Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
File: XaewUFU8jungWrTDf9l9KCEha0E.mft (raw, json)
Hash identifier: HDxrZ9fonmR608eoXvxhrHAYmTks3vYu4cE+e55LsJU=
Subject key identifier: 60:3E:83:51:8F:C1:49:AE:76:4C:90:F7:42:61:78:B0:F7:91:31:CE
Authority key identifier: 5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
Certificate issuer: /CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Certificate serial: 0194BD17704F0ED564EBD49B55B010286695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: 1FlLRIIYGSU2lD9s6BElZ_82OMk.roa (hash: Q5lYF3Ib2nrKiWVSyeewvimy0dKCeaCp7d/phtTC4tU=)
2: XaewUFU8jungWrTDf9l9KCEha0E.crl (hash: kEGo7drYhpPNmgyTDwdYytgc2sBg5vM3NG1LGmK/KCg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:70:4f:0e:d5:64:eb:d4:9b:55:b0:10:28:66:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=603e83518fc149ae764c90f7426178b0f79131ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:01:51:4c:36:ba:fb:24:82:cf:06:e1:84:
f9:dd:ed:a0:71:33:20:46:66:d0:54:93:89:ac:0a:
57:60:82:42:2d:cd:44:da:ff:ac:e3:33:ce:15:66:
17:d0:b6:3c:1c:5e:1a:b9:4e:74:74:73:c3:90:e3:
61:94:47:9d:ed:25:7b:91:20:6d:7b:4a:11:48:99:
5b:db:62:41:1f:b5:aa:12:f9:3d:da:ba:a1:69:91:
5a:b8:48:f6:4f:36:f5:06:0f:1b:e6:3d:56:4d:e9:
cb:be:99:fc:be:b4:d8:ab:d4:08:d3:24:f5:1a:97:
e0:c1:79:b1:fe:4a:86:29:ea:66:d1:99:3c:3c:ca:
4d:9e:0a:e1:89:5e:e2:11:34:be:73:25:3b:5e:3d:
dc:99:4e:3b:81:d4:e7:0c:00:18:bf:90:65:b6:b5:
7b:f4:d2:23:e1:2a:9d:76:69:16:29:cf:f2:34:e3:
22:5f:0a:0f:d0:9e:37:d8:a0:14:cf:0a:5c:e7:ff:
b6:86:ee:28:00:06:55:8e:38:10:d0:d7:4b:94:95:
c3:a3:b2:e3:08:ee:14:21:75:2f:7c:0d:ac:89:cf:
83:51:fb:4d:f3:8f:04:7d:3b:e7:32:fc:14:d6:1c:
a5:98:bc:af:94:be:27:ca:f3:d7:2b:e2:f2:dd:14:
be:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3E:83:51:8F:C1:49:AE:76:4C:90:F7:42:61:78:B0:F7:91:31:CE
X509v3 Authority Key Identifier:
keyid:5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ed:01:95:8f:f2:af:97:48:6e:51:0e:d5:69:6b:60:6f:c6:
f5:25:45:63:dc:86:25:3e:df:29:09:29:7c:c5:b2:f1:a9:35:
f3:32:d7:2b:8f:cb:fa:af:6d:58:c5:fd:8e:b9:fd:ba:c4:06:
5b:db:dc:ff:fd:79:8c:1c:42:db:7c:d5:04:cc:7c:a8:2f:22:
0a:7f:13:8d:74:d7:3e:b3:8b:c7:95:29:b8:2b:3c:a4:18:91:
e4:43:7a:0d:88:49:a6:85:d4:2f:64:ec:fc:78:63:9c:ee:75:
5c:41:c4:6c:18:2b:3d:43:9b:26:e3:29:e0:21:61:a7:ca:0c:
4e:d8:fe:c4:f2:42:c0:d1:ce:af:e4:59:68:93:7a:a2:01:59:
23:08:bf:d3:c6:09:ec:09:79:49:16:06:99:21:75:c9:7e:6d:
b1:44:d3:74:21:83:50:ce:cc:9a:ec:27:0f:f6:99:85:4c:23:
2f:38:11:64:e9:85:f2:1c:99:d4:91:29:cc:37:d5:a2:5f:d6:
32:7e:d0:64:80:95:c9:bc:19:0b:da:9c:20:5d:ff:fd:c9:7b:
b8:39:99:83:44:24:e2:49:e0:e4:8b:26:89:46:a9:6d:02:cd:
1f:5c:91:3a:cd:23:a2:fd:c4:04:b4:1c:1a:54:ff:7f:24:24:
41:5d:d0:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3BPDtVk69SbVbAQKGaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTdiMDUwNTUzYzhlZTllMDVhYjRjMzdmZDk3ZDI4MjEy
MTZiNDEwHhcNMjUwMTMxMTYwMDE3WhcNMjUwMjAxMTYwMDE3WjAzMTEwLwYDVQQD
Eyg2MDNlODM1MThmYzE0OWFlNzY0YzkwZjc0MjYxNzhiMGY3OTEzMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIMBUUw2uvskgs8G4YT53e2gcTMg
RmbQVJOJrApXYIJCLc1E2v+s4zPOFWYX0LY8HF4auU50dHPDkONhlEed7SV7kSBt
e0oRSJlb22JBH7WqEvk92rqhaZFauEj2Tzb1Bg8b5j1WTenLvpn8vrTYq9QI0yT1
GpfgwXmx/kqGKepm0Zk8PMpNngrhiV7iETS+cyU7Xj3cmU47gdTnDAAYv5BltrV7
9NIj4SqddmkWKc/yNOMiXwoP0J432KAUzwpc5/+2hu4oAAZVjjgQ0NdLlJXDo7Lj
CO4UIXUvfA2sic+DUftN848EfTvnMvwU1hylmLyvlL4nyvPXK+Ly3RS+TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGA+g1GPwUmudkyQ90JheLD3kTHOMB8GA1UdIwQY
MBaAFF2nsFBVPI7p4Fq0w3/ZfSghIWtBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFld1VGVThqdW5nV3JURGY5bDlLQ0VoYTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kYzlkZGItYjE4Yy00MDlkLTk3MDct
ZjJjNmFjOTY4YzgwLzEvWGFld1VGVThqdW5nV3JURGY5bDlLQ0VoYTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kYzlkZGItYjE4Yy00MDlkLTk3MDctZjJjNmFjOTY4Yzgw
LzEvWGFld1VGVThqdW5nV3JURGY5bDlLQ0VoYTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+0BlY/y
r5dIblEO1WlrYG/G9SVFY9yGJT7fKQkpfMWy8ak18zLXK4/L+q9tWMX9jrn9usQG
W9vc//15jBxC23zVBMx8qC8iCn8TjXTXPrOLx5UpuCs8pBiR5EN6DYhJpoXUL2Ts
/HhjnO51XEHEbBgrPUObJuMp4CFhp8oMTtj+xPJCwNHOr+RZaJN6ogFZIwi/08YJ
7Al5SRYGmSF1yX5tsUTTdCGDUM7MmuwnD/aZhUwjLzgRZOmF8hyZ1JEpzDfVol/W
Mn7QZICVybwZC9qcIF3//cl7uDmZg0Qk4kng5IsmiUapbQLNH1yROs0jov3EBLQc
GlT/fyQkQV3Q1w==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:42:57 2025 by rpki-client