Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
File: xHqEBhZxYD3cKujuqcrVHudarsY.mft (raw, json)
Hash identifier: NsOiqZvO5TycxsgzEbieNu/xSn0flFEClGdJ9wPzTno=
Subject key identifier: 62:75:3A:D0:8C:AA:2B:CC:33:29:04:5E:6D:10:9B:3A:6E:A8:E1:80
Authority key identifier: C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
Certificate issuer: /CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Certificate serial: 0194BC04A177B82A4814638D83968019F15A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: 1G_BWf-F8T8J8X8N9NNB4K_YYMY.roa (hash: kKD9/wMia+gnqXI1OLYz+C+9k0a7eBZ1ba1nm7Hyp0A=)
2: xHqEBhZxYD3cKujuqcrVHudarsY.crl (hash: iqPfvj9Pt5l7j31hMeptw8oopbAAGc7kQNHyS/hp0Qk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a1:77:b8:2a:48:14:63:8d:83:96:80:19:f1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=62753ad08caa2bcc3329045e6d109b3a6ea8e180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:ab:e0:59:40:18:3b:46:33:aa:50:5c:7c:
ea:fe:eb:ac:6d:6d:b5:66:61:94:ca:53:53:3e:3b:
d9:98:4c:5a:1d:06:6a:ce:5a:e3:13:e7:16:cf:10:
dc:d3:fa:8f:dc:bd:1e:32:87:f8:24:36:27:e2:78:
f0:9c:22:53:d1:be:66:70:57:f6:c2:c3:51:84:6e:
c6:bd:45:83:e2:53:5c:c6:ff:f4:31:fc:51:b7:71:
e9:cf:98:db:5c:b3:94:ef:25:a7:30:20:82:6f:fc:
51:bc:43:1b:8d:9f:51:c6:61:6c:fa:3b:47:79:d8:
85:0a:02:c7:c0:91:08:82:95:36:44:c1:1f:30:b9:
6f:04:2f:16:1e:cc:f6:8e:95:c1:60:9d:0b:6e:85:
b9:f8:e5:cf:6f:48:b8:89:64:8a:a7:c7:50:31:18:
0c:39:74:d9:69:23:12:60:2f:f0:19:03:89:03:07:
89:0e:67:69:8e:b6:22:42:c6:3a:85:7b:6e:4a:ee:
03:78:00:6a:aa:b5:87:4b:d5:21:1b:94:2c:fa:6c:
b2:a9:47:c4:73:de:91:a0:92:49:aa:1e:a2:3c:c5:
39:73:cc:ca:42:c7:24:e2:11:39:8f:35:04:3b:65:
88:58:f5:89:de:9f:60:97:ed:3d:ae:46:5d:0e:37:
0c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:75:3A:D0:8C:AA:2B:CC:33:29:04:5E:6D:10:9B:3A:6E:A8:E1:80
X509v3 Authority Key Identifier:
keyid:C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8b:a2:77:87:59:6a:5c:1e:c6:d1:7b:d1:5f:c2:bf:49:ef:
14:15:92:bb:02:69:03:62:7a:2a:f5:bb:62:29:e6:fa:fc:bc:
3e:41:d3:3f:ab:a9:05:d9:fc:0b:ed:fb:03:5a:df:86:91:a6:
ca:23:69:d2:b3:a9:a7:92:40:fd:09:20:3f:2d:56:92:92:2d:
9f:50:91:69:ff:99:37:7a:10:60:d9:14:e0:85:b2:dd:a9:c4:
13:79:04:77:f9:e1:7d:ab:17:ca:d8:09:93:3d:d4:13:6e:b4:
7b:8a:56:4f:c3:49:52:9e:2f:a8:d6:68:c3:59:84:e6:28:79:
a3:bd:c5:53:ea:f9:41:33:db:73:c7:33:fc:b9:a1:ea:cd:23:
7d:6e:52:86:1a:90:4f:ed:ba:8c:1b:31:a4:16:95:ac:f0:42:
81:68:65:36:9b:80:6d:ad:e8:ee:4b:a3:09:de:00:a2:87:f2:
8e:b6:c6:83:7f:4f:13:91:16:5b:35:9a:96:98:cb:9c:99:4d:
8f:fc:7c:87:f0:ac:a0:01:b0:5e:86:5d:0f:b1:6f:9e:88:f1:
28:13:cf:3a:d3:e8:a0:49:af:5e:7a:42:1d:f0:4d:b2:06:0e:
fb:dd:04:63:3b:cf:54:4d:9d:0d:81:01:0a:e5:0f:19:a5:14:
44:d9:fd:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BKF3uCpIFGONg5aAGfFaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0N2E4NDA2MTY3MTYwM2RkYzJhZThlZWE5Y2FkNTFlZTc1
YWFlYzYwHhcNMjUwMTMxMTEwMDA3WhcNMjUwMjAxMTEwMDA3WjAzMTEwLwYDVQQD
Eyg2Mjc1M2FkMDhjYWEyYmNjMzMyOTA0NWU2ZDEwOWIzYTZlYThlMTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+2r4FlAGDtGM6pQXHzq/uusbW21
ZmGUylNTPjvZmExaHQZqzlrjE+cWzxDc0/qP3L0eMof4JDYn4njwnCJT0b5mcFf2
wsNRhG7GvUWD4lNcxv/0MfxRt3Hpz5jbXLOU7yWnMCCCb/xRvEMbjZ9RxmFs+jtH
ediFCgLHwJEIgpU2RMEfMLlvBC8WHsz2jpXBYJ0LboW5+OXPb0i4iWSKp8dQMRgM
OXTZaSMSYC/wGQOJAweJDmdpjrYiQsY6hXtuSu4DeABqqrWHS9UhG5Qs+myyqUfE
c96RoJJJqh6iPMU5c8zKQsck4hE5jzUEO2WIWPWJ3p9gl+09rkZdDjcMYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJ1OtCMqivMMykEXm0QmzpuqOGAMB8GA1UdIwQY
MBaAFMR6hAYWcWA93Cro7qnK1R7nWq7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEhxRUJoWnhZRDNjS3VqdXFjclZIdWRhcnNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81M2YyNTItZjNmZS00NjdhLWJjY2Yt
YjI5MWY5N2I3MDk2LzEveEhxRUJoWnhZRDNjS3VqdXFjclZIdWRhcnNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC81M2YyNTItZjNmZS00NjdhLWJjY2YtYjI5MWY5N2I3MDk2
LzEveEhxRUJoWnhZRDNjS3VqdXFjclZIdWRhcnNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4uid4dZ
alwextF70V/Cv0nvFBWSuwJpA2J6KvW7Yinm+vy8PkHTP6upBdn8C+37A1rfhpGm
yiNp0rOpp5JA/QkgPy1WkpItn1CRaf+ZN3oQYNkU4IWy3anEE3kEd/nhfasXytgJ
kz3UE260e4pWT8NJUp4vqNZow1mE5ih5o73FU+r5QTPbc8cz/Lmh6s0jfW5ShhqQ
T+26jBsxpBaVrPBCgWhlNpuAba3o7kujCd4AoofyjrbGg39PE5EWWzWalpjLnJlN
j/x8h/CsoAGwXoZdD7FvnojxKBPPOtPooEmvXnpCHfBNsgYO+90EYzvPVE2dDYEB
CuUPGaUURNn9PA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:49:51 2025 by rpki-client