Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
File: xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json)
Hash identifier: Jg57/V/So7RV3M4idv+heabkk16g6y8d5rVRJnAAlL8=
Subject key identifier: 88:95:55:E6:B2:3E:10:94:17:77:33:7B:17:E3:5F:DE:25:37:73:81
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 0194BCE0E81BC370D030D450D2AE2ECB281D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
Manifest number: 108C
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: L6-VizqbQShaQBu3JV896s_4tGg.roa (hash: 2W7drlEaijHWshfl4DyE1RE1WYGrzJu6Z78yEoBqxmE=)
2: RHZBo8Pr6Q-AwsJ6UMblKavesaU.roa (hash: 0vFm3yhvgBy4kgPfdSeT0wbY5J6zHgZ0B78QJ9Nt4MM=)
3: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: ihVOHNp1Jz+yDmvF/9I0YsryxwtjcNm1YsuJcKzqjuY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e8:1b:c3:70:d0:30:d4:50:d2:ae:2e:cb:28:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=889555e6b23e10941777337b17e35fde25377381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:4d:a6:c0:02:42:80:56:2a:8a:06:66:3a:
2e:60:17:d6:fc:87:60:8c:53:7e:d1:ae:42:8e:9a:
3e:e0:be:d0:15:db:7e:79:bd:59:9a:05:fd:7a:31:
01:82:dd:51:5d:de:b6:c0:e9:fa:75:4d:a2:8b:50:
44:95:84:3b:32:4b:99:64:bd:da:65:a9:b1:c1:39:
2e:cf:c2:55:ad:33:d0:18:81:bd:bd:bf:25:a9:92:
6e:18:99:5f:62:72:53:65:b0:97:46:76:0e:ee:45:
67:ab:26:23:54:30:8c:07:bd:08:97:eb:1c:59:a0:
44:88:bc:31:08:b8:9c:c3:2c:a4:11:74:78:be:73:
8e:84:a1:ad:ca:c7:5b:51:18:ed:e8:08:aa:d5:6a:
57:66:be:f8:95:02:4d:08:13:81:52:b0:18:b3:59:
d8:77:c3:a9:ac:6b:84:df:aa:ec:b9:b5:a0:fa:5c:
a2:f3:18:5a:8f:27:95:cf:b7:8b:5f:45:06:40:61:
04:dd:68:28:ee:af:b4:f6:d7:da:40:59:73:f4:c6:
9c:cf:59:8e:c5:a8:ea:fd:8d:8b:d4:bb:e6:f0:26:
01:8e:18:b6:58:32:59:60:53:52:38:8e:33:a6:6e:
4f:ff:c0:e0:3c:47:03:8d:f4:02:2c:4d:9b:ef:22:
29:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:95:55:E6:B2:3E:10:94:17:77:33:7B:17:E3:5F:DE:25:37:73:81
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:27:b9:34:ae:15:8b:54:8c:da:e2:81:35:6b:7d:84:cd:18:
7a:0c:02:86:f0:1d:8b:ae:96:e5:5a:9f:05:1f:17:bf:2e:1a:
00:01:db:d0:f2:ac:2d:e9:ae:8d:15:75:51:b4:07:e4:9c:89:
43:09:21:bf:86:5a:27:0a:8c:7d:a9:89:a5:45:9e:38:d7:a2:
eb:69:3d:69:ae:4d:c0:a2:a1:84:8b:a6:bf:98:65:9f:e9:09:
33:05:5e:4b:63:08:2f:95:1e:b0:36:65:9a:f7:19:d3:7b:34:
74:73:08:74:da:f7:40:ca:67:ac:10:d7:f2:34:9f:06:4a:f7:
7d:30:52:5f:31:aa:00:84:76:e8:47:73:63:af:aa:6c:b1:97:
db:ac:8c:e2:47:72:b9:fb:f2:b4:7d:ac:84:0d:d7:90:37:60:
82:39:14:83:86:2e:5f:09:ee:fe:2c:7f:5c:f6:5b:88:e7:90:
d4:4b:98:19:b6:ae:4f:90:25:d9:e3:e7:ed:26:d5:4e:6a:34:
0e:78:5b:b3:33:51:75:c2:a7:e5:34:73:d7:4a:22:96:d6:a9:
a2:b2:f4:ca:70:91:fe:bd:7f:3e:0c:a7:77:6d:97:36:a1:8c:
5c:b5:cb:d0:45:35:b4:77:9f:61:59:16:c8:86:5d:81:27:aa:
2a:0d:8d:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Ogbw3DQMNRQ0q4uyygdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTk2OGVkYjcyYzE1ZjVmOTU2N2ZkMzQyNjdiODc0ODVl
ZjM2ZDEwHhcNMjUwMTMxMTUwMDQzWhcNMjUwMjAxMTUwMDQzWjAzMTEwLwYDVQQD
Eyg4ODk1NTVlNmIyM2UxMDk0MTc3NzMzN2IxN2UzNWZkZTI1Mzc3MzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdRNpsACQoBWKooGZjouYBfW/Idg
jFN+0a5Cjpo+4L7QFdt+eb1ZmgX9ejEBgt1RXd62wOn6dU2ii1BElYQ7MkuZZL3a
ZamxwTkuz8JVrTPQGIG9vb8lqZJuGJlfYnJTZbCXRnYO7kVnqyYjVDCMB70Il+sc
WaBEiLwxCLicwyykEXR4vnOOhKGtysdbURjt6Aiq1WpXZr74lQJNCBOBUrAYs1nY
d8OprGuE36rsubWg+lyi8xhajyeVz7eLX0UGQGEE3Wgo7q+09tfaQFlz9Macz1mO
xajq/Y2L1Lvm8CYBjhi2WDJZYFNSOI4zpm5P/8DgPEcDjfQCLE2b7yIpmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiVVeayPhCUF3czexfjX94lN3OBMB8GA1UdIwQY
MBaAFMWpaO23LBX1+VZ/00JnuHSF7zbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMt
YjJjMGRmYThhMGUxLzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMtYjJjMGRmYThhMGUx
LzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJye5NK4V
i1SM2uKBNWt9hM0YegwChvAdi66W5VqfBR8Xvy4aAAHb0PKsLemujRV1UbQH5JyJ
Qwkhv4ZaJwqMfamJpUWeONei62k9aa5NwKKhhIumv5hln+kJMwVeS2MIL5UesDZl
mvcZ03s0dHMIdNr3QMpnrBDX8jSfBkr3fTBSXzGqAIR26EdzY6+qbLGX26yM4kdy
ufvytH2shA3XkDdggjkUg4YuXwnu/ix/XPZbiOeQ1EuYGbauT5Al2ePn7SbVTmo0
DnhbszNRdcKn5TRz10oiltaporL0ynCR/r1/Pgynd22XNqGMXLXL0EU1tHefYVkW
yIZdgSeqKg2NsQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:51:46 2025 by rpki-client