Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: zQ+rgmdWjHiAm4KMBARlaVYTl/hODwRDJnPcwnnACKM=
Subject key identifier: 13:9F:2C:CE:3E:B4:A0:12:DB:07:46:48:CA:E7:2A:5D:EB:7D:68:BD
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 0194BBCE11F7C878CB63BD87E3129D4FEA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: 1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa (hash: mKtZwD+iuzmAhkLKZ2UYytr92oY2lNBDkGBNEW7xkLg=)
2: Et3EjfyShVqsXEJ0-il-9h75pBI.roa (hash: 7NwgLcL7u8H9AHMShaODStUwLh9+b7vWHMW72q0np80=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: JFAhgcwVFl5ko39p/7aKFKGfbSr0WAjnUTd08iJemmo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:11:f7:c8:78:cb:63:bd:87:e3:12:9d:4f:ea:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=139f2cce3eb4a012db074648cae72a5deb7d68bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:72:8d:11:c8:02:fe:be:ce:34:08:c5:20:
1d:2b:ab:25:d0:e5:62:98:26:92:e6:da:ce:44:e1:
fd:d0:4f:8c:04:8d:2d:b0:28:c3:62:f3:bb:20:b6:
3d:8d:da:75:c6:1f:25:44:53:26:66:d8:71:eb:85:
65:4e:c0:23:23:98:85:26:18:e5:85:81:d8:f0:18:
c9:2b:65:c8:4b:44:d6:fc:9c:6a:d5:56:14:c3:c7:
e8:20:82:8d:17:60:62:ba:67:54:49:bc:6c:26:73:
5b:d4:f9:64:c1:d3:98:6b:ba:d2:2d:46:5c:ac:85:
9c:50:78:64:b0:aa:96:14:63:89:c4:3a:5f:4b:a8:
33:2b:5a:f1:03:a9:82:47:f3:aa:34:90:b5:3c:ec:
28:98:04:93:09:38:4a:38:4b:d6:95:b2:73:26:8d:
41:e1:2d:a4:28:5b:43:5e:46:e0:20:b4:11:3e:f8:
15:6e:fe:a2:29:30:97:8a:77:aa:c7:37:d3:08:d7:
59:ef:b2:a4:8a:9e:71:00:8e:91:e9:86:f5:dd:92:
a4:f8:66:18:f5:48:88:72:24:d7:3f:4b:d5:ab:ba:
15:af:63:49:87:99:6d:a1:b9:74:2b:70:3c:00:b2:
93:4f:a0:5a:b1:7d:1a:11:12:db:06:2a:84:39:32:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9F:2C:CE:3E:B4:A0:12:DB:07:46:48:CA:E7:2A:5D:EB:7D:68:BD
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:de:1f:33:f1:23:0f:8e:88:4e:7b:d2:a6:43:cc:a0:48:1a:
9c:ad:90:b2:94:04:6b:d4:a4:1e:2c:9d:4b:c3:8e:85:9f:da:
f4:77:0e:52:d2:a9:d5:f5:9f:48:c3:2e:cd:37:fe:52:0c:dd:
9b:95:57:c5:d3:d8:85:02:4c:e3:72:1e:53:23:42:90:4c:fe:
1d:4d:a6:07:0c:50:47:f4:ed:b5:47:6e:ff:99:1b:e7:7d:a0:
c2:a7:8d:a2:92:99:4d:8f:da:d7:4d:57:f7:b5:ff:fb:5e:fb:
d4:2c:83:f9:ae:ee:85:2d:ce:40:39:8d:aa:c9:69:b4:96:4f:
b4:37:1d:99:6c:0c:f2:be:3c:bc:01:f5:01:36:d4:4a:15:5d:
95:21:f0:21:d1:c2:ca:c7:a0:4d:6f:8e:74:54:2f:fc:ad:d3:
6b:4e:06:b6:b6:42:55:8e:72:b7:49:40:0a:03:0b:ef:59:48:
7e:4e:74:e5:b7:81:95:ef:28:b1:5f:11:f0:d5:d3:2d:56:72:
a1:d1:69:ae:56:d0:33:22:6f:ef:ec:3b:0f:9b:25:5a:33:a8:
6c:6c:f7:35:74:c9:98:9b:37:15:a5:a4:0a:a2:a5:f1:f3:e9:
a1:fc:b1:b6:64:12:03:d9:e4:36:cb:ef:f0:8b:e3:02:f7:df:
60:a6:90:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zhH3yHjLY72H4xKdT+p/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmJlODQyMjQzMjcyN2QzODc0YjE1NjRiYWVhYzhhODA1
NTdiMmQwHhcNMjUwMTMxMTAwMDMxWhcNMjUwMjAxMTAwMDMxWjAzMTEwLwYDVQQD
EygxMzlmMmNjZTNlYjRhMDEyZGIwNzQ2NDhjYWU3MmE1ZGViN2Q2OGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBZyjRHIAv6+zjQIxSAdK6sl0OVi
mCaS5trOROH90E+MBI0tsCjDYvO7ILY9jdp1xh8lRFMmZthx64VlTsAjI5iFJhjl
hYHY8BjJK2XIS0TW/Jxq1VYUw8foIIKNF2BiumdUSbxsJnNb1PlkwdOYa7rSLUZc
rIWcUHhksKqWFGOJxDpfS6gzK1rxA6mCR/OqNJC1POwomASTCThKOEvWlbJzJo1B
4S2kKFtDXkbgILQRPvgVbv6iKTCXineqxzfTCNdZ77Kkip5xAI6R6Yb13ZKk+GYY
9UiIciTXP0vVq7oVr2NJh5ltobl0K3A8ALKTT6BasX0aERLbBiqEOTJ0RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOfLM4+tKAS2wdGSMrnKl3rfWi9MB8GA1UdIwQY
MBaAFMT76EIkMnJ9OHSxVkuurIqAVXstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmIt
ZWNmMjIxN2Y5ODY3LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmItZWNmMjIxN2Y5ODY3
LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN94fM/Ej
D46ITnvSpkPMoEganK2QspQEa9SkHiydS8OOhZ/a9HcOUtKp1fWfSMMuzTf+Ugzd
m5VXxdPYhQJM43IeUyNCkEz+HU2mBwxQR/TttUdu/5kb532gwqeNopKZTY/a101X
97X/+1771CyD+a7uhS3OQDmNqslptJZPtDcdmWwM8r48vAH1ATbUShVdlSHwIdHC
ysegTW+OdFQv/K3Ta04GtrZCVY5yt0lACgML71lIfk505beBle8osV8R8NXTLVZy
odFprlbQMyJv7+w7D5slWjOobGz3NXTJmJs3FaWkCqKl8fPpofyxtmQSA9nkNsvv
8IvjAvffYKaQEQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:13 2025 by rpki-client