Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File: xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier: Jg5sHpCkBMhWgupvLSuSdQRDjHLRxk/RG5914bbPFDA=
Subject key identifier: 81:DD:1C:2F:3E:25:FD:13:66:5F:BA:71:A5:84:83:70:C0:EC:F5:36
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 0194BC3C7F00A6EEFEFCF4EC4F48E26A084B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number: 0521
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: WgE1kNJ4HqqNdSzDkbfFtyN_DXk.roa (hash: db+3EkIhxelgTwb79CorySnIdUAtErdWodxq+R94Dd4=)
2: wX9-fmmtd2YYNFDQlxKRbLnMgpc.roa (hash: KUR4w79AlRcsNrJ7doBgnDGw9yglLgLthCB1efngELk=)
3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: e6Mb1diLDlBHGrAL04DyR/h+ww6IpypJ34Mwc3/cgwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7f:00:a6:ee:fe:fc:f4:ec:4f:48:e2:6a:08:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=81dd1c2f3e25fd13665fba71a5848370c0ecf536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:96:35:fe:24:2e:53:13:26:37:c6:b6:6e:
8d:b9:c0:4b:51:6b:b1:e2:48:d7:ed:ba:cb:7c:b3:
23:05:bb:57:44:6e:f5:24:19:92:50:2b:b9:e1:da:
1e:81:ca:56:8b:d6:5b:3c:ff:9e:f4:7f:71:67:61:
f0:91:63:71:db:ba:88:1f:d5:4c:48:05:8a:76:38:
33:ff:1b:9c:26:bf:01:8a:98:72:cc:a1:bc:d7:4a:
97:d4:f0:48:ef:05:ef:ba:d3:c4:9d:8a:42:48:4c:
26:18:6d:06:35:af:6f:5a:33:50:43:e4:a7:4d:6b:
0d:21:02:98:9e:55:db:c1:4b:96:45:7f:f8:c6:b6:
35:28:dd:61:c8:c1:c6:10:02:8d:9e:fb:3a:c1:d2:
e6:1b:3b:1b:23:2f:3e:f4:8e:98:b4:1a:8c:4f:32:
d9:bc:a9:7f:32:62:a2:4f:63:20:a1:45:51:c8:1f:
81:c2:f9:82:42:68:ea:bc:d5:76:06:b5:b0:d7:62:
18:48:62:5f:0c:0d:98:93:ef:bb:d7:18:43:83:98:
0c:35:5c:aa:25:76:73:3c:39:25:fb:59:62:a8:6a:
73:f0:f5:a8:f9:5d:6a:d0:17:7d:a5:fd:69:14:db:
89:f0:40:70:e4:68:f5:0c:8b:31:84:7a:65:7e:44:
5f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DD:1C:2F:3E:25:FD:13:66:5F:BA:71:A5:84:83:70:C0:EC:F5:36
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e9:b3:03:1f:07:0c:22:59:f5:ce:cf:ac:86:80:99:83:48:
c9:0a:32:98:70:e5:af:54:e2:0e:63:53:9d:10:92:79:b8:13:
a4:86:56:e3:5d:2a:06:6a:8a:dd:be:c0:e0:d3:01:56:cb:d0:
8d:9c:e0:cc:cd:6b:52:df:77:7e:ab:81:48:70:65:25:a0:c3:
f5:d0:ae:34:eb:c7:0d:8c:81:82:c9:a5:9b:5e:a0:89:36:ec:
70:38:dd:d4:34:3f:6a:d3:1e:f3:cc:ff:6c:e3:e0:24:00:79:
48:45:f6:4f:be:fa:e9:52:d0:00:8a:d0:82:08:be:91:1d:a4:
93:1a:f2:a2:0a:8a:80:33:39:88:b9:20:3a:fc:32:2a:07:46:
9b:94:86:54:af:a8:c4:c8:3a:e7:35:05:69:b0:33:c0:fc:bc:
09:78:49:5c:c3:33:71:ba:fd:11:88:6d:ad:eb:73:93:d4:2a:
6e:ba:14:da:8c:1b:d6:6a:6d:a4:01:c9:7a:34:d7:0e:10:3d:
4b:74:90:c0:db:70:be:72:d9:db:8d:18:38:e2:3a:c3:6e:cd:
64:23:60:c4:32:cf:d8:47:fd:fe:44:c5:9e:35:10:50:8f:cd:
df:e2:06:96:d6:5a:ae:e8:9d:3b:14:15:c5:b2:9c:90:01:8b:
04:d7:7e:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PH8Apu7+/PTsT0jiaghLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Y2MwMmY4ZmE3NGNmMGRhODFlOGNlMjk0M2VhN2Y5ZWQy
YTg1ZjQwHhcNMjUwMTMxMTIwMTA4WhcNMjUwMjAxMTIwMTA4WjAzMTEwLwYDVQQD
Eyg4MWRkMWMyZjNlMjVmZDEzNjY1ZmJhNzFhNTg0ODM3MGMwZWNmNTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyyWNf4kLlMTJjfGtm6NucBLUWux
4kjX7brLfLMjBbtXRG71JBmSUCu54doegcpWi9ZbPP+e9H9xZ2HwkWNx27qIH9VM
SAWKdjgz/xucJr8BiphyzKG810qX1PBI7wXvutPEnYpCSEwmGG0GNa9vWjNQQ+Sn
TWsNIQKYnlXbwUuWRX/4xrY1KN1hyMHGEAKNnvs6wdLmGzsbIy8+9I6YtBqMTzLZ
vKl/MmKiT2MgoUVRyB+BwvmCQmjqvNV2BrWw12IYSGJfDA2Yk++71xhDg5gMNVyq
JXZzPDkl+1liqGpz8PWo+V1q0Bd9pf1pFNuJ8EBw5Gj1DIsxhHplfkRfwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHdHC8+Jf0TZl+6caWEg3DA7PU2MB8GA1UdIwQY
MBaAFMTMAvj6dM8NqB6M4pQ+p/ntKoX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lMzQ4ZjEtYmI3MC00YjM0LWJlMTIt
MjE5ZTc5ZDg0ZTQzLzEveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lMzQ4ZjEtYmI3MC00YjM0LWJlMTItMjE5ZTc5ZDg0ZTQz
LzEveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOmzAx8H
DCJZ9c7PrIaAmYNIyQoymHDlr1TiDmNTnRCSebgTpIZW410qBmqK3b7A4NMBVsvQ
jZzgzM1rUt93fquBSHBlJaDD9dCuNOvHDYyBgsmlm16giTbscDjd1DQ/atMe88z/
bOPgJAB5SEX2T7766VLQAIrQggi+kR2kkxryogqKgDM5iLkgOvwyKgdGm5SGVK+o
xMg65zUFabAzwPy8CXhJXMMzcbr9EYhtretzk9QqbroU2owb1mptpAHJejTXDhA9
S3SQwNtwvnLZ240YOOI6w27NZCNgxDLP2Ef9/kTFnjUQUI/N3+IGltZaruidOxQV
xbKckAGLBNd+/A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:47 2025 by rpki-client