Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
File: xRvfUzN6yxiydpUsNX6RmAvMWww.mft (raw, json)
Hash identifier: ndPe7yKC/cqbWls85kS9rADeQ5gQj1TNWub7jcCTHdE=
Subject key identifier: 80:94:CB:38:30:E8:FE:EC:BD:18:AF:11:FC:59:78:A1:F0:EE:CA:73
Authority key identifier: C5:1B:DF:53:33:7A:CB:18:B2:76:95:2C:35:7E:91:98:0B:CC:5B:0C
Certificate issuer: /CN=c51bdf53337acb18b276952c357e91980bcc5b0c
Certificate serial: 0194BBCE05CE34C41B4FF1C822F0D0FDAC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
Manifest number: 0839
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: xRvfUzN6yxiydpUsNX6RmAvMWww.crl (hash: 4raTyR+n5cEgeTdnRK3Y/B2NcmHRsRKwytk7SpIyXOw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:05:ce:34:c4:1b:4f:f1:c8:22:f0:d0:fd:ac:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51bdf53337acb18b276952c357e91980bcc5b0c
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=8094cb3830e8feecbd18af11fc5978a1f0eeca73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:51:5f:a0:37:da:8d:a6:e2:c8:71:fc:e7:b6:
f1:bb:cb:e1:6b:61:1e:65:a4:35:27:2e:d0:33:7a:
e7:05:6e:d9:d3:f4:ea:cd:be:7c:9c:d0:c8:d1:de:
10:d3:84:66:a2:2e:a6:33:0c:56:eb:9c:25:73:8e:
34:e2:88:a3:b9:30:37:ee:5a:16:6b:9e:d2:81:68:
59:ea:ee:8b:f5:ad:b2:dd:e1:f1:f2:4d:4e:f1:aa:
05:cd:61:83:c2:b8:49:df:c7:83:f5:e6:65:fe:4d:
e1:db:f9:2f:cf:0b:07:9a:87:6d:71:1a:be:56:53:
6c:5d:75:10:51:f3:0d:d8:31:35:20:30:77:b5:fd:
46:6c:ec:d6:8a:a4:1c:2d:89:ee:80:9e:d5:69:04:
19:2c:60:fc:f4:22:71:38:42:0e:bf:1e:80:77:8d:
42:9c:03:a2:b4:e9:fc:88:2e:df:e2:b1:5d:55:28:
4a:e0:a3:18:cf:ce:e0:8a:e6:c7:9f:d4:02:3c:79:
dd:d3:ad:70:5f:16:8c:6a:7b:56:4e:ef:03:58:64:
b7:6d:64:ea:78:b5:cb:12:e6:31:e0:10:85:98:60:
30:0b:83:58:73:02:52:d1:75:38:87:ff:b5:3e:83:
ab:18:1b:6f:c3:e5:52:9b:c6:ba:24:08:bd:ab:9c:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:94:CB:38:30:E8:FE:EC:BD:18:AF:11:FC:59:78:A1:F0:EE:CA:73
X509v3 Authority Key Identifier:
keyid:C5:1B:DF:53:33:7A:CB:18:B2:76:95:2C:35:7E:91:98:0B:CC:5B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b7:95:79:3d:5d:81:4b:5e:80:8a:a6:9c:4e:4c:e1:70:a6:
6b:3d:e3:07:87:b3:61:e5:cb:f3:94:7d:f7:4f:44:27:93:d5:
be:e8:5e:cd:49:1f:47:a2:88:a4:58:23:ca:70:60:2e:1d:09:
32:fa:18:c1:f4:aa:c4:1f:90:d6:71:5a:67:30:80:20:d7:d0:
