Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
File: XFe2FhFxnsfI4AErGv9-gfx2ib0.mft (raw, json)
Hash identifier: 4Ky6elBRtgB6x7/ibd3ph0G+IORMWEwMazVOqX2Qlfg=
Subject key identifier: B0:51:DC:99:E4:70:40:CA:14:E6:58:1B:2C:36:4B:94:FE:87:CA:23
Authority key identifier: 5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
Certificate issuer: /CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Certificate serial: 0194BC3C0648AF9233264410871BAD69AC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: 736mr1KkVtoBPW1oR7owGe-ullo.roa (hash: uR2lVV+jre6sPLOQey9198pgiqdr//RLVlkZmwpBaQw=)
2: XFe2FhFxnsfI4AErGv9-gfx2ib0.crl (hash: FGqLzSE5i7bOi+/fk5JDdX2Z9vWv/Od7PzdWQ+BE7Cc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:06:48:af:92:33:26:44:10:87:1b:ad:69:ac:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=b051dc99e47040ca14e6581b2c364b94fe87ca23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:16:9d:14:5c:b2:c7:66:bd:ab:4e:48:21:
b9:d5:27:b8:87:16:13:9e:52:fd:b5:29:71:23:22:
9d:72:9f:5e:2f:8b:f5:2d:3a:9d:9b:dc:d0:6e:e0:
8e:55:2d:bf:66:fb:02:b3:65:74:94:8c:e8:15:c0:
86:71:14:a9:5b:50:7a:e1:72:59:d5:b7:fb:b2:ae:
b4:ee:d7:4e:5c:b3:66:dc:5c:ad:c6:57:30:4c:4b:
7f:1e:9e:8e:a3:63:db:a0:71:8c:cd:76:1c:34:be:
81:da:ae:7c:c1:81:a4:e3:91:d7:73:d1:8b:fc:73:
09:01:81:87:19:87:18:12:0e:66:a8:f9:cd:e5:45:
b9:9b:b5:a2:8b:6a:0a:77:e4:b1:76:62:0b:f0:c9:
af:b1:ff:de:92:8f:9a:06:8c:05:38:c0:5b:b0:2d:
6c:35:0f:cb:01:dd:85:49:be:b0:33:9e:b6:29:36:
a9:39:60:29:05:da:59:c3:1c:01:aa:fe:12:2e:81:
fc:92:73:ba:3b:9e:03:04:29:0f:8b:40:72:03:76:
1a:d2:de:84:ba:e3:84:65:07:28:91:fb:42:bd:37:
0d:38:7e:f3:f3:17:c0:62:f9:e4:4f:e7:be:fa:3d:
d2:1a:c0:41:08:c9:ac:bb:65:d4:65:1b:9f:65:54:
1e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:51:DC:99:E4:70:40:CA:14:E6:58:1B:2C:36:4B:94:FE:87:CA:23
X509v3 Authority Key Identifier:
keyid:5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8f:a9:4c:cd:94:d7:5d:af:50:91:c2:81:7a:98:5b:b7:a6:
70:48:78:db:1e:81:6b:ed:c5:d3:75:89:50:f4:09:34:b8:fc:
39:ef:e5:6d:91:96:6d:ee:fc:39:8a:bb:57:a9:18:fa:61:8b:
9f:bc:63:7a:63:d6:06:60:db:9d:30:a2:88:11:94:67:6c:32:
67:c8:95:87:f8:67:4d:2e:69:a5:c9:6c:8f:ab:01:3a:54:4e:
fc:2e:59:6f:ff:90:b6:85:58:1d:75:7d:fd:b4:6b:94:da:c3:
26:0e:c5:b8:ad:dc:16:36:67:7b:d2:99:6c:91:aa:c6:ee:18:
68:c9:fd:09:b3:f8:f7:c6:d0:34:4d:b6:7b:cc:48:4d:5d:09:
77:e1:79:53:42:ab:77:0b:f0:f2:40:84:13:da:e3:06:a2:49:
c0:90:05:65:38:9a:2d:bc:33:58:53:d3:ee:af:0c:89:6e:1c:
25:8d:0e:2d:a6:91:04:79:87:db:8c:5a:cf:71:76:44:26:c6:
36:75:ad:93:f1:86:e6:c5:76:1d:ec:90:27:77:0e:10:94:8e:
2f:aa:f8:f0:e6:9e:8f:8a:f6:6a:89:97:65:28:22:fb:04:a8:
b3:e1:da:8d:11:3d:19:0e:50:3a:b8:7f:e6:13:f0:bb:e1:a6:
18:52:2e:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PAZIr5IzJkQQhxutaaxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNTdiNjE2MTE3MTllYzdjOGUwMDEyYjFhZmY3ZTgxZmM3
Njg5YmQwHhcNMjUwMTMxMTIwMDM3WhcNMjUwMjAxMTIwMDM3WjAzMTEwLwYDVQQD
EyhiMDUxZGM5OWU0NzA0MGNhMTRlNjU4MWIyYzM2NGI5NGZlODdjYTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXoWnRRcssdmvatOSCG51Se4hxYT
nlL9tSlxIyKdcp9eL4v1LTqdm9zQbuCOVS2/ZvsCs2V0lIzoFcCGcRSpW1B64XJZ
1bf7sq607tdOXLNm3FytxlcwTEt/Hp6Oo2PboHGMzXYcNL6B2q58wYGk45HXc9GL
/HMJAYGHGYcYEg5mqPnN5UW5m7Wii2oKd+SxdmIL8Mmvsf/eko+aBowFOMBbsC1s
NQ/LAd2FSb6wM562KTapOWApBdpZwxwBqv4SLoH8knO6O54DBCkPi0ByA3Ya0t6E
uuOEZQcokftCvTcNOH7z8xfAYvnkT+e++j3SGsBBCMmsu2XUZRufZVQe6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBR3JnkcEDKFOZYGyw2S5T+h8ojMB8GA1UdIwQY
MBaAFFxXthYRcZ7HyOABKxr/foH8dom9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEZlMkZoRnhuc2ZJNEFFckd2OS1nZngyaWIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iN2ZlNzUtMzBlZS00YTZmLWI1Mjgt
ZmEzMDcxYzQzNWYxLzEvWEZlMkZoRnhuc2ZJNEFFckd2OS1nZngyaWIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9iN2ZlNzUtMzBlZS00YTZmLWI1MjgtZmEzMDcxYzQzNWYx
LzEvWEZlMkZoRnhuc2ZJNEFFckd2OS1nZngyaWIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4+pTM2U
112vUJHCgXqYW7emcEh42x6Ba+3F03WJUPQJNLj8Oe/lbZGWbe78OYq7V6kY+mGL
n7xjemPWBmDbnTCiiBGUZ2wyZ8iVh/hnTS5ppclsj6sBOlRO/C5Zb/+QtoVYHXV9
/bRrlNrDJg7FuK3cFjZne9KZbJGqxu4YaMn9CbP498bQNE22e8xITV0Jd+F5U0Kr
dwvw8kCEE9rjBqJJwJAFZTiaLbwzWFPT7q8MiW4cJY0OLaaRBHmH24xaz3F2RCbG
NnWtk/GG5sV2HeyQJ3cOEJSOL6r48Oaej4r2aomXZSgi+wSos+HajRE9GQ5QOrh/
5hPwu+GmGFIuiw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:23 2025 by rpki-client