Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
File: xU3YgoUsxFhrH-40wFAdXbfWDws.mft (raw, json)
Hash identifier: Zdy2qeG8cmhgATxkfV9j6S4qZYRXCRsTD/sbFVoySs4=
Subject key identifier: 63:4C:01:2F:0D:5C:9B:42:2E:63:3C:76:C0:BF:1A:04:6C:32:34:0F
Authority key identifier: C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
Certificate issuer: /CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
Certificate serial: 0194BD177484EB469BED59AB1F8F553C83AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
Manifest number: 05EF
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: XArLVttX_wCBnKO2u8bWM8Vk3NU.roa (hash: BE5h5QGSzKEJoBRH8Cvw/x+Z7DD6UePHMldATT7VyV4=)
2: xU3YgoUsxFhrH-40wFAdXbfWDws.crl (hash: 6hDVEl3N8sabYJj/6Oph/x9l9lUWknXDQK+O6rjts2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:74:84:eb:46:9b:ed:59:ab:1f:8f:55:3c:83:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=634c012f0d5c9b422e633c76c0bf1a046c32340f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:a3:fb:01:10:c3:4e:1d:1e:39:42:03:87:
9c:77:47:f7:8a:6c:60:e6:1e:b9:f4:7d:19:3c:a2:
c4:ce:f0:cb:6a:3d:7e:0a:33:46:e7:0f:2f:77:5d:
14:ab:0a:65:44:4a:78:08:0c:ca:8f:2a:ff:ea:72:
ce:bf:7a:f6:32:d6:82:d5:29:12:ca:75:e0:57:84:
4d:2d:51:6d:63:0d:87:71:4b:14:ad:cf:78:d2:ce:
a7:ef:11:bb:1e:97:d2:c2:1d:ec:cc:5e:5f:d6:c0:
a4:29:2b:10:b7:81:9c:a2:7a:2e:cd:c3:15:54:8f:
76:73:ca:6a:eb:1a:c3:e6:06:8a:2d:a5:af:f6:b0:
c9:54:b6:9d:bf:7c:0f:79:ed:e2:2d:cd:48:5b:ff:
cc:eb:a4:31:f9:0f:ca:da:af:69:2a:c0:73:55:8a:
fd:21:e3:fc:75:32:40:af:4f:08:b4:34:3c:a5:aa:
e8:88:da:16:7c:0f:b5:62:5c:01:5a:36:52:d1:bc:
8f:d3:6b:24:16:ff:e0:3d:cb:35:be:7e:2c:73:10:
76:fa:df:45:34:e3:93:19:5e:24:ef:3d:80:cf:f0:
d1:f3:3b:b3:66:61:80:55:ce:e1:32:b1:2b:38:56:
cf:b7:c5:2b:de:42:76:c8:5f:58:9f:62:2b:c3:63:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4C:01:2F:0D:5C:9B:42:2E:63:3C:76:C0:BF:1A:04:6C:32:34:0F
X509v3 Authority Key Identifier:
keyid:C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:40:b3:9a:ca:2d:42:9f:82:9a:59:b5:03:29:c0:b5:68:13:
72:89:39:27:35:2a:8a:d5:ee:ef:a9:ab:2e:cf:81:08:62:09:
61:0e:ba:47:4f:53:7a:bb:04:90:3c:4b:77:c1:90:31:73:b8:
84:e5:b1:8c:23:9d:5f:4d:a7:c9:a2:d4:af:76:15:b8:3b:d5:
1c:cb:ed:0d:8d:1f:c2:25:79:9a:8e:05:d2:9f:58:6d:7a:12:
02:d6:66:c0:3e:41:da:7e:32:3d:53:ea:92:f8:66:1c:92:1d:
65:c2:17:c6:ac:2e:e5:d6:33:dd:1a:15:7d:34:27:6d:4b:39:
c9:a5:5d:e3:d5:31:63:cd:a2:14:60:5f:79:f4:78:98:bd:a0:
1d:0c:db:1b:d9:d6:33:e8:0e:5f:85:24:40:99:d0:1d:37:d6:
dd:53:92:e3:18:40:5b:f6:88:3e:74:38:b1:8d:ed:9a:e1:ec:
cb:17:61:e3:30:7f:ae:7a:95:e3:60:6c:21:55:8f:57:12:7d:
2b:38:b8:e9:0b:a6:50:a8:1e:55:bb:25:ec:bc:d7:b1:06:90:
34:11:fa:f5:d1:77:a0:71:97:ee:60:b4:69:df:15:23:e4:2c:
05:ae:00:27:52:e1:60:5e:db:2d:b2:9d:cf:a4:f9:46:61:16:
b9:0e:10:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3SE60ab7VmrH49VPIOqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NGRkODgyODUyY2M0NTg2YjFmZWUzNGMwNTAxZDVkYjdk
NjBmMGIwHhcNMjUwMTMxMTYwMDE4WhcNMjUwMjAxMTYwMDE4WjAzMTEwLwYDVQQD
Eyg2MzRjMDEyZjBkNWM5YjQyMmU2MzNjNzZjMGJmMWEwNDZjMzIzNDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPSj+wEQw04dHjlCA4ecd0f3imxg
5h659H0ZPKLEzvDLaj1+CjNG5w8vd10UqwplREp4CAzKjyr/6nLOv3r2MtaC1SkS
ynXgV4RNLVFtYw2HcUsUrc940s6n7xG7HpfSwh3szF5f1sCkKSsQt4GconouzcMV
VI92c8pq6xrD5gaKLaWv9rDJVLadv3wPee3iLc1IW//M66Qx+Q/K2q9pKsBzVYr9
IeP8dTJAr08ItDQ8paroiNoWfA+1YlwBWjZS0byP02skFv/gPcs1vn4scxB2+t9F
NOOTGV4k7z2Az/DR8zuzZmGAVc7hMrErOFbPt8Ur3kJ2yF9Yn2Irw2OABwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNMAS8NXJtCLmM8dsC/GgRsMjQPMB8GA1UdIwQY
MBaAFMVN2IKFLMRYax/uNMBQHV231g8LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFUzWWdvVXN4RmhySC00MHdGQWRYYmZXRHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82NDg3OWItNmM2OC00NTk3LTlmYWIt
NmZiZTI5MzE3MWZlLzEveFUzWWdvVXN4RmhySC00MHdGQWRYYmZXRHdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82NDg3OWItNmM2OC00NTk3LTlmYWItNmZiZTI5MzE3MWZl
LzEveFUzWWdvVXN4RmhySC00MHdGQWRYYmZXRHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0Czmsot
Qp+Cmlm1AynAtWgTcok5JzUqitXu76mrLs+BCGIJYQ66R09TersEkDxLd8GQMXO4
hOWxjCOdX02nyaLUr3YVuDvVHMvtDY0fwiV5mo4F0p9YbXoSAtZmwD5B2n4yPVPq
kvhmHJIdZcIXxqwu5dYz3RoVfTQnbUs5yaVd49UxY82iFGBfefR4mL2gHQzbG9nW
M+gOX4UkQJnQHTfW3VOS4xhAW/aIPnQ4sY3tmuHsyxdh4zB/rnqV42BsIVWPVxJ9
Kzi46QumUKgeVbsl7LzXsQaQNBH69dF3oHGX7mC0ad8VI+QsBa4AJ1LhYF7bLbKd
z6T5RmEWuQ4QEg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:06 2025 by rpki-client