Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: BBWHDFiwi1TdUBwYbq01Q2E90vm0XCzt2g9xvPWVnmg=
Subject key identifier: E8:C2:DD:F1:50:D0:27:2B:37:6D:5D:7F:52:4C:CF:2B:6E:EC:02:FF
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 0194BC72FE248C3FE40B937881EAE4A1F0EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 0219
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: 1-VaaCSlEvi2PsHhfDeQep_O4ME0.roa (hash: 2LQTb+HVdwpT0taNVxZt1GxwbIg8dIqdw60N0qmNfj4=)
2: GsnOL5iHHrW6oQXApcRlDxJejY0.roa (hash: ouWbGoaZHSfSjzbvHbi5NQp6GPK98y84LC+ZBJMKIe4=)
3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: mPdxTl0T4pitZ2sCvTJgCxf942e3U4suVkNJxOo0s7Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fe:24:8c:3f:e4:0b:93:78:81:ea:e4:a1:f0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=e8c2ddf150d0272b376d5d7f524ccf2b6eec02ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:ac:67:07:af:c0:0d:fa:e3:8c:a9:21:39:
a8:28:5c:ff:98:50:78:a9:1d:ed:88:f5:14:de:53:
77:b2:ed:69:fc:34:99:36:ac:b4:67:cc:6e:51:db:
8a:ba:be:ad:b3:4e:49:3f:81:7e:b8:5f:a9:5b:84:
44:41:5d:eb:09:f6:98:6b:5d:11:99:7f:a4:31:83:
dc:5c:89:b4:42:99:59:76:8f:fc:64:dd:61:40:eb:
de:ed:8a:45:a8:86:0a:7c:09:10:85:d2:ac:38:b9:
fa:1f:74:5e:cc:18:7d:85:55:92:61:86:7e:d7:83:
0f:79:90:a2:a5:a1:1e:a4:5e:b6:ca:f6:5f:df:ba:
9e:d7:87:51:1f:8e:31:ac:62:d4:26:e3:46:2b:66:
8e:f9:22:b3:1c:d8:cd:0e:01:af:c1:38:3d:7f:df:
15:b3:32:5d:9b:9d:ae:b4:cb:54:38:fc:80:37:98:
b5:35:36:ac:89:2e:a4:34:a8:b2:d2:d2:96:e6:5a:
4f:6f:6a:8d:4f:e0:db:a1:1b:da:82:b1:68:05:27:
3e:e7:17:c3:d7:09:d9:3b:d9:fb:f2:43:62:68:a0:
cc:28:32:a8:5b:34:33:9b:8b:00:23:69:a7:bf:1d:
ba:30:a3:da:83:2a:92:fd:9e:d4:9a:80:6f:b8:cb:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C2:DD:F1:50:D0:27:2B:37:6D:5D:7F:52:4C:CF:2B:6E:EC:02:FF
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fc:05:35:2a:0f:2b:a6:2e:e6:0a:da:c9:2c:01:c0:9f:c0:
f8:c8:36:00:9f:3a:54:71:d3:f0:da:25:9f:2e:5d:2b:7c:0f:
ed:ff:7f:15:53:d3:aa:6e:b3:a2:92:16:6c:05:9a:b6:3a:01:
95:2b:bb:10:ea:f2:c4:35:cf:78:9b:23:9b:01:75:75:76:ab:
f4:70:81:b2:cb:6c:d0:bf:db:56:77:4b:88:d4:8c:7a:1c:a0:
63:6f:2a:ff:b0:54:77:31:4e:5a:b3:29:bc:86:45:79:b7:71:
12:90:76:7b:c4:a4:3e:1e:f4:46:8a:e5:de:3d:eb:57:2a:04:
e0:3f:a8:1b:bd:09:c8:78:3e:92:1b:f0:62:9c:f7:d4:37:bb:
37:10:84:c7:a1:22:b4:75:81:66:bc:9f:0a:34:ab:47:71:2c:
fa:2c:7d:48:61:be:64:c1:ca:e9:2b:23:92:3f:80:54:34:18:
7a:5d:cf:8c:78:35:a9:5a:f2:3d:63:ca:11:ed:af:3a:e2:f9:
c4:9a:00:20:cc:2f:41:d8:24:a7:d2:3c:41:04:a4:c2:df:b5:
1c:96:fa:47:d9:4b:0b:7f:84:45:b5:75:c8:a8:19:2a:72:93:
3f:30:21:87:77:d3:b1:4f:e5:92:a2:ee:b1:45:15:be:3f:a8:
a8:6d:0a:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cv4kjD/kC5N4gerkofDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYzE3NjlkM2ZmMDQyMTI0Njk4ZTMxYzQ3MmI2M2JiZjFi
YmI1YWQwHhcNMjUwMTMxMTMwMDQwWhcNMjUwMjAxMTMwMDQwWjAzMTEwLwYDVQQD
EyhlOGMyZGRmMTUwZDAyNzJiMzc2ZDVkN2Y1MjRjY2YyYjZlZWMwMmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt++sZwevwA3644ypITmoKFz/mFB4
qR3tiPUU3lN3su1p/DSZNqy0Z8xuUduKur6ts05JP4F+uF+pW4REQV3rCfaYa10R
mX+kMYPcXIm0QplZdo/8ZN1hQOve7YpFqIYKfAkQhdKsOLn6H3RezBh9hVWSYYZ+
14MPeZCipaEepF62yvZf37qe14dRH44xrGLUJuNGK2aO+SKzHNjNDgGvwTg9f98V
szJdm52utMtUOPyAN5i1NTasiS6kNKiy0tKW5lpPb2qNT+DboRvagrFoBSc+5xfD
1wnZO9n78kNiaKDMKDKoWzQzm4sAI2mnvx26MKPagyqS/Z7UmoBvuMtllwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjC3fFQ0CcrN21df1JMzytu7AL/MB8GA1UdIwQY
MBaAFF7Bdp0/8EISRpjjHEcrY7vxu7WtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUt
NTQyMDRkZGQyY2E2LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUtNTQyMDRkZGQyY2E2
LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevwFNSoP
K6Yu5graySwBwJ/A+Mg2AJ86VHHT8Nolny5dK3wP7f9/FVPTqm6zopIWbAWatjoB
lSu7EOryxDXPeJsjmwF1dXar9HCBssts0L/bVndLiNSMehygY28q/7BUdzFOWrMp
vIZFebdxEpB2e8SkPh70Rorl3j3rVyoE4D+oG70JyHg+khvwYpz31De7NxCEx6Ei
tHWBZryfCjSrR3Es+ix9SGG+ZMHK6Ssjkj+AVDQYel3PjHg1qVryPWPKEe2vOuL5
xJoAIMwvQdgkp9I8QQSkwt+1HJb6R9lLC3+ERbV1yKgZKnKTPzAhh3fTsU/lkqLu
sUUVvj+oqG0KoA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:49 2025 by rpki-client