Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
File: xzic6Ca8jSaGm0UvPNk2kCxVL78.mft (raw, json)
Hash identifier: bnEuPt/VyMTsRRN4pKb6CnqKnXBHB3bFFIfFG97Ah1I=
Subject key identifier: AC:06:A9:44:72:4D:57:49:20:23:13:44:F3:5D:5B:DA:5E:AC:4B:AC
Authority key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Certificate issuer: /CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Certificate serial: 0194BC3BBF55BFE3CD2EB7CDC708B9ECDF87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
Manifest number: 099E
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: Zjp5spJdh84vGP_NYi-8y5LIKQU.roa (hash: rWVrxK253VGyHCI0i7PfPHvDu/qTwuTk4y8VuJ8okKA=)
2: xzic6Ca8jSaGm0UvPNk2kCxVL78.crl (hash: 2+hPlBYzRP0QZ9yQXY1y4QKS/nbRcyOaninJvQM2gNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bf:55:bf:e3:cd:2e:b7:cd:c7:08:b9:ec:df:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=ac06a944724d574920231344f35d5bda5eac4bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a2:bf:80:42:34:32:09:58:d2:c2:e6:df:15:
d6:f3:af:de:16:c4:02:cb:12:48:da:6b:ee:9c:18:
cd:56:6f:b1:0c:96:98:37:cd:9e:22:96:e3:f3:f0:
6f:d4:4f:df:25:20:44:c6:43:95:0b:af:0f:d3:d4:
70:26:0f:56:da:ae:a4:16:52:bf:e4:bb:90:7c:bc:
7f:86:a0:cd:5e:83:cd:47:8f:c2:58:65:99:c0:81:
4d:7b:f8:0a:cc:ba:50:f5:3b:56:6e:09:a8:c0:6a:
f7:71:6e:a8:5d:61:17:17:13:7b:72:0b:63:96:07:
ce:94:04:77:b1:24:7b:6e:06:96:45:70:c8:3c:db:
a3:c1:cf:cb:0a:b5:b3:e8:47:2c:4c:40:58:0d:c8:
cf:80:ab:26:3e:7a:2e:61:41:70:3b:a3:e0:e1:5e:
3c:5f:b3:6a:d4:ac:0b:05:99:9e:7d:78:f1:c3:46:
45:2b:26:cc:37:ad:f5:8a:90:38:24:49:74:90:67:
c5:51:4f:5f:15:d3:96:ac:cb:d6:de:c3:fc:43:03:
a5:b7:9c:3f:e6:c5:1a:a7:21:d1:ab:98:d5:ea:26:
39:a4:e4:6b:d2:72:ee:ea:dc:19:86:b4:86:f4:c8:
5c:13:30:41:cd:ab:8f:6d:32:21:ad:53:d2:f9:4c:
32:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:06:A9:44:72:4D:57:49:20:23:13:44:F3:5D:5B:DA:5E:AC:4B:AC
X509v3 Authority Key Identifier:
keyid:C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:81:30:0c:38:ce:5a:77:c6:9b:f2:cd:da:dc:7a:ea:22:63:
25:c2:23:69:3f:87:da:24:2d:35:7d:a2:08:84:5f:a8:e8:7b:
a2:a8:4a:46:0c:ac:33:ca:02:c9:0d:ff:cd:b9:8d:4b:a6:8e:
f1:54:ee:e9:f2:f0:40:a3:c2:16:9f:2e:75:9b:49:d6:93:c1:
49:90:31:42:4e:bf:a1:3b:76:b2:9e:d5:90:57:65:af:96:01:
d8:db:71:fe:e0:89:a2:77:42:e2:5f:78:06:02:62:81:73:f0:
f2:43:af:bd:d4:10:91:17:3d:30:62:9c:92:cb:d5:e7:68:94:
a9:ef:b4:2f:66:ea:90:f8:6c:d1:42:31:99:a1:b4:7e:9e:4b:
0d:19:8d:51:57:ce:a7:9f:87:38:ba:03:45:de:e4:7c:b4:26:
38:f9:e0:4e:7e:52:11:fc:48:fe:da:e8:f8:ac:1c:43:a4:e8:
e1:ed:a5:3b:2c:fd:3e:58:1d:2d:e7:b6:8e:38:a6:e0:f6:6d:
5e:cf:47:83:de:b9:b5:32:4d:f4:78:00:1a:a8:47:ac:33:ca:
39:52:75:03:e0:da:5c:d2:2a:df:a7:75:4e:d5:b5:55:96:9c:
0c:eb:f7:9f:6c:63:1f:54:78:f3:9b:a1:81:1a:07:c6:ef:fa:
8d:c9:ca:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O79Vv+PNLrfNxwi57N+HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3Mzg5Y2U4MjZiYzhkMjY4NjliNDUyZjNjZDkzNjkwMmM1
NTJmYmYwHhcNMjUwMTMxMTIwMDE5WhcNMjUwMjAxMTIwMDE5WjAzMTEwLwYDVQQD
EyhhYzA2YTk0NDcyNGQ1NzQ5MjAyMzEzNDRmMzVkNWJkYTVlYWM0YmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqK/gEI0MglY0sLm3xXW86/eFsQC
yxJI2mvunBjNVm+xDJaYN82eIpbj8/Bv1E/fJSBExkOVC68P09RwJg9W2q6kFlK/
5LuQfLx/hqDNXoPNR4/CWGWZwIFNe/gKzLpQ9TtWbgmowGr3cW6oXWEXFxN7cgtj
lgfOlAR3sSR7bgaWRXDIPNujwc/LCrWz6EcsTEBYDcjPgKsmPnouYUFwO6Pg4V48
X7Nq1KwLBZmefXjxw0ZFKybMN631ipA4JEl0kGfFUU9fFdOWrMvW3sP8QwOlt5w/
5sUapyHRq5jV6iY5pORr0nLu6twZhrSG9MhcEzBBzauPbTIhrVPS+UwyrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwGqURyTVdJICMTRPNdW9perEusMB8GA1UdIwQY
MBaAFMc4nOgmvI0mhptFLzzZNpAsVS+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHppYzZDYThqU2FHbTBVdlBOazJrQ3hWTDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kYzFkMDktOWY2OS00NzFiLWJlN2Et
NTIwMDhkMWNiOWI2LzEveHppYzZDYThqU2FHbTBVdlBOazJrQ3hWTDc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kYzFkMDktOWY2OS00NzFiLWJlN2EtNTIwMDhkMWNiOWI2
LzEveHppYzZDYThqU2FHbTBVdlBOazJrQ3hWTDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4EwDDjO
WnfGm/LN2tx66iJjJcIjaT+H2iQtNX2iCIRfqOh7oqhKRgysM8oCyQ3/zbmNS6aO
8VTu6fLwQKPCFp8udZtJ1pPBSZAxQk6/oTt2sp7VkFdlr5YB2Ntx/uCJondC4l94
BgJigXPw8kOvvdQQkRc9MGKcksvV52iUqe+0L2bqkPhs0UIxmaG0fp5LDRmNUVfO
p5+HOLoDRd7kfLQmOPngTn5SEfxI/tro+KwcQ6To4e2lOyz9PlgdLee2jjim4PZt
Xs9Hg965tTJN9HgAGqhHrDPKOVJ1A+DaXNIq36d1TtW1VZacDOv3n2xjH1R485uh
gRoHxu/6jcnKow==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:50 2025 by rpki-client