Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft
File: xRCtRomJb7hQznkP3-NE1MAnpa4.mft (raw, json)
Hash identifier: fzPq0n0GULBfzr17vwePnxvq4Chb/xcqJ7a3PUxNW54=
Subject key identifier: D8:9D:DB:25:BF:F9:59:CF:B2:D0:1C:C2:36:12:F0:E8:E7:59:8C:B3
Authority key identifier: C5:10:AD:46:89:89:6F:B8:50:CE:79:0F:DF:E3:44:D4:C0:27:A5:AE
Certificate issuer: /CN=c510ad4689896fb850ce790fdfe344d4c027a5ae
Certificate serial: 0194BD4EC4E52B9D881462E4EFD09495867C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRCtRomJb7hQznkP3-NE1MAnpa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: h0xiomEz7xtLYsv88aOYGmA0lnI.roa (hash: BAw5E4Ocz44eNDbC47J9c+7M/I/mZ/R9N04y5bk6RWw=)
2: xRCtRomJb7hQznkP3-NE1MAnpa4.crl (hash: sr/VM1SK3Q3C97BYShhnSOQvuETx65dkOHHtESEGj90=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c4:e5:2b:9d:88:14:62:e4:ef:d0:94:95:86:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c510ad4689896fb850ce790fdfe344d4c027a5ae
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=d89ddb25bff959cfb2d01cc23612f0e8e7598cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:21:1b:05:5b:cc:62:24:a2:8e:9a:33:b5:
7c:e2:50:f2:35:18:ca:47:60:8a:f0:a9:c9:28:70:
d0:07:d2:92:8a:34:42:65:4c:bf:c0:bf:21:b1:46:
90:71:13:8b:a0:d6:d4:0d:38:5c:bc:4b:a5:4e:f8:
e0:c7:33:22:c1:ad:d7:e4:3f:6e:e3:e5:05:df:b0:
7f:d0:c7:41:3c:2c:44:97:95:4f:b8:de:c1:d0:6f:
b0:10:f7:47:ab:46:04:3d:72:05:d7:f6:a9:0e:cf:
1e:95:af:a5:fc:f9:18:54:e4:49:3b:4e:a9:7e:7f:
93:65:35:5a:93:e5:2a:33:eb:17:38:ae:a1:fd:62:
3c:0f:d4:3f:d3:52:7a:94:c5:f3:85:f5:6a:a8:cc:
ed:36:18:9c:f9:5e:a7:63:08:49:bc:c5:df:5f:da:
81:fe:17:cc:94:6c:4b:05:a6:07:61:df:9f:95:52:
f5:fa:3f:75:ff:95:3d:7e:bf:27:73:d8:ba:50:ba:
0b:52:c3:dc:5e:eb:7f:8f:d0:35:88:1b:d8:ca:02:
be:c8:56:5b:a5:a2:b2:52:c3:37:f6:8b:aa:83:98:
31:8e:44:2c:37:f6:1e:dd:b4:30:83:0b:dd:4d:5c:
3f:6d:64:c1:83:2f:8e:be:f4:fe:c9:30:64:e5:fc:
f3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9D:DB:25:BF:F9:59:CF:B2:D0:1C:C2:36:12:F0:E8:E7:59:8C:B3
X509v3 Authority Key Identifier:
keyid:C5:10:AD:46:89:89:6F:B8:50:CE:79:0F:DF:E3:44:D4:C0:27:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRCtRomJb7hQznkP3-NE1MAnpa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f2:0d:38:a0:f4:92:1f:20:9a:00:d8:2c:8d:58:71:b6:98:
f0:5b:3a:36:4a:37:79:e5:bf:1b:d9:15:ae:bf:c9:f6:4a:06:
