Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
File: XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft (raw, json)
Hash identifier: Ne2+ejDAyuGHy15zELTQiYv4Jk4i196OP9M9Fxynzik=
Subject key identifier: 9C:50:D6:A7:58:26:2E:42:01:9C:69:8F:33:66:AA:02:CF:27:FE:61
Authority key identifier: 5F:1A:A6:A9:29:31:BF:C7:E1:40:07:C4:7C:94:9C:D5:EE:3E:98:0F
Certificate issuer: /CN=5f1aa6a92931bfc7e14007c47c949cd5ee3e980f
Certificate serial: 0194BD17852144947C9F8970FA6A80237360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxqmqSkxv8fhQAfEfJSc1e4-mA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
Manifest number: 116B
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: 0vSFPoYxfJgGVZze9FXoh2RkpVA.roa (hash: ZmZ0S6349yqHsdfm9IChX49SmL/P7lxaKuGOii7tvuA=)
2: 9JM6FQ3JNcJAsurX_9l52alhS78.roa (hash: a7KiUg0rkGYES5Jq40C4im6HS+LxQ3+rKB9CYqBxCgY=)
3: XxqmqSkxv8fhQAfEfJSc1e4-mA8.crl (hash: v75Z2WPsuiyzi+vjWUSdja6L3k+yNkK9YW4yZkhzxec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:85:21:44:94:7c:9f:89:70:fa:6a:80:23:73:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1aa6a92931bfc7e14007c47c949cd5ee3e980f
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=9c50d6a758262e42019c698f3366aa02cf27fe61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:6c:ee:3f:43:e7:6e:13:ea:24:15:e7:98:
bf:fa:36:00:a7:a1:8f:da:41:7b:58:89:b4:29:76:
4e:d8:0c:84:50:c4:4b:63:91:47:83:50:68:37:39:
f0:0a:2f:10:f7:bd:c2:7d:f2:b2:b2:ab:d7:e7:96:
0a:f0:51:4a:1d:75:97:cc:d5:8f:e8:3c:34:02:96:
e9:a2:3a:5f:46:df:92:3a:a8:d4:30:fc:31:90:f1:
d5:a2:50:30:fd:02:64:02:b6:33:e7:44:94:8b:fa:
b2:ef:62:2f:6a:b6:18:df:ec:29:98:0d:a0:03:70:
ef:ef:0a:13:74:b5:63:90:77:e5:04:e8:82:c8:84:
80:8f:7d:14:a4:5a:a5:16:a4:0b:18:1b:9f:c1:08:
25:d6:17:8c:ac:40:5c:f5:4b:42:8c:25:c8:ba:08:
4d:59:2e:ad:a8:26:65:17:ee:06:d4:e9:a0:2b:e3:
81:d5:27:d1:f1:dd:96:63:08:0b:5d:d9:15:3f:c1:
0f:2d:4b:cb:c9:6b:f3:de:7c:7d:c7:8a:6b:92:d2:
8e:dd:98:b3:41:d2:d0:e6:c9:e1:d9:94:65:31:85:
cb:10:7b:6e:37:a2:a7:37:4b:d2:cf:a8:39:94:fc:
be:c5:f4:c3:86:1b:87:93:fe:0d:c0:5a:e3:96:da:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:50:D6:A7:58:26:2E:42:01:9C:69:8F:33:66:AA:02:CF:27:FE:61
X509v3 Authority Key Identifier:
keyid:5F:1A:A6:A9:29:31:BF:C7:E1:40:07:C4:7C:94:9C:D5:EE:3E:98:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxqmqSkxv8fhQAfEfJSc1e4-mA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:92:e4:01:f2:14:cc:c4:85:18:02:e1:c2:00:2b:28:48:51:
