Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: QWt8bpz9OqqXi/Bn58o10tCt94v0/qDy5CakKQ9q7UM=
Subject key identifier: 24:D4:C1:43:5E:17:D9:D3:D5:5D:55:10:51:FD:2B:B3:39:06:5A:80
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 0194BC3BF1EB2CBBA6D0FC3890CE34DCE826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: MgclL4OXa3yq0C9NC6wGpXOISuyfRT/odGvLgfAI0Mo=)
2: yYnh0oj8K2dQK2z9LDZZ65DQYSs.roa (hash: 3QTD+1CKKlfqfljPMdL2fAmfzGSrBj/hSNwxcC4oGqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f1:eb:2c:bb:a6:d0:fc:38:90:ce:34:dc:e8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=24d4c1435e17d9d3d55d551051fd2bb339065a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:d0:3c:e2:25:91:7e:94:57:4b:32:65:da:
04:88:36:d9:e7:71:6a:8f:20:ba:37:76:4c:33:eb:
e7:8a:23:fc:6e:2c:ab:e6:ec:90:31:eb:ba:1d:4c:
a6:96:b4:09:e3:b5:fa:08:ee:32:b0:cf:3f:7c:91:
a7:77:2f:52:d8:35:f7:b2:71:e1:3f:60:d1:b4:0d:
25:1e:0b:44:db:67:ad:a2:9b:95:92:fe:bb:d1:53:
f0:a6:18:63:fc:da:c7:f7:ac:e3:b8:11:85:08:d2:
92:4e:b1:56:56:c5:f0:66:fa:43:29:79:f8:c2:d5:
62:00:ac:e8:b5:57:4b:e7:ec:a9:53:35:0f:17:01:
d2:e0:e4:84:e6:67:33:af:84:40:a8:f8:95:45:d1:
4e:33:3f:f5:75:b3:34:22:52:c2:18:63:5e:10:8d:
37:72:9e:14:8a:cf:ab:e8:3d:d7:79:ee:45:02:c4:
79:f4:cf:88:04:64:22:3a:6d:98:eb:56:a1:77:07:
36:45:8c:39:1f:dc:2c:0d:4d:a1:da:ea:34:b2:04:
b1:4a:6d:0e:42:61:93:3a:08:f6:d8:06:11:25:12:
62:6e:18:5e:6a:e9:92:e4:6f:9d:59:24:21:d2:51:
45:56:ae:3e:52:5e:2f:66:4c:a4:da:11:4c:54:85:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D4:C1:43:5E:17:D9:D3:D5:5D:55:10:51:FD:2B:B3:39:06:5A:80
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:76:89:1d:38:8e:27:c5:7a:3e:40:dd:70:9f:24:a0:fd:2d:
99:f5:85:02:3b:b8:54:51:b0:bf:4a:81:ff:98:34:82:8f:43:
f4:4d:d2:6b:18:03:0f:b7:19:93:98:4f:fd:5e:b6:53:71:77:
44:f3:f9:6a:9b:8d:dc:34:02:1e:50:ac:a8:0a:d7:44:b8:28:
54:0b:ad:7d:a2:ae:ee:7d:24:28:6c:e3:bf:ff:cb:da:cf:49:
1c:9b:fb:98:77:c0:88:59:5a:a5:34:b4:ce:fc:e1:56:c7:6e:
75:27:f3:5f:00:75:a4:ad:e5:12:ae:af:ff:88:53:97:bc:43:
84:da:4f:7e:ac:e6:82:d1:40:54:c6:6f:ab:8b:53:6f:9a:a8:
bb:0a:54:d7:28:10:4e:88:44:72:42:f3:32:8e:fe:63:1f:eb:
21:c1:3e:08:f4:ff:58:56:bb:33:43:32:89:77:e0:46:bf:7c:
fc:38:0a:bf:f2:1f:65:d3:55:92:39:95:eb:05:96:4c:a7:b3:
bf:f7:99:bb:e6:7e:54:81:03:5f:27:04:c6:e6:b9:eb:c4:f7:
57:a1:07:6f:e0:38:4d:c6:6d:4f:36:10:2b:72:cc:de:08:07:
04:a8:17:95:bd:4d:7a:4c:32:4e:33:fa:e2:d8:22:44:51:fd:
f8:16:68:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/HrLLum0Pw4kM403OgmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMTI5YjA0NjBjZjllZTA1MDBlZTg4MGEyY2ZhMWE1MjRl
NGRmMDAwHhcNMjUwMTMxMTIwMDMyWhcNMjUwMjAxMTIwMDMyWjAzMTEwLwYDVQQD
EygyNGQ0YzE0MzVlMTdkOWQzZDU1ZDU1MTA1MWZkMmJiMzM5MDY1YTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKPQPOIlkX6UV0syZdoEiDbZ53Fq
jyC6N3ZMM+vniiP8biyr5uyQMeu6HUymlrQJ47X6CO4ysM8/fJGndy9S2DX3snHh
P2DRtA0lHgtE22etopuVkv670VPwphhj/NrH96zjuBGFCNKSTrFWVsXwZvpDKXn4
wtViAKzotVdL5+ypUzUPFwHS4OSE5mczr4RAqPiVRdFOMz/1dbM0IlLCGGNeEI03
cp4Uis+r6D3Xee5FAsR59M+IBGQiOm2Y61ahdwc2RYw5H9wsDU2h2uo0sgSxSm0O
QmGTOgj22AYRJRJibhheaumS5G+dWSQh0lFFVq4+Ul4vZkyk2hFMVIUZ7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTUwUNeF9nT1V1VEFH9K7M5BlqAMB8GA1UdIwQY
MBaAFF0SmwRgz57gUA7ogKLPoaUk5N8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEt
YTg3N2RkNTFiYzQ5LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEtYTg3N2RkNTFiYzQ5
LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3aJHTiO
J8V6PkDdcJ8koP0tmfWFAju4VFGwv0qB/5g0go9D9E3SaxgDD7cZk5hP/V62U3F3
RPP5apuN3DQCHlCsqArXRLgoVAutfaKu7n0kKGzjv//L2s9JHJv7mHfAiFlapTS0
zvzhVsdudSfzXwB1pK3lEq6v/4hTl7xDhNpPfqzmgtFAVMZvq4tTb5qouwpU1ygQ
TohEckLzMo7+Yx/rIcE+CPT/WFa7M0MyiXfgRr98/DgKv/IfZdNVkjmV6wWWTKez
v/eZu+Z+VIEDXycExua568T3V6EHb+A4TcZtTzYQK3LM3ggHBKgXlb1NekwyTjP6
4tgiRFH9+BZoZw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:01 2025 by rpki-client