
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
File: xLMV8myhzbhEERaAw88EN7TBJ-Y.mft (raw, json)
Hash identifier: O1bn2nQIuwfCB2PAzrKtCNY+y4UhHyaoF6Ubmppw8Hg=
Subject key identifier: 3D:18:EC:D2:A8:D9:1E:53:17:71:49:9C:D7:7C:CE:BE:DF:76:A3:43
Authority key identifier: C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6
Certificate issuer: /CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
Certificate serial: 0194BC3C56993765DA583CE20414466B89E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
Manifest number: 31
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: xLMV8myhzbhEERaAw88EN7TBJ-Y.crl (hash: RBHkvQfHGFDu36JGyAXmkhCDq62VhTgZBNCfSW7lhkM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:56:99:37:65:da:58:3c:e2:04:14:46:6b:89:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=3d18ecd2a8d91e531771499cd77ccebedf76a343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:89:b3:95:c7:9a:be:1b:08:c1:16:40:02:d9:
07:de:c2:bc:63:5d:df:8a:2e:f8:71:92:08:98:d3:
e0:73:c2:1a:98:b5:a6:92:af:c7:62:4b:cd:e3:ba:
3e:81:53:55:01:87:eb:03:e3:4b:c6:0e:64:6f:3d:
fc:d0:f6:a9:e1:7a:52:cb:c7:7a:a0:50:fa:7b:21:
76:a5:91:01:06:5d:ac:4a:fa:10:53:e5:1d:f7:1d:
42:81:e9:ce:33:1a:0f:02:6b:c0:f4:56:fe:45:38:
95:b8:5b:73:f9:03:d9:98:8d:5d:e6:f4:2a:9f:a9:
1d:dd:22:bb:94:d0:28:4f:0f:58:5e:9d:60:5b:bc:
9d:ca:07:ba:ba:b4:ff:de:e1:3f:a0:c5:36:c4:d3:
f5:59:3d:62:e9:93:05:76:7c:0c:bb:31:cc:b4:7c:
6e:6a:fb:3a:1f:7d:51:29:d9:6e:b7:39:e9:5f:7b:
ce:6f:19:23:71:dc:5c:67:f8:e3:29:cc:26:b3:8a:
b7:61:16:11:5c:e1:94:cf:82:ec:2a:35:d0:2c:0a:
ae:ec:f1:85:13:ba:12:94:ab:02:47:4c:8e:61:b4:
fc:a6:e3:3c:95:fd:0d:20:77:de:c2:e3:d1:42:cb:
59:ac:c1:0c:3a:e9:85:c5:50:f4:f3:92:58:26:58:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:18:EC:D2:A8:D9:1E:53:17:71:49:9C:D7:7C:CE:BE:DF:76:A3:43
X509v3 Authority Key Identifier:
keyid:C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:55:7c:14:60:f1:86:77:ea:56:13:20:03:5f:4a:24:49:49:
74:57:47:79:98:23:44:fd:9d:40:55:0e:f8:04:92:c5:0d:c9:
41:0c:96:9d:f8:84:55:39:44:b4:a4:aa:26:1c:b0:05:c6:c5:
00:b4:71:18:d0:3c:7d:8f:66:50:b4:dd:24:48:bf:43:65:ef:
7f:82:3b:02:53:90:59:d8:5f:61:52:72:ba:11:17:4b:f2:b6:
e9:7b:ac:d3:21:af:cf:3c:e1:52:e5:45:4a:b6:95:f7:c8:70:
bd:e7:04:3f:48:35:f1:3c:db:9d:30:42:60:0c:67:cd:d0:ff:
ae:c3:58:98:63:38:40:c5:66:bf:9f:24:1d:23:c5:f9:e8:1f:
b8:da:4f:fc:37:1b:e9:51:3e:e9:53:46:a6:87:0b:89:0b:ff:
5d:7e:02:0b:4a:d4:8d:64:97:13:35:2e:77:d3:6b:6b:0d:44:
c9:da:40:b9:ed:c9:9b:d3:4c:de:a5:7f:a4:3a:f0:06:d5:84:
d4:18:15:04:7f:3d:19:f3:7e:b7:46:fe:6a:78:d3:63:a1:81:
1e:36:f9:f0:fc:ed:a0:22:0a:45:b2:f6:c7:ed:5d:9c:74:4d:
45:dd:83:04:45:96:2a:f2:d6:c6:42:44:54:0d:60:a1:f5:ce:
b0:e6:60:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFaZN2XaWDziBBRGa4nhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjMxNWYyNmNhMWNkYjg0NDExMTY4MGMzY2YwNDM3YjRj
MTI3ZTYwHhcNMjUwMTMxMTIwMDU4WhcNMjUwMjAxMTIwMDU4WjAzMTEwLwYDVQQD
EygzZDE4ZWNkMmE4ZDkxZTUzMTc3MTQ5OWNkNzdjY2ViZWRmNzZhMzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ImzlceavhsIwRZAAtkH3sK8Y13f
ii74cZIImNPgc8IamLWmkq/HYkvN47o+gVNVAYfrA+NLxg5kbz380Pap4XpSy8d6
oFD6eyF2pZEBBl2sSvoQU+Ud9x1CgenOMxoPAmvA9Fb+RTiVuFtz+QPZmI1d5vQq
n6kd3SK7lNAoTw9YXp1gW7ydyge6urT/3uE/oMU2xNP1WT1i6ZMFdnwMuzHMtHxu
avs6H31RKdlutznpX3vObxkjcdxcZ/jjKcwms4q3YRYRXOGUz4LsKjXQLAqu7PGF
E7oSlKsCR0yOYbT8puM8lf0NIHfewuPRQstZrMEMOumFxVD085JYJlhktwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0Y7NKo2R5TF3FJnNd8zr7fdqNDMB8GA1UdIwQY
MBaAFMSzFfJsoc24RBEWgMPPBDe0wSfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExNVjhteWh6YmhFRVJhQXc4OEVON1RCSi1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xMGFhM2QtMTk1Mi00ZGRlLTgwZDct
MTE2M2ZjM2EyMjFlLzEveExNVjhteWh6YmhFRVJhQXc4OEVON1RCSi1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xMGFhM2QtMTk1Mi00ZGRlLTgwZDctMTE2M2ZjM2EyMjFl
LzEveExNVjhteWh6YmhFRVJhQXc4OEVON1RCSi1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVV8FGDx
hnfqVhMgA19KJElJdFdHeZgjRP2dQFUO+ASSxQ3JQQyWnfiEVTlEtKSqJhywBcbF
ALRxGNA8fY9mULTdJEi/Q2Xvf4I7AlOQWdhfYVJyuhEXS/K26Xus0yGvzzzhUuVF
SraV98hwvecEP0g18TzbnTBCYAxnzdD/rsNYmGM4QMVmv58kHSPF+egfuNpP/Dcb
6VE+6VNGpocLiQv/XX4CC0rUjWSXEzUud9Nraw1EydpAue3Jm9NM3qV/pDrwBtWE
1BgVBH89GfN+t0b+anjTY6GBHjb58PztoCIKRbL2x+1dnHRNRd2DBEWWKvLWxkJE
VA1gofXOsOZguw==
-----END CERTIFICATE-----
Generated at Thu May 1 15:05:04 2025 by rpki-client