Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
File: Xx-gbV262kPeRPTksdyUkrsofJ0.mft (raw, json)
Hash identifier: kgg0Wjl8whB86CgtIGWtaTDyu2i2D1MCcVl+zIslHWw=
Subject key identifier: 62:92:51:0A:E1:19:57:C8:1D:76:E3:F9:69:8E:FD:6B:6D:6B:16:BD
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 0194BD17DBCFA3DC1163368CA84ADE0012E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
Manifest number: 1397
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: 2-ZT3D_TT57WgEPZaHLs56UG0Yg.roa (hash: NyVeJy4V1X4eJ9opwnQRbcNHZ8PbRqXsdUICPp/i7rs=)
2: Xx-gbV262kPeRPTksdyUkrsofJ0.crl (hash: SIjU5e8g3nO6q1OW8wX0TbqAO4uwYXPkwuTSZzNjACI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:db:cf:a3:dc:11:63:36:8c:a8:4a:de:00:12:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=6292510ae11957c81d76e3f9698efd6b6d6b16bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:8c:b1:f8:81:b0:ee:27:be:a5:a1:4e:e2:
78:00:a8:05:c4:53:02:40:69:de:31:de:82:01:a1:
58:5d:18:db:c5:63:95:1f:c0:29:01:d0:83:ac:65:
c9:6e:93:2b:c8:95:63:29:81:48:d3:9f:25:d2:ae:
89:06:d9:65:15:38:c0:67:08:f6:e6:31:d5:6f:b6:
55:bb:92:e0:a4:71:5d:2e:56:e1:46:4d:8a:c2:97:
58:ef:99:33:2d:de:78:71:b5:7a:e3:d3:95:ac:bf:
2d:05:6c:28:c2:96:bd:b5:f1:ff:bf:f0:af:44:2e:
d6:b8:60:30:60:7b:4b:72:5e:ef:8e:80:3a:78:a2:
ef:07:cb:d0:64:b0:f2:0f:6e:d2:9c:23:72:fb:07:
18:07:19:7f:4c:b8:11:72:80:8f:fd:e3:4b:a0:03:
8b:09:6f:41:e6:0a:a7:20:f6:08:5d:39:e3:f1:da:
2e:2e:11:9b:c3:ad:91:25:86:2e:6c:79:45:c3:2f:
4b:96:91:2b:da:c1:a2:0d:37:aa:7a:f3:be:69:19:
80:e6:c6:e6:c4:18:e9:8d:ec:9e:81:75:1b:84:85:
0d:c5:1e:68:40:7e:9e:2c:82:f5:be:55:94:13:7b:
97:a3:b2:36:82:f5:3c:c7:0b:e2:a6:21:25:d8:02:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:92:51:0A:E1:19:57:C8:1D:76:E3:F9:69:8E:FD:6B:6D:6B:16:BD
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f1:f6:62:55:ad:8d:36:08:5d:f8:cd:16:ce:d4:0d:81:0b:
df:75:44:e5:ab:12:8e:d9:fc:b3:21:d1:a6:f0:99:08:c2:ed:
4b:8e:6c:9a:b6:7b:28:28:4c:da:37:6b:5c:50:89:5d:f5:f0:
77:71:06:2c:b7:ad:43:ae:69:91:8b:ab:f0:4c:73:09:99:f0:
df:44:6d:79:5b:12:c8:e2:b1:66:a4:8a:0d:f3:10:2e:5b:b0:
1f:99:6e:90:a8:29:43:c8:38:c1:a7:dd:4b:aa:74:f4:e2:33:
20:21:c7:6a:f0:ed:b4:1d:84:0d:fa:73:be:fe:83:b0:2b:27:
c7:54:69:64:44:b8:eb:57:04:8a:6d:55:fd:3d:7e:84:78:a1:
f2:41:6a:f0:cd:61:07:00:14:a2:1f:cb:39:59:ef:5e:54:d2:
68:bb:cf:23:37:78:aa:a0:03:c9:ec:c0:90:d9:4a:4e:d6:ac:
e4:f6:38:0a:c2:ce:2b:13:99:6c:b9:22:5b:cc:75:39:28:43:
cb:13:a4:20:dc:f6:44:a0:e5:e1:d9:d4:a2:00:0d:be:3b:fb:
2e:6c:d0:b8:fc:79:59:4b:fc:5f:cc:ca:ff:ac:f6:ff:51:7b:
c2:a7:54:cb:eb:ae:c7:4e:22:4e:43:14:b3:48:8d:74:e6:07:
2a:f4:76:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F9vPo9wRYzaMqEreABLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMWZhMDZkNWRiYWRhNDNkZTQ0ZjRlNGIxZGM5NDkyYmIy
ODdjOWQwHhcNMjUwMTMxMTYwMDQ0WhcNMjUwMjAxMTYwMDQ0WjAzMTEwLwYDVQQD
Eyg2MjkyNTEwYWUxMTk1N2M4MWQ3NmUzZjk2OThlZmQ2YjZkNmIxNmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTGMsfiBsO4nvqWhTuJ4AKgFxFMC
QGneMd6CAaFYXRjbxWOVH8ApAdCDrGXJbpMryJVjKYFI058l0q6JBtllFTjAZwj2
5jHVb7ZVu5LgpHFdLlbhRk2KwpdY75kzLd54cbV649OVrL8tBWwowpa9tfH/v/Cv
RC7WuGAwYHtLcl7vjoA6eKLvB8vQZLDyD27SnCNy+wcYBxl/TLgRcoCP/eNLoAOL
CW9B5gqnIPYIXTnj8douLhGbw62RJYYubHlFwy9LlpEr2sGiDTeqevO+aRmA5sbm
xBjpjeyegXUbhIUNxR5oQH6eLIL1vlWUE3uXo7I2gvU8xwvipiEl2ALKBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKSUQrhGVfIHXbj+WmO/Wttaxa9MB8GA1UdIwQY
MBaAFF8foG1dutpD3kT05LHclJK7KHydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84NDdkMTctYmE3Yy00ZWFlLTlkNTUt
MjU4NDZkNTlmZDYwLzEvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS84NDdkMTctYmE3Yy00ZWFlLTlkNTUtMjU4NDZkNTlmZDYw
LzEvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfH2YlWt
jTYIXfjNFs7UDYEL33VE5asSjtn8syHRpvCZCMLtS45smrZ7KChM2jdrXFCJXfXw
d3EGLLetQ65pkYur8ExzCZnw30RteVsSyOKxZqSKDfMQLluwH5lukKgpQ8g4wafd
S6p09OIzICHHavDttB2EDfpzvv6DsCsnx1RpZES461cEim1V/T1+hHih8kFq8M1h
BwAUoh/LOVnvXlTSaLvPIzd4qqADyezAkNlKTtas5PY4CsLOKxOZbLkiW8x1OShD
yxOkINz2RKDl4dnUogANvjv7LmzQuPx5WUv8X8zK/6z2/1F7wqdUy+uux04iTkMU
s0iNdOYHKvR2Tw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:02 2025 by rpki-client