Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
File: xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json)
Hash identifier: oq5JpPwhNCKZDs3v/MKvG8rETHHWFwM9+bjZUdRZYNQ=
Subject key identifier: 7A:5C:00:2B:AF:6A:9C:05:6D:C5:83:81:5F:6D:95:AA:E0:33:D1:FD
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial: 0194BCE08746CAF6469229E8D5F1CCA78FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
Manifest number: 04CD
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: Cj_iWDZ0D1TK46uScrNJsyJfZ60.roa (hash: 2EItGET7KN5xYUnaftxX5tZU9l5ZOP9oj5BYiCLbSjk=)
2: TX8cnXXbIgaO3aE68x88MMtMTTI.roa (hash: FeZgp0BLqJdm0jiS+/GIZyqTIXPtIBPoCgnCgn78SEQ=)
3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: g853vi69+bwvx40Q8ohfAKlv0eWyqbGNR4UJRut7LzI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:87:46:ca:f6:46:92:29:e8:d5:f1:cc:a7:8f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=7a5c002baf6a9c056dc583815f6d95aae033d1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:c1:75:d5:9e:4c:0b:3b:d5:30:4f:c9:dc:
4b:5b:11:3e:d8:7c:aa:d0:b7:14:de:b7:26:36:f5:
3e:27:91:39:16:f2:7b:51:5a:65:89:e7:cc:bd:c4:
5a:c6:2e:fa:0f:51:ae:88:13:43:63:44:08:5b:8a:
ad:15:4d:f9:7e:08:2b:76:19:9c:f4:ec:bb:ae:17:
7f:dd:f1:db:60:cd:13:1e:b6:da:78:1e:6e:e4:c8:
d0:5a:01:1b:a6:3d:a4:5b:37:e6:49:c5:64:08:30:
1c:02:b6:c8:0f:83:1d:55:92:a5:8d:ca:16:d0:f5:
c2:5e:56:26:e1:e7:c8:4d:cb:6b:10:c0:f7:8b:ed:
30:80:ab:64:6a:6f:3c:52:58:5c:bc:2c:de:d0:0c:
1b:7a:a6:09:59:28:5a:02:ef:2f:19:34:aa:ce:7a:
63:4e:91:06:b4:92:64:ce:5e:f4:6b:83:b4:10:af:
60:15:92:68:53:b3:4f:d7:be:c8:7e:76:14:97:9e:
66:72:9c:b0:d4:f2:55:15:b9:36:46:07:10:27:94:
a1:dd:1f:74:c0:10:2f:02:ed:b4:4d:9f:42:c2:1e:
11:30:66:4d:35:44:5c:47:f1:ef:a8:4b:28:af:34:
7f:d8:16:0d:b2:70:49:dd:af:37:f4:42:00:79:5e:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5C:00:2B:AF:6A:9C:05:6D:C5:83:81:5F:6D:95:AA:E0:33:D1:FD
X509v3 Authority Key Identifier:
keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:17:9d:a4:21:5a:36:ae:4f:cf:c5:01:c7:cd:e9:09:15:f4:
ea:a3:ba:75:40:54:24:83:cd:3b:7e:4a:c1:1a:07:2d:b9:a3:
e3:17:ce:49:ed:61:30:5c:51:a2:15:b3:52:49:86:59:b6:af:
d5:76:f6:16:da:fb:28:30:34:92:5f:04:84:6a:a1:5a:f6:85:
16:c2:8b:45:f5:95:ef:06:31:0c:42:8f:76:df:e6:2e:5b:87:
40:52:76:dd:b7:e9:dd:36:91:65:2d:ff:2b:36:8f:77:b3:27:
20:5f:a4:58:8a:47:dd:c3:f8:11:7e:85:a2:40:f3:0b:71:1a:
24:66:d2:15:35:55:50:1f:36:82:5d:c3:2d:3d:57:c4:cb:e7:
85:d3:aa:90:8f:7d:49:2f:05:41:66:cf:8a:bd:ab:6e:7d:84:
91:b8:d7:5f:1e:2a:c9:6b:29:a0:6b:b7:f7:8f:0c:8c:23:92:
6f:f6:05:4f:6b:1e:11:9c:21:70:00:ed:81:03:32:03:ea:1c:
5b:f5:8a:84:36:be:47:00:fd:f4:55:42:9b:fa:19:3f:87:62:
4a:2b:38:f9:6f:34:d1:73:9a:e1:64:e8:55:a2:97:eb:08:b3:
bc:8e:63:dd:e0:b2:ba:80:f2:58:29:dc:84:b0:cc:6b:4e:34:
28:5a:52:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84IdGyvZGkino1fHMp4+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YmE1MWMwNzE0ODg0M2Q0MDA4MDViNDAzMzVlNzJkMzI0
MjY1ZjEwHhcNMjUwMTMxMTUwMDE4WhcNMjUwMjAxMTUwMDE4WjAzMTEwLwYDVQQD
Eyg3YTVjMDAyYmFmNmE5YzA1NmRjNTgzODE1ZjZkOTVhYWUwMzNkMWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFzBddWeTAs71TBPydxLWxE+2Hyq
0LcU3rcmNvU+J5E5FvJ7UVpliefMvcRaxi76D1GuiBNDY0QIW4qtFU35fggrdhmc
9Oy7rhd/3fHbYM0THrbaeB5u5MjQWgEbpj2kWzfmScVkCDAcArbID4MdVZKljcoW
0PXCXlYm4efITctrEMD3i+0wgKtkam88UlhcvCze0AwbeqYJWShaAu8vGTSqznpj
TpEGtJJkzl70a4O0EK9gFZJoU7NP177IfnYUl55mcpyw1PJVFbk2RgcQJ5Sh3R90
wBAvAu20TZ9Cwh4RMGZNNURcR/HvqEsorzR/2BYNsnBJ3a839EIAeV4OcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpcACuvapwFbcWDgV9tlargM9H9MB8GA1UdIwQY
MBaAFMW6UcBxSIQ9QAgFtAM15y0yQmXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kYjYzYjUtMWY5Ni00ZjAwLTg2NWEt
OWZmNWMxYTNiMGUwLzEveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kYjYzYjUtMWY5Ni00ZjAwLTg2NWEtOWZmNWMxYTNiMGUw
LzEveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhedpCFa
Nq5Pz8UBx83pCRX06qO6dUBUJIPNO35KwRoHLbmj4xfOSe1hMFxRohWzUkmGWbav
1Xb2Ftr7KDA0kl8EhGqhWvaFFsKLRfWV7wYxDEKPdt/mLluHQFJ23bfp3TaRZS3/
KzaPd7MnIF+kWIpH3cP4EX6FokDzC3EaJGbSFTVVUB82gl3DLT1XxMvnhdOqkI99
SS8FQWbPir2rbn2EkbjXXx4qyWspoGu3948MjCOSb/YFT2seEZwhcADtgQMyA+oc
W/WKhDa+RwD99FVCm/oZP4diSis4+W800XOa4WToVaKX6wizvI5j3eCyuoDyWCnc
hLDMa040KFpSAA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:07 2025 by rpki-client