Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
File: XiZI8SkNRHG821C4K-TtkyADCU0.mft (raw, json)
Hash identifier: 2ZF1Pwb+OffcFY6j1DPtuYbRYeq3ZPs/z1jkMNAeTsI=
Subject key identifier: EC:D9:38:C6:6F:C6:4B:25:B2:47:81:33:EC:BB:72:BE:CE:A8:5F:E6
Authority key identifier: 5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
Certificate issuer: /CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Certificate serial: 0194BCA9C9C7CA90BCD726B9E9B5005BFD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: BECHjRO1sNTrECspSOXRaHeMWRM.roa (hash: CUP2bSCGR2R7pQJIeBFSspVhJwtI4r06AoqaZ9LnrhQ=)
2: XiZI8SkNRHG821C4K-TtkyADCU0.crl (hash: KSX3ujmqhDZU4p/waLAWxsAsxXmATN1L+OpG6MbnXlM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c9:c7:ca:90:bc:d7:26:b9:e9:b5:00:5b:fd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=ecd938c66fc64b25b2478133ecbb72becea85fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:ed:db:1f:0f:5d:b0:c8:d1:97:16:cf:45:
b2:d9:93:4d:75:1e:0c:7b:c1:0c:21:6c:69:62:bf:
4e:28:0a:57:df:0f:4b:a7:f6:d9:f1:54:e7:d1:50:
37:be:66:9b:44:9a:5c:bd:5c:6b:f7:6f:13:2f:44:
e4:c1:a3:d8:a8:d3:a9:b3:0a:ae:f3:76:c9:b6:e5:
a8:f6:a7:64:ae:30:0a:58:ac:96:57:18:f0:2b:58:
16:a5:fb:32:db:4c:70:12:22:f0:98:e7:49:a6:4c:
9d:0b:aa:4f:72:fd:4d:9c:2f:bd:85:56:42:bb:0a:
50:22:c7:4e:b2:22:9a:ce:68:8d:ed:7c:c7:69:21:
2f:05:56:33:32:2f:4f:bd:1c:51:4e:67:44:12:0c:
4e:db:db:f0:e9:57:e4:a9:f2:9f:88:d8:32:cd:b5:
fd:07:90:2d:b4:88:8b:5a:61:e4:28:68:53:68:17:
eb:6d:00:95:fc:54:1b:79:6b:a1:7b:15:e1:a0:cd:
6a:f0:e0:9f:a0:a7:83:69:69:e6:db:ee:05:75:ec:
dd:de:09:8c:87:78:0c:05:c0:42:74:48:f7:1d:f3:
dc:0e:96:b4:dd:55:94:09:bb:7c:2a:dd:6d:94:cb:
a7:57:d6:e6:88:1d:b7:d8:e3:ae:3d:af:f4:61:19:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D9:38:C6:6F:C6:4B:25:B2:47:81:33:EC:BB:72:BE:CE:A8:5F:E6
X509v3 Authority Key Identifier:
keyid:5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:aa:2a:95:e9:85:1c:86:2b:c2:9b:a4:3a:4b:ee:ca:0c:97:
15:0a:bd:a4:db:5c:f2:e2:3a:9c:f9:26:00:7c:49:d8:46:c5:
f5:bd:27:12:74:c7:ec:61:f7:87:6d:59:99:df:82:c5:32:7d:
51:41:ce:a2:1c:86:bd:6d:2e:8b:b3:ab:b9:98:58:ca:13:60:
69:1f:c0:3a:67:4d:36:d7:29:32:40:b2:a9:4d:d0:d3:22:b9:
31:79:fd:47:f2:f2:e0:8e:40:fd:4a:4f:f7:07:aa:df:ab:c7:
00:e7:cc:07:05:bc:1e:b5:56:39:0b:28:85:c8:4e:21:8a:a1:
1f:07:ad:2a:48:a3:a9:16:12:03:96:13:f5:8d:3e:ea:ea:f4:
2c:04:58:3e:aa:a5:45:74:8e:86:9e:f7:e5:c1:11:23:3d:86:
55:cb:33:1b:35:d1:4d:e5:6c:26:82:b3:b1:f5:3e:a3:70:35:
f9:0f:31:7f:37:4d:00:06:77:98:e9:b6:6c:89:8d:4d:60:57:
60:c1:b7:52:03:6e:46:63:3b:42:98:51:34:60:71:57:8b:cf:
65:10:64:ee:3f:bb:8f:9c:34:19:80:4b:58:f3:98:3d:57:99:
d7:db:84:8a:18:cd:ca:20:7c:ce:c9:42:91:78:04:39:e2:61:
c6:7d:08:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qcnHypC81ya56bUAW/2ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjY0OGYxMjkwZDQ0NzFiY2RiNTBiODJiZTRlZDkzMjAw
MzA5NGQwHhcNMjUwMTMxMTQwMDMxWhcNMjUwMjAxMTQwMDMxWjAzMTEwLwYDVQQD
EyhlY2Q5MzhjNjZmYzY0YjI1YjI0NzgxMzNlY2JiNzJiZWNlYTg1ZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqTt2x8PXbDI0ZcWz0Wy2ZNNdR4M
e8EMIWxpYr9OKApX3w9Lp/bZ8VTn0VA3vmabRJpcvVxr928TL0TkwaPYqNOpswqu
83bJtuWo9qdkrjAKWKyWVxjwK1gWpfsy20xwEiLwmOdJpkydC6pPcv1NnC+9hVZC
uwpQIsdOsiKazmiN7XzHaSEvBVYzMi9PvRxRTmdEEgxO29vw6VfkqfKfiNgyzbX9
B5AttIiLWmHkKGhTaBfrbQCV/FQbeWuhexXhoM1q8OCfoKeDaWnm2+4Fdezd3gmM
h3gMBcBCdEj3HfPcDpa03VWUCbt8Kt1tlMunV9bmiB232OOuPa/0YRmkCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzZOMZvxkslskeBM+y7cr7OqF/mMB8GA1UdIwQY
MBaAFF4mSPEpDURxvNtQuCvk7ZMgAwlNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGlaSThTa05SSEc4MjFDNEstVHRreUFEQ1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iYzRjNTMtMGRiNS00ZjExLTg0ZjYt
ZjU1ZmNkZjk3ODQ2LzEvWGlaSThTa05SSEc4MjFDNEstVHRreUFEQ1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iYzRjNTMtMGRiNS00ZjExLTg0ZjYtZjU1ZmNkZjk3ODQ2
LzEvWGlaSThTa05SSEc4MjFDNEstVHRreUFEQ1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKoqlemF
HIYrwpukOkvuygyXFQq9pNtc8uI6nPkmAHxJ2EbF9b0nEnTH7GH3h21Zmd+CxTJ9
UUHOohyGvW0ui7OruZhYyhNgaR/AOmdNNtcpMkCyqU3Q0yK5MXn9R/Ly4I5A/UpP
9weq36vHAOfMBwW8HrVWOQsohchOIYqhHwetKkijqRYSA5YT9Y0+6ur0LARYPqql
RXSOhp735cERIz2GVcszGzXRTeVsJoKzsfU+o3A1+Q8xfzdNAAZ3mOm2bImNTWBX
YMG3UgNuRmM7QphRNGBxV4vPZRBk7j+7j5w0GYBLWPOYPVeZ19uEihjNyiB8zslC
kXgEOeJhxn0Ing==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:44 2025 by rpki-client