Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
File: X4rRNUEr-QQb5f0I50okEg2z7sc.mft (raw, json)
Hash identifier: jRv2/P5vavWQyZ6MZIBSHRo5GpPvIuglMpsjTfttgRQ=
Subject key identifier: D6:54:61:A8:5A:48:92:89:F7:80:37:1A:E1:E5:DE:B7:87:D7:FC:93
Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
Certificate issuer: /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Certificate serial: 0194BD17EEFB1DF49E0330A113AE94833AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
Manifest number: 087D
Signing time: Fri 31 Jan 2025 16:00:49 +0000
Manifest this update: Fri 31 Jan 2025 16:00:49 +0000
Manifest next update: Sat 01 Feb 2025 16:00:49 +0000
Files and hashes: 1: OaP0ViKbeY2ivI-4rv6OeNEGIqA.roa (hash: e7Vy7pCIoWDvqhKmOHXfSd0NE1hCUf1lKUMb+Ggiqf0=)
2: X4rRNUEr-QQb5f0I50okEg2z7sc.crl (hash: yI9E50vWB1Fgk97asMUxUkvM5FWz5te2FKGdKAkTBus=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ee:fb:1d:f4:9e:03:30:a1:13:ae:94:83:3a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Validity
Not Before: Jan 31 16:00:49 2025 GMT
Not After : Feb 1 16:00:49 2025 GMT
Subject: CN=d65461a85a489289f780371ae1e5deb787d7fc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c9:38:35:fc:0e:e7:59:4d:2a:1d:b6:fa:72:
a4:85:a9:bb:43:ef:50:31:03:f3:f4:c6:0f:1a:41:
af:69:fa:b4:bb:63:5e:ba:6d:7a:f3:17:94:0e:fe:
ff:5e:16:6a:78:f2:1e:2f:8e:ea:d0:be:fc:89:30:
9d:d8:02:bf:91:c5:7c:cc:5c:c7:5d:c7:30:44:ff:
8f:89:07:24:cb:ea:44:82:dd:4f:f8:8f:b3:db:34:
05:86:c8:5d:d6:c3:b0:17:1e:44:f0:67:3f:16:48:
76:7a:33:88:15:54:c3:22:75:34:ff:54:2b:1f:20:
cc:ce:29:e9:5f:d0:3c:63:87:0d:c2:0c:34:14:f5:
96:c3:e9:b3:ee:f6:fd:db:0f:50:ec:50:b2:d6:ac:
80:99:05:06:6f:09:bc:29:02:32:41:d5:a1:19:f6:
bf:b7:11:a1:11:44:7a:3b:84:eb:27:f7:4c:58:53:
55:36:9a:f1:35:17:88:f5:b8:9c:7f:c5:e2:70:21:
29:4f:31:87:ba:7b:03:40:ea:86:e9:a4:94:1c:03:
48:63:77:fa:26:95:dc:e5:19:e1:7e:28:d5:0c:49:
95:83:78:97:89:e1:38:ad:49:83:bf:b3:12:48:57:
d5:74:4f:28:50:84:2b:de:28:65:9f:4d:96:5c:11:
12:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:54:61:A8:5A:48:92:89:F7:80:37:1A:E1:E5:DE:B7:87:D7:FC:93
X509v3 Authority Key Identifier:
keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c8:ff:d6:e6:00:94:79:8f:94:cd:18:7c:ba:c4:d1:11:12:
d4:f5:2a:5f:f7:57:1f:2b:da:3d:99:0e:d9:21:50:79:0b:e5:
10:80:c3:ef:03:6a:8e:27:43:86:04:8f:67:8f:df:78:7b:5d:
c4:9b:6f:58:f2:f6:6e:74:64:8b:9c:99:d6:8b:23:88:af:9d:
f1:77:85:12:ce:b8:de:d3:25:96:8c:89:15:1e:a9:ff:85:1e:
d1:4d:58:05:0e:db:be:b0:ed:f9:36:78:8d:78:37:d4:53:99:
52:2c:bd:43:49:7d:06:a8:dd:0d:9e:98:93:11:70:9a:c1:d4:
e1:24:e0:95:6d:c4:db:41:26:f9:80:2e:fe:7f:e6:87:46:24:
09:a1:60:9f:cf:79:c7:48:a9:d5:4b:4b:e2:61:46:d0:fc:85:
ae:51:36:9f:86:52:fe:d9:dd:e1:01:14:7f:2e:c3:70:d3:fe:
58:f8:28:ad:b4:04:17:05:ae:a2:8c:27:2d:51:87:ce:58:37:
61:f3:09:1c:63:1d:75:9a:4c:8f:5e:7e:0a:49:15:d4:c2:01:
fd:4c:a1:ae:dd:9d:1c:27:6d:78:9c:97:d0:89:70:3b:a4:19:
0b:ed:5c:6c:09:bd:b5:34:d5:74:6f:5f:e6:44:63:89:62:db:
5d:b2:3b:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+77HfSeAzChE66UgzrAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOGFkMTM1NDEyYmY5MDQxYmU1ZmQwOGU3NGEyNDEyMGRi
M2VlYzcwHhcNMjUwMTMxMTYwMDQ5WhcNMjUwMjAxMTYwMDQ5WjAzMTEwLwYDVQQD
EyhkNjU0NjFhODVhNDg5Mjg5Zjc4MDM3MWFlMWU1ZGViNzg3ZDdmYzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Mk4NfwO51lNKh22+nKkham7Q+9Q
MQPz9MYPGkGvafq0u2Neum168xeUDv7/XhZqePIeL47q0L78iTCd2AK/kcV8zFzH
XccwRP+PiQcky+pEgt1P+I+z2zQFhshd1sOwFx5E8Gc/Fkh2ejOIFVTDInU0/1Qr
HyDMzinpX9A8Y4cNwgw0FPWWw+mz7vb92w9Q7FCy1qyAmQUGbwm8KQIyQdWhGfa/
txGhEUR6O4TrJ/dMWFNVNprxNReI9bicf8XicCEpTzGHunsDQOqG6aSUHANIY3f6
JpXc5RnhfijVDEmVg3iXieE4rUmDv7MSSFfVdE8oUIQr3ihln02WXBESawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZUYahaSJKJ94A3GuHl3reH1/yTMB8GA1UdIwQY
MBaAFF+K0TVBK/kEG+X9COdKJBINs+7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAt
Mzc5NzMzYWIzOGNkLzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAtMzc5NzMzYWIzOGNk
LzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsj/1uYA
lHmPlM0YfLrE0RES1PUqX/dXHyvaPZkO2SFQeQvlEIDD7wNqjidDhgSPZ4/feHtd
xJtvWPL2bnRki5yZ1osjiK+d8XeFEs643tMlloyJFR6p/4Ue0U1YBQ7bvrDt+TZ4
jXg31FOZUiy9Q0l9BqjdDZ6YkxFwmsHU4STglW3E20Em+YAu/n/mh0YkCaFgn895
x0ip1UtL4mFG0PyFrlE2n4ZS/tnd4QEUfy7DcNP+WPgorbQEFwWuoownLVGHzlg3
YfMJHGMddZpMj15+CkkV1MIB/Uyhrt2dHCdteJyX0IlwO6QZC+1cbAm9tTTVdG9f
5kRjiWLbXbI7Rg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:18 2025 by rpki-client