ce:f4:62:b0:66:92:03:8a:7b:11:89:c3:c8:2d:45:f8:57:40:
66:2e:09:2f:bb:da:e5:48:de:63:12:cd:c2:5e:92:39:4d:d2:
ec:e4:3a:0e:49:41:57:9b:a9:11:8f:3f:81:a6:f8:93:0c:73:
dc:dd:a0:c4:72:8c:35:02:1c:a6:9c:44:a0:4b:30:6f:b1:b2:
23:11:2a:94:37:1f:86:20:73:e9:fc:09:6e:25:8e:68:27:88:
38:2f:48:0c:d1:30:98:f2:13:cf:92:93:b1:89:ee:48:0c:5a:
f7:fa:54:6d:c1:13:a0:9e:2d:fb:f8:cb:56:70:1d:2f:bd:c0:
9c:a7:88:e5:84:32:13:02:ac:6b:17:05:c2:fe:5f:40:cd:85:
c5:42:e7:11:20:82:5e:57:00:33:fc:b0:79:6d:fb:e5:2f:eb:
bd:98:16:69:f9:ec:a6:8f:68:2d:a4:0b:ee:df:cd:02:22:15:
9e:27:6b:8e:93:79:13:30:5e:a7:7c:c9:8f:9a:c9:44:da:b1:
22:0b:f9:9d:1d:c1:5b:a0:d5:65:5b:5e:23:46:ca:b7:b5:4c:
3a:3e:43:c4:32:19:d8:b3:8f:9c:0a:b9:5f:c9:52:de:c8:8b:
a4:e0:04:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F4UhRJR8n4lw+mqAI3NgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMWFhNmE5MjkzMWJmYzdlMTQwMDdjNDdjOTQ5Y2Q1ZWUz
ZTk4MGYwHhcNMjUwMTMxMTYwMDIyWhcNMjUwMjAxMTYwMDIyWjAzMTEwLwYDVQQD
Eyg5YzUwZDZhNzU4MjYyZTQyMDE5YzY5OGYzMzY2YWEwMmNmMjdmZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvps7j9D524T6iQV55i/+jYAp6GP
2kF7WIm0KXZO2AyEUMRLY5FHg1BoNznwCi8Q973CffKysqvX55YK8FFKHXWXzNWP
6Dw0ApbpojpfRt+SOqjUMPwxkPHVolAw/QJkArYz50SUi/qy72IvarYY3+wpmA2g
A3Dv7woTdLVjkHflBOiCyISAj30UpFqlFqQLGBufwQgl1heMrEBc9UtCjCXIughN
WS6tqCZlF+4G1OmgK+OB1SfR8d2WYwgLXdkVP8EPLUvLyWvz3nx9x4prktKO3Ziz
QdLQ5snh2ZRlMYXLEHtuN6KnN0vSz6g5lPy+xfTDhhuHk/4NwFrjltqamQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxQ1qdYJi5CAZxpjzNmqgLPJ/5hMB8GA1UdIwQY
MBaAFF8apqkpMb/H4UAHxHyUnNXuPpgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhxbXFTa3h2OGZoUUFmRWZKU2MxZTQtbUE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9hMGMzZGItNjU0NS00NWE4LWE4NDUt
YmI3ZWMzYzhjZGU4LzEvWHhxbXFTa3h2OGZoUUFmRWZKU2MxZTQtbUE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9hMGMzZGItNjU0NS00NWE4LWE4NDUtYmI3ZWMzYzhjZGU4
LzEvWHhxbXFTa3h2OGZoUUFmRWZKU2MxZTQtbUE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZLkAfIU
zMSFGALhwgArKEhRzvRisGaSA4p7EYnDyC1F+FdAZi4JL7va5UjeYxLNwl6SOU3S
7OQ6DklBV5upEY8/gab4kwxz3N2gxHKMNQIcppxEoEswb7GyIxEqlDcfhiBz6fwJ
biWOaCeIOC9IDNEwmPITz5KTsYnuSAxa9/pUbcEToJ4t+/jLVnAdL73AnKeI5YQy
EwKsaxcFwv5fQM2FxULnESCCXlcAM/yweW375S/rvZgWafnspo9oLaQL7t/NAiIV
nidrjpN5EzBep3zJj5rJRNqxIgv5nR3BW6DVZVteI0bKt7VMOj5DxDIZ2LOPnAq5
X8lS3siLpOAEcw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:52 2025 by rpki-client