Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/xHqPXpSR9hvSgZJTgKlRz39AssY.mft
File: xHqPXpSR9hvSgZJTgKlRz39AssY.mft (raw, json)
Hash identifier: RCcxopMCeTea+oFYAZ94PSbGIkOBRFYO0r3Sit0lits=
Subject key identifier: 21:AE:B9:70:04:99:73:3A:8B:0D:54:17:9C:7E:A9:D9:6C:E1:D3:B2
Authority key identifier: C4:7A:8F:5E:94:91:F6:1B:D2:81:92:53:80:A9:51:CF:7F:40:B2:C6
Certificate issuer: /CN=c47a8f5e9491f61bd281925380a951cf7f40b2c6
Certificate serial: 0194BD176BF5BA629523B9D660127DDBC8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqPXpSR9hvSgZJTgKlRz39AssY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/xHqPXpSR9hvSgZJTgKlRz39AssY.mft
Manifest number: 0CFF
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: SGwAA-fR3D3rc4SYK2_MACMqPag.roa (hash: n833x52q5vzdsajpNe+4Svd7tOv/ERmWFk/p4sac9rU=)
2: xHqPXpSR9hvSgZJTgKlRz39AssY.crl (hash: E6QxFbnuinaXmH8nLIkwnrUSH8qbYWtSgQXkmNlzLfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6b:f5:ba:62:95:23:b9:d6:60:12:7d:db:c8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c47a8f5e9491f61bd281925380a951cf7f40b2c6
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=21aeb9700499733a8b0d54179c7ea9d96ce1d3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:11:b7:f9:1c:53:c5:76:9c:b2:d8:8a:00:
72:ba:f0:4b:82:23:88:8a:02:73:fb:af:cf:aa:e3:
00:d0:a5:22:ac:73:6c:a1:fd:15:bf:c0:f5:2b:0c:
c4:58:78:52:40:35:5a:9b:e2:55:e4:56:ba:b3:e1:
f1:de:79:9f:db:43:c0:96:3a:fd:2b:88:a3:7b:57:
1e:39:70:60:32:ee:ec:2c:60:c8:79:6e:62:72:cc:
92:69:42:73:49:b6:62:1e:b4:fd:8b:d6:cc:a1:25:
df:55:af:8d:94:66:c2:c5:b6:3f:4c:93:de:c1:da:
ec:d6:5a:5b:8f:28:d0:de:77:ca:b8:d2:aa:7b:2b:
59:d0:37:cb:26:8a:0a:56:76:ac:6f:7e:50:5c:2e:
88:b1:cf:f9:7c:a6:dd:5f:3d:aa:6f:c5:e0:0a:d9:
9f:f7:3e:c9:f3:fd:82:44:36:65:cd:58:8b:90:80:
77:a4:03:44:91:5a:65:70:10:23:c6:df:7f:83:b8:
2d:4a:ac:e5:ca:46:40:d2:c9:45:03:cc:60:03:b1:
ae:21:3d:b0:8e:39:2f:84:23:9e:08:f4:ec:93:3d:
c6:d8:61:56:a2:39:27:f1:86:51:79:e9:1f:27:12:
9d:b4:85:1f:20:7a:0b:e2:ec:d7:24:d5:58:8c:f2:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AE:B9:70:04:99:73:3A:8B:0D:54:17:9C:7E:A9:D9:6C:E1:D3:B2
X509v3 Authority Key Identifier:
keyid:C4:7A:8F:5E:94:91:F6:1B:D2:81:92:53:80:A9:51:CF:7F:40:B2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqPXpSR9hvSgZJTgKlRz39AssY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/xHqPXpSR9hvSgZJTgKlRz39AssY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/xHqPXpSR9hvSgZJTgKlRz39AssY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:de:4b:b1:94:a2:7e:9e:2d:b3:c4:90:08:48:81:4c:f3:31:
