Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
File: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft (raw, json)
Hash identifier: LfWXuK0KVvSC7kdtZsAIkl+FSdhLxtOHWxZXJSS0kSg=
Subject key identifier: 6B:43:A8:22:98:85:2B:87:7D:44:55:38:18:3E:FB:BA:D4:39:35:22
Authority key identifier: 5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
Certificate issuer: /CN=5e8e581537e7aa66783c3403822a1181a3168d08
Certificate serial: 0194BC72B45CB2FAF4842222A6E0EDF1F8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
Manifest number: 0855
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: K6hASVkmc4dnymD1SafKRAelnpw.roa (hash: jxjidqodK9jTHgfjiFHkYSaOCpzH8SBkKdOL3hMaD2w=)
2: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl (hash: WKBlJ2Cbyw4At/zm8W9F72p9erHsmKVgmN4s7qlrfsk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b4:5c:b2:fa:f4:84:22:22:a6:e0:ed:f1:f8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8e581537e7aa66783c3403822a1181a3168d08
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=6b43a82298852b877d445538183efbbad4393522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:db:ee:1c:71:14:82:61:a8:4d:a0:cb:4f:
86:5d:47:fb:08:eb:0b:e3:f3:66:bc:62:bf:b9:24:
22:bd:39:90:ba:6a:c3:b1:59:31:9e:7e:0f:d0:08:
bf:42:9b:65:3f:d9:30:09:01:69:c2:e8:61:59:0a:
58:3e:41:e8:06:00:70:b6:1c:79:72:74:47:62:4d:
f0:3b:a5:e9:4d:cf:0c:91:78:cf:61:23:32:a5:16:
c2:8a:af:02:35:a1:9b:4d:e0:50:d2:27:42:03:7c:
fc:ff:5a:b9:7e:f9:7e:29:37:b8:0a:0a:ba:3b:d2:
b2:10:05:b6:d9:8b:3a:ff:c6:59:fb:79:b6:d7:b1:
6f:79:dc:b5:69:a3:e2:aa:05:80:c5:7c:50:67:01:
c1:95:ea:ae:b8:50:b7:50:70:e5:ba:86:4b:72:c9:
ef:3d:10:e2:c3:90:7d:1c:f5:a0:45:ab:af:ac:9e:
ef:fa:de:b8:1c:f3:b1:af:74:d4:a9:26:c4:71:56:
08:bb:88:86:15:c3:4a:a8:25:92:5e:26:d4:01:81:
d1:a0:52:c3:45:9f:95:53:47:e8:99:c6:97:9e:c9:
eb:f6:11:db:1d:23:f8:63:db:f3:84:b1:ac:e3:93:
9a:d5:b6:4f:5d:c5:c5:f8:14:af:f4:50:1b:6a:eb:
3d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:43:A8:22:98:85:2B:87:7D:44:55:38:18:3E:FB:BA:D4:39:35:22
X509v3 Authority Key Identifier:
keyid:5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:50:fe:9c:31:e1:bb:56:47:ef:c6:d6:d3:c2:d0:4c:a6:4a:
a3:a5:0f:ec:77:3b:72:ab:4f:4a:92:9e:a2:ca:8a:f5:a7:33:
da:03:16:49:bf:54:a6:d1:8d:85:42:12:5f:80:19:03:c6:8c:
a1:47:02:32:6f:de:cf:34:e5:a3:df:88:2e:e5:07:79:21:0c:
64:52:2f:53:81:70:2f:5e:3d:cd:d8:e3:36:49:6d:18:74:44:
5e:48:f7:40:14:5a:0f:2f:2d:df:f8:a7:b5:e3:6d:35:24:1f:
99:81:72:3b:17:98:dd:fd:cb:3a:ea:9b:92:66:f8:50:d3:c4:
bd:70:ad:87:c8:e8:7f:08:cd:4a:33:2e:24:78:83:55:a1:97:
a4:35:a9:1c:63:81:a7:6d:e0:2c:35:3e:c4:d6:51:16:3b:59:
e1:2c:37:54:40:b0:76:22:b9:be:4f:17:fd:f5:84:43:2a:3c:
8d:0a:4b:72:b9:74:66:e3:54:7b:b9:90:49:bc:e2:a6:bf:3c:
2c:35:cd:11:ec:7e:22:08:f9:20:f8:cc:0a:2d:d8:60:5b:72:
42:c2:d6:6a:7a:58:9a:f0:20:a9:2d:53:03:4a:57:01:37:5c:
81:3f:54:1f:cd:3d:c4:d7:cb:2e:c6:32:ae:2e:69:62:c3:f5:
37:52:1d:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8crRcsvr0hCIipuDt8fjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOGU1ODE1MzdlN2FhNjY3ODNjMzQwMzgyMmExMTgxYTMx
NjhkMDgwHhcNMjUwMTMxMTMwMDIxWhcNMjUwMjAxMTMwMDIxWjAzMTEwLwYDVQQD
Eyg2YjQzYTgyMjk4ODUyYjg3N2Q0NDU1MzgxODNlZmJiYWQ0MzkzNTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJbb7hxxFIJhqE2gy0+GXUf7COsL
4/NmvGK/uSQivTmQumrDsVkxnn4P0Ai/QptlP9kwCQFpwuhhWQpYPkHoBgBwthx5
cnRHYk3wO6XpTc8MkXjPYSMypRbCiq8CNaGbTeBQ0idCA3z8/1q5fvl+KTe4Cgq6
O9KyEAW22Ys6/8ZZ+3m217Fvedy1aaPiqgWAxXxQZwHBlequuFC3UHDluoZLcsnv
PRDiw5B9HPWgRauvrJ7v+t64HPOxr3TUqSbEcVYIu4iGFcNKqCWSXibUAYHRoFLD
RZ+VU0fomcaXnsnr9hHbHSP4Y9vzhLGs45Oa1bZPXcXF+BSv9FAbaus9UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtDqCKYhSuHfURVOBg++7rUOTUiMB8GA1UdIwQY
MBaAFF6OWBU356pmeDw0A4IqEYGjFo0IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG81WUZUZm5xbVo0UERRRGdpb1JnYU1XalFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZjQyNGUtMjYyYy00MDc3LTg4NDkt
NzQxOGFjMTEwYzgzLzEvWG81WUZUZm5xbVo0UERRRGdpb1JnYU1XalFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zZjQyNGUtMjYyYy00MDc3LTg4NDktNzQxOGFjMTEwYzgz
LzEvWG81WUZUZm5xbVo0UERRRGdpb1JnYU1XalFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1D+nDHh
u1ZH78bW08LQTKZKo6UP7Hc7cqtPSpKeosqK9acz2gMWSb9UptGNhUISX4AZA8aM
oUcCMm/ezzTlo9+ILuUHeSEMZFIvU4FwL149zdjjNkltGHREXkj3QBRaDy8t3/in
teNtNSQfmYFyOxeY3f3LOuqbkmb4UNPEvXCth8jofwjNSjMuJHiDVaGXpDWpHGOB
p23gLDU+xNZRFjtZ4Sw3VECwdiK5vk8X/fWEQyo8jQpLcrl0ZuNUe7mQSbzipr88
LDXNEex+Igj5IPjMCi3YYFtyQsLWanpYmvAgqS1TA0pXATdcgT9UH809xNfLLsYy
ri5pYsP1N1IdKg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:18 2025 by rpki-client