4f:fb:d6:95:88:a1:d1:61:ed:66:35:05:ec:90:63:da:8f:c2:
11:24:b0:6a:b4:09:7b:f6:c5:8e:1f:e1:2d:57:e7:12:ef:72:
8f:f3:eb:d4:9f:6a:83:33:43:bb:e4:b1:e8:d7:51:ce:8a:a0:
e0:ed:d6:bd:b4:ff:c2:9b:92:69:f6:17:e8:bb:c3:51:84:b9:
18:aa:4c:ad:4f:4b:09:6f:c2:21:7b:38:95:f7:45:4f:2d:a8:
f2:e0:0a:21:20:2e:1c:31:f4:a8:30:84:e7:17:5d:ca:a3:bb:
fb:db:d1:e4:5e:42:3a:05:cd:51:e8:4c:73:2c:8a:1d:71:48:
4b:fc:3a:33:02:ef:dc:55:ed:f2:d1:d2:38:76:01:ab:64:cc:
ea:b8:6d:7f:7d:b3:35:11:8a:8c:6b:26:23:29:14:8c:33:de:
69:15:ad:02:86:54:2f:b7:dd:a4:1b:7d:48:39:d3:bf:ce:55:
c6:68:d8:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgXONMQbT/HIIvDQ/ayMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MWJkZjUzMzM3YWNiMThiMjc2OTUyYzM1N2U5MTk4MGJj
YzViMGMwHhcNMjUwMTMxMTAwMDI4WhcNMjUwMjAxMTAwMDI4WjAzMTEwLwYDVQQD
Eyg4MDk0Y2IzODMwZThmZWVjYmQxOGFmMTFmYzU5NzhhMWYwZWVjYTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVFfoDfajabiyHH857bxu8vha2Ee
ZaQ1Jy7QM3rnBW7Z0/Tqzb58nNDI0d4Q04Rmoi6mMwxW65wlc4404oijuTA37loW
a57SgWhZ6u6L9a2y3eHx8k1O8aoFzWGDwrhJ38eD9eZl/k3h2/kvzwsHmodtcRq+
VlNsXXUQUfMN2DE1IDB3tf1GbOzWiqQcLYnugJ7VaQQZLGD89CJxOEIOvx6Ad41C
nAOitOn8iC7f4rFdVShK4KMYz87giubHn9QCPHnd061wXxaMantWTu8DWGS3bWTq
eLXLEuYx4BCFmGAwC4NYcwJS0XU4h/+1PoOrGBtvw+VSm8a6JAi9q5xUgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICUyzgw6P7svRivEfxZeKHw7spzMB8GA1UdIwQY
MBaAFMUb31MzessYsnaVLDV+kZgLzFsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJ2ZlV6TjZ5eGl5ZHBVc05YNlJtQXZNV3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84M2U1ZWEtOWZlNC00ODE0LTgzYzYt
MWJiNDMwNjA2NTM1LzEveFJ2ZlV6TjZ5eGl5ZHBVc05YNlJtQXZNV3d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84M2U1ZWEtOWZlNC00ODE0LTgzYzYtMWJiNDMwNjA2NTM1
LzEveFJ2ZlV6TjZ5eGl5ZHBVc05YNlJtQXZNV3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibeVeT1d
gUtegIqmnE5M4XCmaz3jB4ezYeXL85R9909EJ5PVvuhezUkfR6KIpFgjynBgLh0J
MvoYwfSqxB+Q1nFaZzCAINfQT/vWlYih0WHtZjUF7JBj2o/CESSwarQJe/bFjh/h
LVfnEu9yj/Pr1J9qgzNDu+Sx6NdRzoqg4O3WvbT/wpuSafYX6LvDUYS5GKpMrU9L
CW/CIXs4lfdFTy2o8uAKISAuHDH0qDCE5xddyqO7+9vR5F5COgXNUehMcyyKHXFI
S/w6MwLv3FXt8tHSOHYBq2TM6rhtf32zNRGKjGsmIykUjDPeaRWtAoZUL7fdpBt9
SDnTv85VxmjYqA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:44:59 2025 by rpki-client