
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
File: XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json)
Hash identifier: uRYCMc+L3wsQTycNqQEfFlKdzbNygY4j2ZRg2HRdp2Y=
Subject key identifier: DA:E7:7F:FB:14:60:30:80:C5:9A:BC:38:38:30:D9:51:0F:DC:C7:13
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial: 0194BBCE7756BC7047936B0EE827E1F78FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
Manifest number: 03A0
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: 0EYHloNNMUeAQfFhtTwh0_j8yCs.roa (hash: cCeGu5Zp9qskDY7ZxrA5s8MH+wQ38rU2p3PBy29pBl4=)
2: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: sviOXN9Reb+gPf7+kBl3ZTXNs3Txxf0u3xjENO9oTd4=)
3: lmViBZUrJauVEE0G2QrmSk33TZM.roa (hash: HMXZlZJ5YNloePMdOCSIn559A8cE+RQD1iAwls1t7fk=)
4: pN0se_Y109am0Y5YmcGHEfKnS4A.roa (hash: E9CxUuwH+q4iMV/i3sCc8FVe3QsSVz+3bNcj05HkFps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:77:56:bc:70:47:93:6b:0e:e8:27:e1:f7:8f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=dae77ffb14603080c59abc383830d9510fdcc713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:55:b2:e7:83:d5:cd:99:22:4a:98:d0:38:
74:da:f5:51:bc:af:84:9f:be:bd:27:d3:3a:33:80:
99:92:94:5e:5c:24:2f:c8:de:7a:6e:cf:d6:1c:db:
26:b1:1c:68:19:48:ce:78:16:42:cd:a6:a6:eb:f4:
9d:eb:31:5d:a4:03:9f:8a:10:40:65:84:ad:1e:81:
69:7d:b1:6b:49:80:21:eb:07:e7:e1:a0:68:19:7e:
2d:72:ff:36:66:ee:20:a5:ce:8a:88:a4:53:e0:c8:
dd:66:03:6a:51:69:36:31:cb:62:a3:11:c2:4f:37:
01:b6:a9:ef:9b:2a:4b:a1:2e:7f:db:69:3c:15:ef:
f5:a1:b0:01:ef:3e:f3:7b:38:8f:d7:30:1b:ca:57:
ed:11:3e:7a:2d:10:69:2e:f9:03:07:5d:6c:ef:4d:
61:bf:c8:5c:7f:f4:52:be:01:ef:17:a2:74:f8:87:
fe:ba:1b:f8:34:40:32:a2:b8:d6:c1:63:a0:16:5e:
0a:2b:8e:59:7c:9b:59:f8:85:b9:0f:24:25:64:86:
ab:2d:a1:de:de:50:04:6a:c7:a7:ba:75:8b:9a:29:
1c:a7:a4:a4:7e:71:a6:02:7d:30:ca:73:5c:f6:4b:
4f:a2:5a:a7:7f:f4:34:92:2e:e2:2d:1b:30:4d:0e:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E7:7F:FB:14:60:30:80:C5:9A:BC:38:38:30:D9:51:0F:DC:C7:13
X509v3 Authority Key Identifier:
keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cb:cb:60:d3:02:fc:6c:90:77:b1:33:5b:a0:23:74:79:8f:
50:81:9d:56:a4:fa:30:50:65:cd:5a:8f:fd:59:45:0e:a6:10:
6c:17:9f:84:64:0a:bb:32:a6:f2:ce:47:8a:0b:7d:08:ed:d4:
74:ff:33:03:61:34:a3:cb:f3:a7:ed:8f:f2:cb:73:11:03:a9:
3b:3b:99:74:94:4b:96:44:5f:72:82:bf:ed:fd:96:0e:cc:ca:
f7:e1:08:fc:67:52:89:4c:2e:e5:e9:e7:56:75:0a:1f:89:2e:
05:ba:03:0a:30:0a:a9:0d:8f:ca:65:4b:72:18:b0:3c:f7:b2:
18:bb:b9:00:62:64:95:19:6e:f0:65:74:4d:96:1f:0a:a6:20:
3b:42:a4:31:95:68:78:e2:7d:51:27:b3:4a:9e:43:67:44:4d:
b7:06:d1:56:66:0a:17:65:c4:57:c8:c0:79:16:46:2e:e4:a5:
be:63:37:d2:01:ad:90:fe:ce:16:a0:e9:9b:7f:67:84:7f:1c:
c9:bf:05:96:82:c8:e4:8d:21:ac:7d:7d:65:04:9c:f7:08:17:
e7:4d:da:03:97:93:ea:29:6f:18:10:b8:f7:fc:29:1e:a5:03:
84:28:cc:4e:07:ea:3c:36:ad:72:0c:6f:1d:61:63:4b:56:53:
41:ba:63:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zndWvHBHk2sO6Cfh94/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOTVmZGZkMjhjZGMwM2Q4OWQyMTRlNGFkM2E2YzVmYjNl
YmFjYmYwHhcNMjUwMTMxMTAwMDU3WhcNMjUwMjAxMTAwMDU3WjAzMTEwLwYDVQQD
EyhkYWU3N2ZmYjE0NjAzMDgwYzU5YWJjMzgzODMwZDk1MTBmZGNjNzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHBVsueD1c2ZIkqY0Dh02vVRvK+E
n769J9M6M4CZkpReXCQvyN56bs/WHNsmsRxoGUjOeBZCzaam6/Sd6zFdpAOfihBA
ZYStHoFpfbFrSYAh6wfn4aBoGX4tcv82Zu4gpc6KiKRT4MjdZgNqUWk2MctioxHC
TzcBtqnvmypLoS5/22k8Fe/1obAB7z7zeziP1zAbylftET56LRBpLvkDB11s701h
v8hcf/RSvgHvF6J0+If+uhv4NEAyorjWwWOgFl4KK45ZfJtZ+IW5DyQlZIarLaHe
3lAEasenunWLmikcp6SkfnGmAn0wynNc9ktPolqnf/Q0ki7iLRswTQ5DjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrnf/sUYDCAxZq8ODgw2VEP3McTMB8GA1UdIwQY
MBaAFF6V/f0ozcA9idIU5K06bF+z66y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMt
NGE3ZGRmMmQ4NmJkLzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMtNGE3ZGRmMmQ4NmJk
LzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicvLYNMC
/GyQd7EzW6AjdHmPUIGdVqT6MFBlzVqP/VlFDqYQbBefhGQKuzKm8s5Higt9CO3U
dP8zA2E0o8vzp+2P8stzEQOpOzuZdJRLlkRfcoK/7f2WDszK9+EI/GdSiUwu5enn
VnUKH4kuBboDCjAKqQ2PymVLchiwPPeyGLu5AGJklRlu8GV0TZYfCqYgO0KkMZVo
eOJ9USezSp5DZ0RNtwbRVmYKF2XEV8jAeRZGLuSlvmM30gGtkP7OFqDpm39nhH8c
yb8FloLI5I0hrH19ZQSc9wgX503aA5eT6ilvGBC49/wpHqUDhCjMTgfqPDatcgxv
HWFjS1ZTQbpjQQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:19 2025 by rpki-client