Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
File: xUIOtdlPD6uGLghAQU9DK3heYFQ.mft (raw, json)
Hash identifier: 4p4HyNqFYUSMd/aOC5gCxRLfkCUfjFKfkJ0m66yTp50=
Subject key identifier: 24:77:9A:9E:B0:36:04:25:80:E7:7D:EC:12:07:77:73:69:16:91:36
Authority key identifier: C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54
Certificate issuer: /CN=c5420eb5d94f0fab862e0840414f432b785e6054
Certificate serial: 0194BC04BA72103D606488C0021405E74185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
Manifest number: 023E
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: Ta5lPzjSaWOGZmJzb8ldMeucHGI.roa (hash: d1Ea1L5jJ9KIi1NEhEpKqHGMktv6fUL4cljVIHxwf/0=)
2: xUIOtdlPD6uGLghAQU9DK3heYFQ.crl (hash: 44gxNbpJ1RyC9ro4VDPY3fOjsdPZz0Jss1sKYhzSjQw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ba:72:10:3d:60:64:88:c0:02:14:05:e7:41:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5420eb5d94f0fab862e0840414f432b785e6054
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=24779a9eb036042580e77dec1207777369169136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:b2:30:bf:e0:dd:45:c2:fe:e7:8c:f0:6a:
c9:56:8a:d4:e2:83:c4:ca:27:1c:11:47:2d:76:7b:
29:13:71:21:e3:70:ab:3f:bd:9d:df:3d:07:e0:03:
75:55:23:af:eb:32:42:b8:d4:3f:02:cf:e7:1c:1a:
05:6f:d5:ea:5f:ff:ac:25:39:4a:08:4b:2c:44:ff:
33:3e:f4:c3:bf:39:eb:20:be:5c:1b:81:78:0d:1c:
35:f5:a5:fd:20:3e:6f:f6:f2:b1:4b:ee:33:ca:2f:
9c:e9:67:85:c5:c1:e6:d3:10:59:d9:12:8f:c6:12:
10:d1:24:c9:36:ad:91:46:9b:07:36:d2:4c:c4:b2:
45:cc:69:b6:10:83:d4:9d:32:a2:a6:6a:24:91:32:
4b:5d:5f:5d:11:ae:64:6e:1a:69:d8:fb:ef:98:b2:
45:97:a6:df:c6:a3:73:81:62:43:5f:c8:27:f6:7a:
99:e1:a8:78:1e:ae:ab:b6:15:4a:3f:72:ec:0b:d1:
32:61:5a:9a:a2:71:59:90:2d:47:51:68:b5:30:b9:
a6:e4:96:9f:24:f6:86:18:65:98:f8:c9:fd:7d:f3:
0f:b7:95:0d:b5:43:1a:f3:f7:c9:7d:4c:88:70:4e:
a9:3f:88:f1:9a:74:13:46:b5:69:de:30:75:ae:d5:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:77:9A:9E:B0:36:04:25:80:E7:7D:EC:12:07:77:73:69:16:91:36
X509v3 Authority Key Identifier:
keyid:C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:54:0a:35:4d:6d:79:4b:91:b5:f5:82:58:2d:08:82:97:a6:
85:2b:05:8a:fb:df:bf:9b:d6:5d:b0:c3:25:69:c5:56:74:7a:
b0:1e:1c:48:dd:b9:04:05:5b:e1:01:d5:a5:85:06:18:d2:cd:
26:71:bb:54:24:13:9c:86:60:51:29:a9:e5:24:09:56:13:3c:
2c:ab:b0:53:35:bb:0b:fb:df:44:a6:f9:3d:8e:22:1c:ea:9b:
f2:4c:3b:44:f7:76:91:95:45:7e:68:98:45:6b:81:e4:1f:f3:
10:01:35:e6:95:97:89:38:23:76:cc:53:35:f9:7f:d4:ea:78:
61:cf:40:10:15:73:7c:3d:ca:a6:c7:d9:87:da:9c:9a:d0:83:
3c:3d:e0:66:2a:d4:cb:cc:84:92:95:72:da:32:95:44:f3:40:
4c:fe:e0:b0:61:67:b8:4b:ec:c4:45:c5:2e:98:79:f7:17:3d:
ab:06:4c:5d:87:7d:15:05:14:3d:fa:6c:41:4e:30:d3:21:a0:
4e:45:78:75:c2:dc:ea:6a:41:9e:72:bb:d1:33:2b:33:f1:0a:
39:ff:af:e1:3c:f7:5b:4c:7c:9d:5c:95:ed:53:96:95:50:42:
a4:0e:58:fc:83:3c:56:e0:e6:d3:66:82:3a:c5:ad:22:3b:e9:
09:02:c4:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLpyED1gZIjAAhQF50GFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDIwZWI1ZDk0ZjBmYWI4NjJlMDg0MDQxNGY0MzJiNzg1
ZTYwNTQwHhcNMjUwMTMxMTEwMDEzWhcNMjUwMjAxMTEwMDEzWjAzMTEwLwYDVQQD
EygyNDc3OWE5ZWIwMzYwNDI1ODBlNzdkZWMxMjA3Nzc3MzY5MTY5MTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+GyML/g3UXC/ueM8GrJVorU4oPE
yiccEUctdnspE3Eh43CrP72d3z0H4AN1VSOv6zJCuNQ/As/nHBoFb9XqX/+sJTlK
CEssRP8zPvTDvznrIL5cG4F4DRw19aX9ID5v9vKxS+4zyi+c6WeFxcHm0xBZ2RKP
xhIQ0STJNq2RRpsHNtJMxLJFzGm2EIPUnTKipmokkTJLXV9dEa5kbhpp2PvvmLJF
l6bfxqNzgWJDX8gn9nqZ4ah4Hq6rthVKP3LsC9EyYVqaonFZkC1HUWi1MLmm5Jaf
JPaGGGWY+Mn9ffMPt5UNtUMa8/fJfUyIcE6pP4jxmnQTRrVp3jB1rtVeqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCR3mp6wNgQlgOd97BIHd3NpFpE2MB8GA1UdIwQY
MBaAFMVCDrXZTw+rhi4IQEFPQyt4XmBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFVJT3RkbFBENnVHTGdoQVFVOURLM2hlWUZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wOWM1MzgtYjI2MC00NGFiLTkxNjYt
NDI1OGVlNGRlOTFlLzEveFVJT3RkbFBENnVHTGdoQVFVOURLM2hlWUZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wOWM1MzgtYjI2MC00NGFiLTkxNjYtNDI1OGVlNGRlOTFl
LzEveFVJT3RkbFBENnVHTGdoQVFVOURLM2hlWUZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVQKNU1t
eUuRtfWCWC0IgpemhSsFivvfv5vWXbDDJWnFVnR6sB4cSN25BAVb4QHVpYUGGNLN
JnG7VCQTnIZgUSmp5SQJVhM8LKuwUzW7C/vfRKb5PY4iHOqb8kw7RPd2kZVFfmiY
RWuB5B/zEAE15pWXiTgjdsxTNfl/1Op4Yc9AEBVzfD3KpsfZh9qcmtCDPD3gZirU
y8yEkpVy2jKVRPNATP7gsGFnuEvsxEXFLph59xc9qwZMXYd9FQUUPfpsQU4w0yGg
TkV4dcLc6mpBnnK70TMrM/EKOf+v4Tz3W0x8nVyV7VOWlVBCpA5Y/IM8VuDm02aC
OsWtIjvpCQLEhw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:09:42 2025 by rpki-client