15:bf:0b:c0:c4:2d:bc:09:15:49:3b:9b:01:a8:f5:f9:c4:29:
0e:73:d5:c2:c4:db:68:33:b2:40:50:76:b2:1c:94:8e:cb:57:
4b:84:85:16:61:69:c7:9b:93:e1:d3:8d:17:04:f3:b7:6b:9e:
fc:96:e5:43:de:a8:03:bc:8e:78:ac:a6:0d:62:2b:ca:5f:62:
cf:18:a1:47:ad:d4:d8:58:2f:3b:78:c5:f8:89:35:45:e6:5b:
b4:35:94:5e:e5:bd:ff:64:d8:94:23:82:0e:2a:5c:35:d8:6c:
02:2a:4f:36:69:c7:41:ae:c2:85:18:e3:01:87:d2:5e:0a:2d:
56:59:e0:03:78:89:f2:d3:a8:71:d3:5b:59:dd:b1:4f:8c:e3:
f7:e4:81:f9:7c:06:66:1b:63:30:6a:b0:f5:49:d2:2a:79:48:
9c:b2:c3:e3:aa:2e:b9:0e:f0:c9:a9:2f:fb:b2:f6:9d:01:b9:
42:b1:ec:1b:ca:58:39:df:a5:03:73:81:81:89:a8:18:ae:5a:
aa:fd:6a:ad:50:e1:34:3a:91:47:f3:11:4f:3d:90:38:30:b8:
92:d2:3d:10:b1:44:52:53:ce:f5:ba:05:3c:ec:28:7f:10:a8:
74:b9:27:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2v1umKVI7nWYBJ928jUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0N2E4ZjVlOTQ5MWY2MWJkMjgxOTI1MzgwYTk1MWNmN2Y0
MGIyYzYwHhcNMjUwMTMxMTYwMDE2WhcNMjUwMjAxMTYwMDE2WjAzMTEwLwYDVQQD
EygyMWFlYjk3MDA0OTk3MzNhOGIwZDU0MTc5YzdlYTlkOTZjZTFkM2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCURt/kcU8V2nLLYigByuvBLgiOI
igJz+6/PquMA0KUirHNsof0Vv8D1KwzEWHhSQDVam+JV5Fa6s+Hx3nmf20PAljr9
K4ije1ceOXBgMu7sLGDIeW5icsySaUJzSbZiHrT9i9bMoSXfVa+NlGbCxbY/TJPe
wdrs1lpbjyjQ3nfKuNKqeytZ0DfLJooKVnasb35QXC6Isc/5fKbdXz2qb8XgCtmf
9z7J8/2CRDZlzViLkIB3pANEkVplcBAjxt9/g7gtSqzlykZA0slFA8xgA7GuIT2w
jjkvhCOeCPTskz3G2GFWojkn8YZReekfJxKdtIUfIHoL4uzXJNVYjPKo+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGuuXAEmXM6iw1UF5x+qdls4dOyMB8GA1UdIwQY
MBaAFMR6j16UkfYb0oGSU4CpUc9/QLLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEhxUFhwU1I5aHZTZ1pKVGdLbFJ6MzlBc3NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lYzVjZTQtNTg5My00YTBlLTk4YzUt
NjliZTJhY2JlZDhlLzEveEhxUFhwU1I5aHZTZ1pKVGdLbFJ6MzlBc3NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lYzVjZTQtNTg5My00YTBlLTk4YzUtNjliZTJhY2JlZDhl
LzEveEhxUFhwU1I5aHZTZ1pKVGdLbFJ6MzlBc3NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARd5LsZSi
fp4ts8SQCEiBTPMxFb8LwMQtvAkVSTubAaj1+cQpDnPVwsTbaDOyQFB2shyUjstX
S4SFFmFpx5uT4dONFwTzt2ue/JblQ96oA7yOeKymDWIryl9izxihR63U2FgvO3jF
+Ik1ReZbtDWUXuW9/2TYlCOCDipcNdhsAipPNmnHQa7ChRjjAYfSXgotVlngA3iJ
8tOocdNbWd2xT4zj9+SB+XwGZhtjMGqw9UnSKnlInLLD46ouuQ7wyakv+7L2nQG5
QrHsG8pYOd+lA3OBgYmoGK5aqv1qrVDhNDqRR/MRTz2QODC4ktI9ELFEUlPO9boF
POwofxCodLknig==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:12 2025 by rpki-client