Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json)
Hash identifier: +FRqEOlf0sHZMtBeTbgTfOtGFvIVXST/KLNvUlpWlhg=
Subject key identifier: 83:92:B6:9B:8A:7E:42:29:7B:07:E6:DA:88:52:BF:27:D5:34:5B:CA
Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Certificate serial: 0194BBCE7CD67470642914DC11F175CE4FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
Manifest number: 1355
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: n3AuLuYw1919wQLJOcWvzhTiUEfidg5WnrBQxhjaynY=)
2: d0WzaVWRK0-1XqWWg1imO1fvEdc.roa (hash: eGzK3qDCJFgEI2g80dPr8LU89NhumAd/6hCl+I6fIig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7c:d6:74:70:64:29:14:dc:11:f1:75:ce:4f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=8392b69b8a7e42297b07e6da8852bf27d5345bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:c0:e8:38:79:9b:7e:fd:74:04:5d:ed:3a:
7d:d0:74:7a:b5:d6:bd:7f:4b:05:0e:6b:56:9f:e3:
f1:73:00:16:c2:02:35:5e:3f:09:00:0b:5e:29:75:
d1:9c:b5:32:b7:c7:81:5c:e1:36:55:53:5e:9d:04:
43:76:65:ea:9e:32:b2:55:5c:39:e7:47:20:4d:12:
65:b3:ad:d6:f2:3b:1d:ed:24:ea:d6:f5:3c:4e:87:
55:2f:55:2a:9b:19:d8:4e:f7:23:0b:4f:a0:4f:f0:
e8:b7:49:83:e0:55:f8:f8:ba:fb:95:a7:ab:51:86:
eb:66:38:1e:a5:28:47:9a:6a:7c:b5:f7:9e:ba:2d:
ec:78:2d:96:08:00:9f:c8:49:7c:7f:d0:9a:ea:68:
80:4e:96:33:18:f1:47:e3:0b:b7:e9:c9:fb:fb:9b:
b0:42:31:2f:c7:89:57:82:3a:b0:0c:77:e7:48:2b:
55:95:bc:be:f2:cb:b2:bf:a3:00:66:56:f5:92:f7:
87:5c:7a:a6:38:76:c9:f0:b2:6b:a5:c9:f5:9b:70:
fd:d7:2b:03:6c:1a:79:ca:3a:7a:a7:5b:b9:2b:ac:
38:02:67:7d:44:44:c6:5b:32:9b:af:8d:96:f4:3d:
ae:af:19:b3:79:8c:2b:bb:eb:14:06:fe:c1:f7:12:
d7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:92:B6:9B:8A:7E:42:29:7B:07:E6:DA:88:52:BF:27:D5:34:5B:CA
X509v3 Authority Key Identifier:
keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:51:1a:56:26:30:be:40:ed:0d:cf:cf:96:a6:83:5e:96:5e:
7f:4b:55:be:ab:77:99:58:19:d7:86:f2:31:a5:11:5c:a8:c7:
cb:9f:ce:15:31:a0:49:de:0c:1d:62:17:71:0d:3a:da:c7:a2:
fd:67:c2:c8:f1:93:82:8e:64:28:dc:70:6b:f9:aa:09:93:e0:
f6:99:c4:b0:08:56:70:51:ed:41:e4:59:ca:70:1d:3d:80:29:
ce:87:b9:1a:63:85:88:15:f1:3a:c7:fc:fd:d6:80:fa:18:e2:
67:9b:d1:9a:91:c7:47:d3:ea:e4:71:33:72:8c:2e:fb:2a:5c:
32:c7:33:a6:93:33:2c:9b:f1:30:05:3b:a8:ea:81:e2:d3:10:
14:23:44:87:ae:a3:d5:59:51:32:70:80:b0:c6:21:9d:a5:1f:
1d:2d:1e:38:ff:ec:a4:d7:d5:78:93:e4:f2:bc:bc:ef:77:2a:
b2:5c:6e:2b:87:cc:8e:2e:5b:d3:cd:86:74:17:64:be:84:4b:
b2:00:b1:b1:17:3d:64:55:e6:47:9f:fd:ac:eb:3b:9f:aa:02:
be:63:d4:24:7b:05:2f:0e:c7:b9:8c:c7:66:e8:75:23:0e:9d:
8e:3e:7a:71:3a:f8:61:e2:b0:7a:7c:be:3e:7f:7c:ae:ae:13:
d9:19:36:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znzWdHBkKRTcEfF1zk+5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNmQ3ZDg3ZmFlYzQ4ZGNhNDM2OWQ2ODM4Y2VlYzUxYWUy
YmQ4NmEwHhcNMjUwMTMxMTAwMDU5WhcNMjUwMjAxMTAwMDU5WjAzMTEwLwYDVQQD
Eyg4MzkyYjY5YjhhN2U0MjI5N2IwN2U2ZGE4ODUyYmYyN2Q1MzQ1YmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqivA6Dh5m379dARd7Tp90HR6tda9
f0sFDmtWn+PxcwAWwgI1Xj8JAAteKXXRnLUyt8eBXOE2VVNenQRDdmXqnjKyVVw5
50cgTRJls63W8jsd7STq1vU8TodVL1UqmxnYTvcjC0+gT/Dot0mD4FX4+Lr7laer
UYbrZjgepShHmmp8tfeeui3seC2WCACfyEl8f9Ca6miATpYzGPFH4wu36cn7+5uw
QjEvx4lXgjqwDHfnSCtVlby+8suyv6MAZlb1kveHXHqmOHbJ8LJrpcn1m3D91ysD
bBp5yjp6p1u5K6w4Amd9RETGWzKbr42W9D2urxmzeYwru+sUBv7B9xLXEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOStpuKfkIpewfm2ohSvyfVNFvKMB8GA1UdIwQY
MBaAFFxtfYf67EjcpDadaDjO7FGuK9hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jNDM5ZDMtOGY4MS00MDIyLTk4N2Ut
ZTY5N2M1MmRmYzFlLzEvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jNDM5ZDMtOGY4MS00MDIyLTk4N2UtZTY5N2M1MmRmYzFl
LzEvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFEaViYw
vkDtDc/PlqaDXpZef0tVvqt3mVgZ14byMaURXKjHy5/OFTGgSd4MHWIXcQ062sei
/WfCyPGTgo5kKNxwa/mqCZPg9pnEsAhWcFHtQeRZynAdPYApzoe5GmOFiBXxOsf8
/daA+hjiZ5vRmpHHR9Pq5HEzcowu+ypcMsczppMzLJvxMAU7qOqB4tMQFCNEh66j
1VlRMnCAsMYhnaUfHS0eOP/spNfVeJPk8ry873cqslxuK4fMji5b082GdBdkvoRL
sgCxsRc9ZFXmR5/9rOs7n6oCvmPUJHsFLw7HuYzHZuh1Iw6djj56cTr4YeKweny+
Pn98rq4T2Rk2gw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:12 2025 by rpki-client