Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier: XOOcbTdOdqdxOH/pF70ElVskcQ1SiTGqfQfPiSm4TEM=
Subject key identifier: BE:F5:47:46:2F:D0:75:38:12:1D:77:42:76:21:9B:43:71:BF:4E:37
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 0194BD4E9CF99E91775AFD4B721A4EDFD0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number: 1274
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: g53KMm1GxvSXyyU1NalO9dOOCDM.roa (hash: 0WqIU9zKoOda2c/ja5l/jtIatEe2K3Lvkc1eea6pcj0=)
2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: XZnWXrba0DM4j8ZRJF93z4KdK5pu2q9+WiDm0gPmO6U=)
3: yS8ebEgIQMLJj6zVlOEGdyvp0zw.roa (hash: OxMjIeKqCrwAl5jplJjoAUCkjvqaqRR0946Lakf364k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9c:f9:9e:91:77:5a:fd:4b:72:1a:4e:df:d0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=bef547462fd07538121d774276219b4371bf4e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cb:a4:02:7e:0c:da:b1:47:11:bb:63:55:f5:
39:13:86:70:d5:57:9f:15:c7:a6:7b:d7:f7:d5:82:
25:68:04:30:ae:3c:6a:08:11:21:03:17:c4:ee:9c:
b4:67:64:18:49:07:ef:18:8a:3b:bc:8d:3d:77:ec:
ae:a1:94:f9:db:ed:40:23:fe:17:f0:41:28:d3:8f:
9b:46:91:66:69:ab:f5:b9:8c:e3:58:09:71:84:19:
b8:4c:4a:00:a2:9a:3f:0b:00:17:80:75:73:0a:93:
b3:17:19:70:29:af:3c:3e:b0:87:cd:a9:43:ad:d7:
20:42:9e:e0:17:35:84:83:2f:a0:20:65:b6:ce:d3:
33:2d:be:a3:31:c7:b5:53:33:ea:03:cc:b6:66:49:
49:cd:9a:69:99:ba:2d:23:61:0c:ce:1b:84:f8:60:
2c:f5:91:9c:08:66:17:37:d8:6e:23:ef:b3:64:3a:
3e:98:f8:3f:66:c4:bf:e0:62:df:7e:f6:c5:2c:67:
19:ec:b2:3f:ca:f2:ca:34:6d:1c:21:4a:33:71:7b:
0a:41:08:fd:18:20:49:e1:26:12:87:d9:3f:92:da:
f9:0e:0f:23:1b:8f:91:51:3c:a4:5c:bd:f7:75:c4:
2a:6a:62:f5:2e:a3:2b:59:a2:ac:7c:7d:95:3a:d9:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F5:47:46:2F:D0:75:38:12:1D:77:42:76:21:9B:43:71:BF:4E:37
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:26:98:ef:6c:db:99:5e:06:b6:93:ad:1c:60:6e:ce:eb:a6:
54:09:b2:75:82:92:62:7b:91:88:40:5f:05:e2:cd:ad:b0:23:
26:10:93:85:80:5c:ce:fb:c9:e2:d2:1b:63:71:52:bb:46:b5:
c8:e5:23:73:85:36:40:38:8d:0f:47:54:8d:ac:e4:67:b4:45:
ab:6e:79:b5:9e:76:7b:7b:f0:c7:9c:d6:ac:8a:b9:4a:d9:47:
fb:82:d4:c7:5a:1f:1a:a0:36:ed:e9:a3:f1:0d:7d:6f:a5:57:
ee:f4:d0:27:f5:52:64:7c:6e:e1:aa:ba:fa:d3:30:99:f8:e8:
f8:c3:3d:96:54:99:f0:b4:5d:1a:76:21:d7:76:40:57:d8:35:
45:c4:1e:c3:75:7e:5a:76:08:0a:a4:bf:82:4d:e9:17:9c:d6:
08:1b:bd:38:fd:bd:fc:66:02:df:15:0f:2f:c1:00:80:90:cf:
ac:0d:00:ab:45:b6:90:f3:f8:90:a5:7e:c9:d1:c2:3f:8f:62:
2a:3f:e4:2d:d7:a9:ee:13:d7:e9:a5:c9:e8:07:c7:a8:28:7c:
1e:fa:d4:5c:7c:de:25:a4:b3:ca:cc:ac:ac:61:07:ca:5d:e9:
4b:c7:63:04:38:d7:4d:cc:12:a6:a8:9a:02:f7:0e:e9:7e:65:
86:9c:cc:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tpz5npF3Wv1LchpO39DCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OTE0NTZlZGE1OWZiMGZkMmQxNzNmOTU0MTJiZTM1ZjZj
ZmJmYWYwHhcNMjUwMTMxMTcwMDMzWhcNMjUwMjAxMTcwMDMzWjAzMTEwLwYDVQQD
EyhiZWY1NDc0NjJmZDA3NTM4MTIxZDc3NDI3NjIxOWI0MzcxYmY0ZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsukAn4M2rFHEbtjVfU5E4Zw1Vef
Fceme9f31YIlaAQwrjxqCBEhAxfE7py0Z2QYSQfvGIo7vI09d+yuoZT52+1AI/4X
8EEo04+bRpFmaav1uYzjWAlxhBm4TEoAopo/CwAXgHVzCpOzFxlwKa88PrCHzalD
rdcgQp7gFzWEgy+gIGW2ztMzLb6jMce1UzPqA8y2ZklJzZppmbotI2EMzhuE+GAs
9ZGcCGYXN9huI++zZDo+mPg/ZsS/4GLffvbFLGcZ7LI/yvLKNG0cIUozcXsKQQj9
GCBJ4SYSh9k/ktr5Dg8jG4+RUTykXL33dcQqamL1LqMrWaKsfH2VOtlLTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL71R0Yv0HU4Eh13QnYhm0Nxv043MB8GA1UdIwQY
MBaAFMSRRW7aWfsP0tFz+VQSvjX2z7+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2Et
YTczMGNjZmRhZGM1LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2EtYTczMGNjZmRhZGM1
LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWyaY72zb
mV4GtpOtHGBuzuumVAmydYKSYnuRiEBfBeLNrbAjJhCThYBczvvJ4tIbY3FSu0a1
yOUjc4U2QDiND0dUjazkZ7RFq255tZ52e3vwx5zWrIq5StlH+4LUx1ofGqA27emj
8Q19b6VX7vTQJ/VSZHxu4aq6+tMwmfjo+MM9llSZ8LRdGnYh13ZAV9g1RcQew3V+
WnYICqS/gk3pF5zWCBu9OP29/GYC3xUPL8EAgJDPrA0Aq0W2kPP4kKV+ydHCP49i
Kj/kLdep7hPX6aXJ6AfHqCh8HvrUXHzeJaSzysysrGEHyl3pS8djBDjXTcwSpqia
AvcO6X5lhpzMZw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:10 2025 by rpki-client