Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
File: XEXOsYsUpzcoK3WvC6Fs_9emq64.mft (raw, json)
Hash identifier: oRGa59Vrjod78rg/oNuILdOlazUZ10bnu40R42ML+NQ=
Subject key identifier: E7:25:55:66:BB:40:7F:B7:78:06:54:4B:3E:57:B1:5A:29:C4:A5:09
Authority key identifier: 5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
Certificate issuer: /CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Certificate serial: 0194BD853871A665B122C0199C35654C106A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
Manifest number: 0AC2
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: XEXOsYsUpzcoK3WvC6Fs_9emq64.crl (hash: zgDQxofShTpR0m3wVqG2yhQ7oKmMugi9cuCEaSPAgfo=)
2: mRhBT-NlmD4-d7u0Kc5hjDz1S2g.roa (hash: eEF1vwGGqfylK4nRHvE5xtss/22xA/yBRdsBu2iNecU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:38:71:a6:65:b1:22:c0:19:9c:35:65:4c:10:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=e7255566bb407fb77806544b3e57b15a29c4a509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:53:3c:99:25:f4:d6:c9:74:21:fa:59:23:
73:ed:e7:d8:af:f8:30:87:33:30:dd:c3:0c:bf:47:
89:19:b8:93:94:ad:df:ec:79:6a:fd:c2:59:58:73:
0b:aa:54:3d:6a:a9:99:74:65:54:ed:74:20:0d:88:
7d:23:66:48:02:12:3e:15:d7:2e:dc:ff:10:87:2c:
ee:09:6a:03:89:12:59:e1:cb:7f:b6:7d:75:da:4f:
7e:1f:4a:4d:7d:26:4e:c4:27:1d:93:cf:97:3d:d4:
2e:ab:bc:0a:5c:62:21:4a:bd:b3:18:e3:ae:ce:33:
62:66:20:76:75:0c:ca:a9:52:71:cd:5b:98:61:8b:
cf:66:82:72:2f:c2:6a:d6:f7:8e:37:57:19:6e:dd:
49:37:57:d7:c0:52:a1:a6:c6:3d:04:22:a4:86:64:
42:da:2d:f9:3a:b7:8f:b8:d3:dd:f6:ee:89:28:4b:
f1:69:24:99:cf:33:c1:78:89:14:42:f9:a5:46:ca:
16:5e:23:ac:a6:57:a1:8a:e8:6c:9f:cb:cc:fb:09:
31:af:94:cd:2c:02:20:44:c4:22:6f:60:40:a5:64:
34:2b:33:fe:fb:78:66:fb:da:04:a9:8f:a4:ad:1e:
94:7f:72:9e:56:b4:da:5e:c2:dc:88:38:ff:2e:08:
32:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:25:55:66:BB:40:7F:B7:78:06:54:4B:3E:57:B1:5A:29:C4:A5:09
X509v3 Authority Key Identifier:
keyid:5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0b:1b:e7:dd:da:e1:8a:93:84:55:cb:66:6f:63:9e:d7:c4:
8d:f9:e4:e7:da:64:6d:5b:6d:4e:6d:c1:41:61:60:f1:8d:b9:
bd:92:76:eb:a6:ac:0d:72:ac:02:55:fd:fd:6f:b3:51:02:a1:
13:b8:88:d5:97:0c:a1:6d:e3:53:fd:ef:1d:fc:e1:e6:f3:4b:
7f:bd:c5:fe:1a:a1:2f:3f:ef:ce:5d:37:f7:1c:92:2c:25:9d:
2e:b0:a6:1c:e3:7c:d4:f6:19:5a:95:a1:13:5d:07:2a:81:6e:
d4:18:31:68:b4:28:78:92:f6:88:77:cb:70:3a:ab:f0:17:e0:
41:02:de:50:a1:3a:c9:18:52:bc:09:bd:49:43:4d:63:6d:10:
2d:0f:a9:61:07:72:b9:f7:c7:e6:42:a6:ff:42:e6:a0:04:c5:
10:2b:b4:1c:15:86:de:79:30:c8:01:62:1f:29:5c:ba:0e:46:
50:87:8e:74:be:01:c7:d1:35:4b:95:cf:8f:52:5c:dd:cb:05:
db:74:78:6f:a1:5e:a2:98:bf:c0:52:aa:ad:2b:c6:cf:68:3f:
55:23:dd:d0:25:5e:86:68:40:cc:20:9a:b0:fd:7d:26:71:0b:
c4:85:45:cc:2d:49:81:23:6e:a0:f7:75:4d:ef:92:60:b7:c8:
bf:04:4e:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hThxpmWxIsAZnDVlTBBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNDVjZWIxOGIxNGE3MzcyODJiNzVhZjBiYTE2Y2ZmZDdh
NmFiYWUwHhcNMjUwMTMxMTgwMDEyWhcNMjUwMjAxMTgwMDEyWjAzMTEwLwYDVQQD
EyhlNzI1NTU2NmJiNDA3ZmI3NzgwNjU0NGIzZTU3YjE1YTI5YzRhNTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgVTPJkl9NbJdCH6WSNz7efYr/gw
hzMw3cMMv0eJGbiTlK3f7Hlq/cJZWHMLqlQ9aqmZdGVU7XQgDYh9I2ZIAhI+Fdcu
3P8QhyzuCWoDiRJZ4ct/tn112k9+H0pNfSZOxCcdk8+XPdQuq7wKXGIhSr2zGOOu
zjNiZiB2dQzKqVJxzVuYYYvPZoJyL8Jq1veON1cZbt1JN1fXwFKhpsY9BCKkhmRC
2i35OrePuNPd9u6JKEvxaSSZzzPBeIkUQvmlRsoWXiOsplehiuhsn8vM+wkxr5TN
LAIgRMQib2BApWQ0KzP++3hm+9oEqY+krR6Uf3KeVrTaXsLciDj/LggyeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOclVWa7QH+3eAZUSz5XsVopxKUJMB8GA1UdIwQY
MBaAFFxFzrGLFKc3KCt1rwuhbP/XpquuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEVYT3NZc1VwemNvSzNXdkM2RnNfOWVtcTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kNzFlZjgtNGI5OC00MDBhLTg5ZWUt
YzYxYmY3NzQ5ZGY1LzEvWEVYT3NZc1VwemNvSzNXdkM2RnNfOWVtcTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kNzFlZjgtNGI5OC00MDBhLTg5ZWUtYzYxYmY3NzQ5ZGY1
LzEvWEVYT3NZc1VwemNvSzNXdkM2RnNfOWVtcTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgsb593a
4YqThFXLZm9jntfEjfnk59pkbVttTm3BQWFg8Y25vZJ266asDXKsAlX9/W+zUQKh
E7iI1ZcMoW3jU/3vHfzh5vNLf73F/hqhLz/vzl039xySLCWdLrCmHON81PYZWpWh
E10HKoFu1BgxaLQoeJL2iHfLcDqr8BfgQQLeUKE6yRhSvAm9SUNNY20QLQ+pYQdy
uffH5kKm/0LmoATFECu0HBWG3nkwyAFiHylcug5GUIeOdL4Bx9E1S5XPj1Jc3csF
23R4b6Feopi/wFKqrSvGz2g/VSPd0CVehmhAzCCasP19JnELxIVFzC1JgSNuoPd1
Te+SYLfIvwROzw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:40 2025 by rpki-client