdw+R4n5l6Ni8ZGzleq8U44c6zSnb6qjE44JgCx
JNPlP4Yb4s54MQipGa9vXLThaTl8ACp8zCp54a7Lp49LdvN4631WEeT4pXYXopd1
E0vVd41Zh4b/E/5YQxu6PYT/1jfafltMgJiiSG+Wtmt5+36mQNIanc2QEbVNEDN4
pb9M8v/iBrqSD5cQRJ0xhuX0SGrgg48MZGJN567CL1UsoQkcHup/frKlzY6fbMfA
qODqgLfKtdKrhA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:12:48 2025 by rpki-client