Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft
File: xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft (raw, json)
Hash identifier: wVHwyeK1rUIUPetE+SAimXEstDtvA3Kq/eDqER/Q4Ps=
Subject key identifier: 86:5A:20:05:1C:A7:BD:A1:AB:90:58:E6:58:56:9C:71:DC:6C:C4:67
Authority key identifier: C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A
Certificate issuer: /CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
Certificate serial: 0194BCE071B2C2D4E7D7E54D7A6917A19439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft
Manifest number: 0485
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: NugaULO-gk2PkOZCdWGeX6P0AEo.roa (hash: 8kssSSwOaL7T7gF8FWk5eaVlo82DD3FktYjwSUShJPs=)
2: xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl (hash: /xt7mAq3Oyq13aBX4eRZlvQ2p74KNzzjnEOUm89rQB8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:71:b2:c2:d4:e7:d7:e5:4d:7a:69:17:a1:94:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6165ef13707cf5a7c3bca9de6da5f13ff015f1a
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=865a20051ca7bda1ab9058e658569c71dc6cc467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:1c:99:a3:bd:1d:ac:b2:88:15:3f:79:4e:
21:42:0f:09:09:5a:ca:14:5e:e4:c3:74:f3:d4:8b:
4b:b2:ca:6f:33:0e:e7:5e:d8:49:0b:7c:ee:4c:ee:
3d:00:fe:85:ea:77:a6:55:54:24:f5:35:4c:38:ff:
45:b6:ad:10:b5:49:23:1b:26:0b:ca:c2:85:a1:c7:
04:b5:dc:09:a9:64:ae:ab:c0:76:47:60:33:06:8c:
2c:88:34:52:5b:da:7b:0f:71:81:d6:60:8e:9e:e1:
c9:8c:58:e5:63:26:18:e8:32:91:ab:ab:76:63:28:
df:8e:a2:e0:39:04:26:c2:03:a8:d9:ef:c5:30:94:
e4:02:72:b0:45:63:95:35:a3:ec:d7:53:4a:b9:21:
dc:fe:cd:9b:77:d4:73:b4:be:05:92:6e:b5:fa:64:
c9:a4:07:15:40:ec:c1:d8:3b:e3:d2:b6:e0:c6:11:
69:1b:d0:5d:60:6c:07:82:d4:6b:d4:ec:c2:f0:08:
4f:0a:3b:68:0a:0c:8e:82:bf:be:d3:d2:3e:b9:ae:
4e:2a:e7:ec:60:30:4e:3d:e3:9b:64:6f:ed:38:5c:
e6:6e:ee:37:7c:2c:0b:8f:c3:e2:5a:4a:9e:99:0f:
45:72:a1:92:53:d6:c5:c4:76:c9:5b:6a:6a:56:e7:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5A:20:05:1C:A7:BD:A1:AB:90:58:E6:58:56:9C:71:DC:6C:C4:67
X509v3 Authority Key Identifier:
keyid:C6:16:5E:F1:37:07:CF:5A:7C:3B:CA:9D:E6:DA:5F:13:FF:01:5F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhZe8TcHz1p8O8qd5tpfE_8BXxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcf157-4e58-4f39-90fd-ef83b359b37f/1/xhZe8TcHz1p8O8qd5tpfE_8BXxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9f:ea:53:43:2e:0d:5a:00:70:d2:72:0d:77:2d:91:69:0a:
