Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier: E1u/H2Yz4Q6aJFCnSj1buetvenUDKv+IP6Ebzlx78lU=
Subject key identifier: 03:69:0C:F4:C0:66:59:F8:1E:FF:22:D4:57:E5:F4:AE:A4:19:90:FE
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial: 0194BC3CAADC1691BC44EF617B180CE2E098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number: 1329
Signing time: Fri 31 Jan 2025 12:01:20 +0000
Manifest this update: Fri 31 Jan 2025 12:01:20 +0000
Manifest next update: Sat 01 Feb 2025 12:01:20 +0000
Files and hashes: 1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: TJKmeuBgtpSi/h6rZtILgRdejeDW0PpSIHg8a+lIDrY=)
2: xyAqUo1cBCxwcVbYVeKIYjCComY.roa (hash: 5YKuscwS6gvAjWMFAp+aYRLvaxsng69DrIJ3z9uUMo8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:aa:dc:16:91:bc:44:ef:61:7b:18:0c:e2:e0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Validity
Not Before: Jan 31 12:01:20 2025 GMT
Not After : Feb 1 12:01:20 2025 GMT
Subject: CN=03690cf4c06659f81eff22d457e5f4aea41990fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:60:de:e7:b0:da:fa:1b:21:af:ec:cb:4c:36:
b0:08:a3:4d:35:e3:1f:8e:78:46:f0:e6:1a:37:22:
46:7c:29:86:e7:b3:23:5a:13:fe:f7:24:e6:17:a2:
f0:2a:c1:a5:59:49:56:3b:ac:56:12:b9:52:39:2b:
23:97:9e:10:43:24:5a:43:92:95:95:c8:63:d4:93:
1e:c9:a5:9b:f0:99:04:e8:7c:72:3b:8e:0d:22:ff:
45:93:3a:ef:11:82:0b:04:83:a1:58:af:b1:83:17:
6f:88:5e:ef:93:47:95:ba:df:33:87:9e:27:74:b8:
11:db:f9:48:df:d8:3f:e5:b0:0e:9c:34:2e:21:e3:
0d:5a:af:9c:13:80:77:e6:b9:8d:68:14:ea:e7:91:
c8:ff:e0:1a:67:46:da:ee:35:c8:f7:57:93:3d:cf:
de:b8:52:18:18:80:c5:02:ed:93:8d:1e:bd:74:66:
c6:bc:90:1b:b4:62:60:b6:1a:c6:87:cf:0d:6c:48:
0b:70:5d:20:0d:db:3c:f4:c5:0f:a0:2a:c5:14:79:
b2:8a:e1:2b:2d:3b:a4:d5:f6:80:0a:9e:83:63:72:
40:ab:4f:0b:ea:4a:79:31:78:ba:eb:2f:7a:ff:ba:
2a:27:7b:41:d5:36:13:6a:da:e0:42:af:2f:aa:f4:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:69:0C:F4:C0:66:59:F8:1E:FF:22:D4:57:E5:F4:AE:A4:19:90:FE
X509v3 Authority Key Identifier:
keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:72:13:00:57:83:2c:50:04:bd:c5:10:53:9e:c2:01:83:d6:
dc:a7:23:3e:fb:c3:1f:60:ba:70:05:c2:85:59:1a:95:73:17:
a7:91:6b:f0:ea:5f:cf:a4:c4:5e:1d:61:8d:2b:2d:c8:d6:6e:
cd:f6:29:2d:9a:f1:38:b9:e5:7f:d0:fd:ef:ee:6f:b9:4f:33:
39:07:e1:2d:c3:08:71:ae:60:36:54:d9:88:fe:de:12:5b:be:
68:8d:f9:44:99:5d:cf:49:59:67:dd:73:f6:08:74:ac:ae:62:
d7:cd:e7:82:f7:d6:49:26:b0:ec:41:10:e9:09:49:4f:63:d4:
63:9c:7c:74:40:c2:6e:98:fc:75:77:65:c4:32:d7:70:cc:59:
c8:ca:44:91:fb:9e:3a:64:7b:9c:7f:31:78:53:87:79:76:56:
58:41:9e:00:f7:f7:15:33:18:88:a2:31:71:0e:a8:b1:43:ae:
fd:ae:d9:82:a0:ba:92:0f:d5:9a:4d:5d:c5:1a:8b:13:02:e1:
57:22:fa:37:5a:42:21:dc:8d:01:de:5b:56:66:b3:ee:60:0c:
09:5e:8c:73:12:eb:49:fc:c3:41:c0:6d:57:f1:57:85:3b:4e:
b4:1c:68:29:a9:6b:92:05:c7:4e:5b:95:15:48:6a:d8:62:cf:
e8:41:37:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PKrcFpG8RO9hexgM4uCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNDJjMzU2MTJmNDVhZjQxMTAzNTIwYWYyNzYxY2RhYTUx
ZTNhYTQwHhcNMjUwMTMxMTIwMTIwWhcNMjUwMjAxMTIwMTIwWjAzMTEwLwYDVQQD
EygwMzY5MGNmNGMwNjY1OWY4MWVmZjIyZDQ1N2U1ZjRhZWE0MTk5MGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2De57Da+hshr+zLTDawCKNNNeMf
jnhG8OYaNyJGfCmG57MjWhP+9yTmF6LwKsGlWUlWO6xWErlSOSsjl54QQyRaQ5KV
lchj1JMeyaWb8JkE6HxyO44NIv9FkzrvEYILBIOhWK+xgxdviF7vk0eVut8zh54n
dLgR2/lI39g/5bAOnDQuIeMNWq+cE4B35rmNaBTq55HI/+AaZ0ba7jXI91eTPc/e
uFIYGIDFAu2TjR69dGbGvJAbtGJgthrGh88NbEgLcF0gDds89MUPoCrFFHmyiuEr
LTuk1faACp6DY3JAq08L6kp5MXi66y96/7oqJ3tB1TYTatrgQq8vqvQDPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANpDPTAZln4Hv8i1Ffl9K6kGZD+MB8GA1UdIwQY
MBaAFF5Cw1YS9Fr0EQNSCvJ2HNqlHjqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYt
ODIxMTk5NzhkNmJiLzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYtODIxMTk5NzhkNmJi
LzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnITAFeD
LFAEvcUQU57CAYPW3KcjPvvDH2C6cAXChVkalXMXp5Fr8Opfz6TEXh1hjSstyNZu
zfYpLZrxOLnlf9D97+5vuU8zOQfhLcMIca5gNlTZiP7eElu+aI35RJldz0lZZ91z
9gh0rK5i183ngvfWSSaw7EEQ6QlJT2PUY5x8dEDCbpj8dXdlxDLXcMxZyMpEkfue
OmR7nH8xeFOHeXZWWEGeAPf3FTMYiKIxcQ6osUOu/a7ZgqC6kg/Vmk1dxRqLEwLh
VyL6N1pCIdyNAd5bVmaz7mAMCV6McxLrSfzDQcBtV/FXhTtOtBxoKalrkgXHTluV
FUhq2GLP6EE3zA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:06 2025 by rpki-client