Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
File: xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft (raw, json)
Hash identifier: 34TQt0Rb9ZytfEt9T7HRLE32Aqm7rEQ8UCwZmhRxm44=
Subject key identifier: 90:27:EF:B4:FE:DE:2C:8E:D8:09:37:BF:86:01:AE:FE:3D:FA:6E:21
Authority key identifier: C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
Certificate issuer: /CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
Certificate serial: 0194BCE0C3F8463B180B0976BA854574CE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
Manifest number: 04FF
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: Ej1aJMtEaUsf31r33a8meVTKaMM.roa (hash: Gz1wbyymYY+RBy8aeMOwOe+QM7WHCcn8raUIMs60hhM=)
2: xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl (hash: hRmWj5Kyq3JmFtP664Ke3Wlbeegy1eaeYF8ISufP2ck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c3:f8:46:3b:18:0b:09:76:ba:85:45:74:ce:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=9027efb4fede2c8ed80937bf8601aefe3dfa6e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ed:28:d2:80:bc:b2:0e:19:ab:bd:01:c7:80:
5c:47:42:0f:f6:8f:a7:41:e8:8f:f5:2d:6a:b5:ed:
08:5d:f2:78:a0:30:d7:5f:ad:0c:85:cc:ca:13:db:
3a:39:52:fc:0d:82:cd:f1:6d:cd:45:89:69:03:91:
48:80:23:66:c0:a0:e2:eb:39:f7:20:71:b0:04:c9:
45:08:97:54:8d:d0:1e:a0:d8:4b:a8:45:3f:82:9d:
a6:78:27:59:a8:be:c3:71:92:f6:0c:f1:97:0f:49:
76:5c:96:bb:f6:ee:98:39:4b:60:33:ba:46:50:e5:
3f:85:c4:bc:48:46:df:9c:a2:a0:eb:0d:b9:b3:80:
5c:81:7a:e9:32:12:56:32:6b:ab:d8:2f:26:f1:bf:
3a:13:c2:16:67:16:fb:74:ab:1b:83:3b:a8:e6:b6:
87:2d:74:2e:16:42:98:64:38:7c:50:41:03:71:c2:
c4:06:6c:da:53:1d:05:c9:ed:49:86:44:c2:77:20:
8e:8a:d5:32:5f:81:2f:8f:ca:95:14:b5:8f:31:fb:
f0:9b:34:da:d1:e5:ca:b6:83:98:01:62:68:fc:92:
a9:c9:4c:3f:a3:0c:f8:ad:89:84:bc:17:28:bf:72:
5d:d1:bd:53:43:4e:9e:e8:d3:f3:e7:65:d3:6d:b4:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:27:EF:B4:FE:DE:2C:8E:D8:09:37:BF:86:01:AE:FE:3D:FA:6E:21
X509v3 Authority Key Identifier:
keyid:C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:26:aa:f5:c8:88:21:90:c6:ce:1e:d9:52:c6:b7:c1:e0:2f:
9f:c0:de:6b:2d:a8:e8:8e:98:92:26:db:7b:60:db:92:78:54:
ca:c9:96:18:0b:a4:e2:17:7e:8a:5e:67:21:d1:05:9b:95:7d:
a6:29:ba:3a:69:24:0c:6e:8a:56:ae:3a:a3:d1:dd:36:7f:b8:
48:be:57:c3:67:a6:4d:4b:ab:6c:cc:94:20:d9:d5:be:83:f8:
68:05:e9:c9:2a:17:4d:94:7c:42:03:33:ce:9e:71:99:6b:e6:
1a:9a:ab:aa:b9:47:85:73:c0:a4:5e:ec:5d:53:0a:84:28:dd:
97:c2:ca:bd:65:e0:bb:a2:4d:c5:c6:6a:e1:ba:18:77:71:4d:
37:98:bd:5b:25:cf:c9:c6:a5:8e:a5:ab:f5:03:43:07:bc:d0:
3b:cf:e4:7a:e0:5a:9b:97:82:b2:82:85:14:32:53:30:03:41:
b0:55:30:21:ec:14:4d:7f:b6:ba:4b:ac:5d:5a:80:7a:e9:c6:
0f:0e:47:d0:23:ac:fe:42:22:8a:b5:20:cf:fe:36:04:d8:29:
00:2b:10:70:ca:6d:a0:a8:11:0f:a3:92:fe:4b:16:3a:62:73:
dd:4f:12:98:76:8c:34:c2:3c:93:29:35:20:a9:f1:3b:98:a7:
14:05:22:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84MP4RjsYCwl2uoVFdM4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTM1ZTRhY2Y5NjEzOWNlNWZmMmNmZGQ5NWY1NWE4MTc2
ZDczMjQwHhcNMjUwMTMxMTUwMDM0WhcNMjUwMjAxMTUwMDM0WjAzMTEwLwYDVQQD
Eyg5MDI3ZWZiNGZlZGUyYzhlZDgwOTM3YmY4NjAxYWVmZTNkZmE2ZTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO0o0oC8sg4Zq70Bx4BcR0IP9o+n
QeiP9S1qte0IXfJ4oDDXX60MhczKE9s6OVL8DYLN8W3NRYlpA5FIgCNmwKDi6zn3
IHGwBMlFCJdUjdAeoNhLqEU/gp2meCdZqL7DcZL2DPGXD0l2XJa79u6YOUtgM7pG
UOU/hcS8SEbfnKKg6w25s4BcgXrpMhJWMmur2C8m8b86E8IWZxb7dKsbgzuo5raH
LXQuFkKYZDh8UEEDccLEBmzaUx0Fye1JhkTCdyCOitUyX4Evj8qVFLWPMfvwmzTa
0eXKtoOYAWJo/JKpyUw/owz4rYmEvBcov3Jd0b1TQ06e6NPz52XTbbRFKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAn77T+3iyO2Ak3v4YBrv49+m4hMB8GA1UdIwQY
MBaAFMYTXkrPlhOc5f8s/dlfVagXbXMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhOZVNzLVdFNXpsX3l6OTJWOVZxQmR0Y3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZjZmMGQtZTZkZi00ZjJiLTgwZGYt
NDY2YjBjZDhiNzVhLzEveGhOZVNzLVdFNXpsX3l6OTJWOVZxQmR0Y3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82ZjZmMGQtZTZkZi00ZjJiLTgwZGYtNDY2YjBjZDhiNzVh
LzEveGhOZVNzLVdFNXpsX3l6OTJWOVZxQmR0Y3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSaq9ciI
IZDGzh7ZUsa3weAvn8Deay2o6I6Ykibbe2DbknhUysmWGAuk4hd+il5nIdEFm5V9
pim6OmkkDG6KVq46o9HdNn+4SL5Xw2emTUurbMyUINnVvoP4aAXpySoXTZR8QgMz
zp5xmWvmGpqrqrlHhXPApF7sXVMKhCjdl8LKvWXgu6JNxcZq4boYd3FNN5i9WyXP
ycaljqWr9QNDB7zQO8/keuBam5eCsoKFFDJTMANBsFUwIewUTX+2ukusXVqAeunG
Dw5H0COs/kIiirUgz/42BNgpACsQcMptoKgRD6OS/ksWOmJz3U8SmHaMNMI8kyk1
IKnxO5inFAUi/Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:14:16 2025 by rpki-client