26:b2:7b:41:66:50:a3:ab:01:d1:fe:19:57:f4:8e:23:b0:b2:
f4:7c:6c:1b:6c:9e:00:05:b5:e3:7b:98:28:2c:2c:5e:8f:b7:
40:36:1d:cc:b5:8f:5d:25:e1:51:20:53:c5:1e:08:bc:48:70:
ff:24:62:64:d3:7a:97:9b:00:6c:e6:c8:77:2c:1b:bd:c2:a6:
6f:42:d3:15:15:94:e2:29:74:8a:fe:e8:b0:c5:f3:96:84:5f:
13:20:36:86:6b:10:9f:61:78:ef:52:1c:0e:ea:f3:ce:35:b8:
f7:f6:07:61:22:65:e6:ec:0a:0d:7d:d9:4e:fa:bb:e0:ed:a7:
10:6d:42:63:e2:5c:31:c4:76:29:b4:7c:93:c9:73:d4:95:eb:
1f:74:c8:b5:9e:2f:90:ee:e7:52:9f:b4:b2:8d:32:84:06:5c:
95:7a:9d:45:55:6a:40:58:10:0c:60:6e:09:dd:1c:45:ce:3e:
60:14:02:7d:01:d5:56:a3:6e:6b:b6:75:3a:6e:14:46:dc:b6:
54:2a:cf:05:5c:fe:94:cc:55:93:38:2a:72:ce:b9:1b:b3:b0:
fd:5e:e2:63:dc:df:d8:57:fb:c2:35:e2:49:27:c2:a2:3e:e3:
86:09:17:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84HGywtTn1+VNemkXoZQ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTY1ZWYxMzcwN2NmNWE3YzNiY2E5ZGU2ZGE1ZjEzZmYw
MTVmMWEwHhcNMjUwMTMxMTUwMDEzWhcNMjUwMjAxMTUwMDEzWjAzMTEwLwYDVQQD
Eyg4NjVhMjAwNTFjYTdiZGExYWI5MDU4ZTY1ODU2OWM3MWRjNmNjNDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPEcmaO9HayyiBU/eU4hQg8JCVrK
FF7kw3Tz1ItLsspvMw7nXthJC3zuTO49AP6F6nemVVQk9TVMOP9Ftq0QtUkjGyYL
ysKFoccEtdwJqWSuq8B2R2AzBowsiDRSW9p7D3GB1mCOnuHJjFjlYyYY6DKRq6t2
YyjfjqLgOQQmwgOo2e/FMJTkAnKwRWOVNaPs11NKuSHc/s2bd9RztL4Fkm61+mTJ
pAcVQOzB2Dvj0rbgxhFpG9BdYGwHgtRr1OzC8AhPCjtoCgyOgr++09I+ua5OKufs
YDBOPeObZG/tOFzmbu43fCwLj8PiWkqemQ9FcqGSU9bFxHbJW2pqVufSPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZaIAUcp72hq5BY5lhWnHHcbMRnMB8GA1UdIwQY
MBaAFMYWXvE3B89afDvKnebaXxP/AV8aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhaZThUY0h6MXA4TzhxZDV0cGZFXzhCWHhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9mY2YxNTctNGU1OC00ZjM5LTkwZmQt
ZWY4M2IzNTliMzdmLzEveGhaZThUY0h6MXA4TzhxZDV0cGZFXzhCWHhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9mY2YxNTctNGU1OC00ZjM5LTkwZmQtZWY4M2IzNTliMzdm
LzEveGhaZThUY0h6MXA4TzhxZDV0cGZFXzhCWHhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5/qU0Mu
DVoAcNJyDXctkWkKJrJ7QWZQo6sB0f4ZV/SOI7Cy9HxsG2yeAAW143uYKCwsXo+3
QDYdzLWPXSXhUSBTxR4IvEhw/yRiZNN6l5sAbObIdywbvcKmb0LTFRWU4il0iv7o
sMXzloRfEyA2hmsQn2F471IcDurzzjW49/YHYSJl5uwKDX3ZTvq74O2nEG1CY+Jc
McR2KbR8k8lz1JXrH3TItZ4vkO7nUp+0so0yhAZclXqdRVVqQFgQDGBuCd0cRc4+
YBQCfQHVVqNua7Z1Om4URty2VCrPBVz+lMxVkzgqcs65G7Ow/V7iY9zf2Ff7wjXi
SSfCoj7jhgkXJw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:58 2025 by rpki-client