cf:1e:68:43:98:d2:25:fe:89:6d:94:1a:82:d9:f5:cf:88:9e:
eb:05:2b:e3:16:ff:c8:31:9a:27:5f:de:41:4f:70:e4:37:e1:
fc:34:a9:9a:76:c0:17:39:be:d0:81:1d:92:4c:b7:7b:93:32:
5f:53:64:3d:de:d8:0e:a8:e3:b5:8c:b5:1b:73:1c:83:fa:b9:
5e:9c:6a:27:ec:c2:dd:bd:84:5b:d9:33:24:f2:2f:d8:34:bd:
a5:e9:9c:68:1f:00:43:b3:ff:6c:bb:67:e4:2f:12:d0:1f:df:
4a:f7:2e:03:4f:9a:7c:d9:86:19:a5:f2:fb:28:1f:81:57:cb:
f9:02:ea:d5:c8:4d:44:5c:07:62:27:5c:81:b2:e1:8b:e9:61:
42:31:42:e5:cb:6d:2c:f5:25:e9:77:fc:66:2f:59:49:f3:d9:
9e:5c:46:23:01:fa:ff:00:64:71:b4:64:19:91:75:85:72:50:
3d:38:b8:89:89:d6:c2:63:af:b2:2f:6c:a5:1c:7c:8b:8d:9a:
fa:8f:28:cc:8a:4d:de:4f:44:31:5c:b8:b5:2d:a5:de:87:e9:
c5:ef:a2:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TsTlK52IFGLk79CUlYZ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MTBhZDQ2ODk4OTZmYjg1MGNlNzkwZmRmZTM0NGQ0YzAy
N2E1YWUwHhcNMjUwMTMxMTcwMDQzWhcNMjUwMjAxMTcwMDQzWjAzMTEwLwYDVQQD
EyhkODlkZGIyNWJmZjk1OWNmYjJkMDFjYzIzNjEyZjBlOGU3NTk4Y2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nohGwVbzGIkoo6aM7V84lDyNRjK
R2CK8KnJKHDQB9KSijRCZUy/wL8hsUaQcROLoNbUDThcvEulTvjgxzMiwa3X5D9u
4+UF37B/0MdBPCxEl5VPuN7B0G+wEPdHq0YEPXIF1/apDs8ela+l/PkYVORJO06p
fn+TZTVak+UqM+sXOK6h/WI8D9Q/01J6lMXzhfVqqMztNhic+V6nYwhJvMXfX9qB
/hfMlGxLBaYHYd+flVL1+j91/5U9fr8nc9i6ULoLUsPcXut/j9A1iBvYygK+yFZb
paKyUsM39ouqg5gxjkQsN/Ye3bQwgwvdTVw/bWTBgy+OvvT+yTBk5fzzwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNid2yW/+VnPstAcwjYS8OjnWYyzMB8GA1UdIwQY
MBaAFMUQrUaJiW+4UM55D9/jRNTAJ6WuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJDdFJvbUpiN2hRem5rUDMtTkUxTUFucGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NWY5NTQtM2Y4OC00MzU3LTk2NDIt
OWExNmQ5YzBjYWY3LzEveFJDdFJvbUpiN2hRem5rUDMtTkUxTUFucGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82NWY5NTQtM2Y4OC00MzU3LTk2NDItOWExNmQ5YzBjYWY3
LzEveFJDdFJvbUpiN2hRem5rUDMtTkUxTUFucGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfINOKD0
kh8gmgDYLI1YcbaY8Fs6Nko3eeW/G9kVrr/J9koGzx5oQ5jSJf6JbZQagtn1z4ie
6wUr4xb/yDGaJ1/eQU9w5Dfh/DSpmnbAFzm+0IEdkky3e5MyX1NkPd7YDqjjtYy1
G3Mcg/q5XpxqJ+zC3b2EW9kzJPIv2DS9pemcaB8AQ7P/bLtn5C8S0B/fSvcuA0+a
fNmGGaXy+ygfgVfL+QLq1chNRFwHYidcgbLhi+lhQjFC5cttLPUl6Xf8Zi9ZSfPZ
nlxGIwH6/wBkcbRkGZF1hXJQPTi4iYnWwmOvsi9spRx8i42a+o8ozIpN3k9EMVy4
tS2l3ofpxe+iUQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:35 2025 by rpki-client