Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier: 3UUHX5VqpLoQLSG5blM63zUddmgbDB1O0p2tKDBCAGo=
Subject key identifier: 37:58:A7:65:BC:EE:B3:66:3B:7A:10:34:51:F2:0D:FF:E6:4F:83:B2
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 0194BC72FE530E7556C562699A0A69010C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number: 0913
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: 06tgDhMET5PEFJxe6WB-BV1M_gE.roa (hash: mCqrz6qmS27RhPQU4uNyx6aFC+5GW4aIzmbKH5kTy4E=)
2: AqcoNOW_E-xWBo1Rt_yWTCfd42I.roa (hash: QWci9V2NjIY+SYFiDofrhj2aiBG+2NbxvfuonR2gWB0=)
3: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: uo2G+AF4nHBIQj7v3JpYkB5m65PQPlDdd5CosFTFMLc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fe:53:0e:75:56:c5:62:69:9a:0a:69:01:0c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=3758a765bceeb3663b7a103451f20dffe64f83b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:c1:1e:09:04:2d:ac:a5:ad:8c:ff:83:b6:
4c:1d:05:e6:16:68:00:f5:6a:bf:df:d8:f2:e4:14:
4e:90:f0:1b:93:ec:68:fd:f0:f3:29:a4:19:bb:d6:
e0:6b:bd:69:47:de:ad:39:db:2f:8b:f6:2a:e0:ee:
6c:a4:de:c5:e3:3b:6b:eb:b3:8a:6f:41:59:a9:f2:
4d:5a:89:2e:4b:07:c5:3e:3a:e2:95:e2:51:d7:a1:
56:33:66:62:c0:2b:5b:62:c2:8a:56:6d:f9:9c:65:
02:32:f7:f2:0b:d5:dc:16:fb:f4:62:18:22:52:86:
ed:5a:b4:2a:46:60:93:2c:01:ce:fa:98:e3:d7:58:
f5:ed:73:a1:d6:b6:ec:91:74:c7:2f:9b:8d:67:f3:
b4:0b:79:cd:ea:c8:8b:62:91:57:89:3e:25:10:65:
5b:fb:53:68:1d:da:1b:b8:12:28:6c:f2:72:ab:89:
d5:0b:fb:3c:fd:ae:69:43:0e:62:71:3d:8c:a3:f4:
c5:ef:e4:c6:e8:5e:77:b4:26:5e:49:a6:5a:c1:b0:
7e:be:99:93:8a:1f:3d:20:9b:c7:ea:ef:b2:c9:26:
4c:3f:9f:f5:b2:87:0a:13:33:43:68:b2:da:eb:89:
98:49:dc:09:c4:22:d8:dc:11:30:2a:2a:74:b4:e5:
29:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:58:A7:65:BC:EE:B3:66:3B:7A:10:34:51:F2:0D:FF:E6:4F:83:B2
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4b:71:28:39:aa:8c:c9:06:e5:0b:ec:7a:2e:3a:56:b8:a9:
a8:6e:f3:aa:2a:1d:db:8e:fb:bf:ef:bd:98:04:29:ab:e2:ba:
2d:de:3c:17:44:7f:b2:d9:5f:60:e1:15:53:90:36:0e:b9:74:
7f:3d:7c:95:c6:81:fb:75:86:7f:b0:53:4c:01:ee:54:7d:a5:
1d:4b:ca:b9:c1:b2:36:bd:14:5a:ca:3f:61:68:14:91:2d:6c:
2f:c4:89:36:ed:27:aa:a0:c9:48:db:4b:15:9c:65:d3:56:62:
3a:d7:1f:53:1b:30:6c:d1:39:20:49:91:80:89:6a:1a:d6:cb:
ab:19:b3:b8:44:46:44:dc:18:c2:5e:48:e7:69:af:66:84:ac:
f7:3c:ee:d8:5a:e0:c9:90:72:92:aa:30:f3:4a:30:d9:68:fd:
89:ea:fc:8d:74:db:e8:73:6c:58:73:5f:a4:3f:d7:af:54:c7:
09:4e:38:23:74:ed:7d:0f:c5:8f:c9:49:34:18:60:c7:be:c0:
71:75:8d:47:ec:d6:5e:63:d2:db:cf:58:bf:56:a9:ae:24:ad:
88:60:c5:11:63:70:80:df:24:f5:2a:af:18:4c:af:e0:0c:a3:
f4:d0:2a:d2:27:dc:f7:f5:83:5d:71:10:09:0f:40:b0:37:15:
b7:5e:6d:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cv5TDnVWxWJpmgppAQxxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNjE0MGYxNzMxMjc4NGVmNjJhZTNiZTAzMGMwYzJjYzY2
MWE3MDIwHhcNMjUwMTMxMTMwMDQwWhcNMjUwMjAxMTMwMDQwWjAzMTEwLwYDVQQD
EygzNzU4YTc2NWJjZWViMzY2M2I3YTEwMzQ1MWYyMGRmZmU2NGY4M2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1LBHgkELaylrYz/g7ZMHQXmFmgA
9Wq/39jy5BROkPAbk+xo/fDzKaQZu9bga71pR96tOdsvi/Yq4O5spN7F4ztr67OK
b0FZqfJNWokuSwfFPjrileJR16FWM2ZiwCtbYsKKVm35nGUCMvfyC9XcFvv0Yhgi
UobtWrQqRmCTLAHO+pjj11j17XOh1rbskXTHL5uNZ/O0C3nN6siLYpFXiT4lEGVb
+1NoHdobuBIobPJyq4nVC/s8/a5pQw5icT2Mo/TF7+TG6F53tCZeSaZawbB+vpmT
ih89IJvH6u+yySZMP5/1socKEzNDaLLa64mYSdwJxCLY3BEwKip0tOUpSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdYp2W87rNmO3oQNFHyDf/mT4OyMB8GA1UdIwQY
MBaAFF5hQPFzEnhO9irjvgMMDCzGYacCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgt
MGRiY2JhMjc1NDE3LzEvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgtMGRiY2JhMjc1NDE3
LzEvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0txKDmq
jMkG5Qvsei46VripqG7zqiod2477v++9mAQpq+K6Ld48F0R/stlfYOEVU5A2Drl0
fz18lcaB+3WGf7BTTAHuVH2lHUvKucGyNr0UWso/YWgUkS1sL8SJNu0nqqDJSNtL
FZxl01ZiOtcfUxswbNE5IEmRgIlqGtbLqxmzuERGRNwYwl5I52mvZoSs9zzu2Frg
yZBykqow80ow2Wj9ier8jXTb6HNsWHNfpD/Xr1THCU44I3TtfQ/Fj8lJNBhgx77A
cXWNR+zWXmPS289Yv1apriStiGDFEWNwgN8k9SqvGEyv4Ayj9NAq0ifc9/WDXXEQ
CQ9AsDcVt15tOQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:27 2025 by rpki-client