Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
File: p_xcZck6dAQIaxelTn4NqWCpspM.mft (raw, json)
Hash identifier: xcEKXHcovrJwfmZQSX1xH0lMRn6BjVQKAhE0F62Lx1Y=
Subject key identifier: 80:29:CC:3E:B3:FD:8B:9B:F0:73:8A:4B:1F:03:D1:2D:94:D2:7C:84
Authority key identifier: A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
Certificate issuer: /CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Certificate serial: 0194BC3C1E1F8C4842B9E6533C2F6AEBF7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
Manifest number: 0FAD
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: 8-SPB1FRD1dqgSwieEEafk1GdQA.roa (hash: vazRE5ylOn6vVMnXFU4rXRZh7sO8QjAU8zOnvhOztXo=)
2: p_xcZck6dAQIaxelTn4NqWCpspM.crl (hash: OevOLjIbr7MbCvzCM9GSesVi0rvyeaUuaZBtSgnW5d8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1e:1f:8c:48:42:b9:e6:53:3c:2f:6a:eb:f7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=8029cc3eb3fd8b9bf0738a4b1f03d12d94d27c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:be:45:71:0a:9f:5c:c3:cd:c5:fe:b8:ec:
71:69:79:86:2b:2e:8a:97:27:45:d8:d7:54:42:a6:
05:fa:d8:67:b8:d6:31:70:da:5b:c0:24:b7:2f:d9:
c8:12:dd:6b:16:3d:e2:8b:42:f7:44:ec:51:de:92:
36:b1:ab:a5:f9:cb:41:43:be:1d:9e:7e:ea:57:cd:
da:e4:be:e2:0b:9c:ac:66:db:89:7f:c7:58:62:3f:
12:1e:34:53:0d:9b:e0:39:74:af:13:fd:bc:73:92:
05:8d:e5:5e:a0:36:f0:eb:d4:17:44:12:49:71:85:
50:5b:92:b1:97:be:cc:d0:6c:bf:54:e3:39:aa:1a:
ab:7d:31:75:9d:b6:b5:10:c0:d6:17:fe:2f:11:bb:
ec:26:5e:8a:d2:04:41:94:1c:a8:3f:6f:d9:16:19:
15:37:f6:dd:8e:45:c9:6f:17:26:29:ca:be:33:6f:
76:9f:a0:fe:91:60:f5:42:a6:cf:4b:e8:70:40:df:
47:61:76:c7:7d:8b:cd:fc:6d:18:8c:15:32:22:30:
a7:0b:83:f9:c0:c8:29:d5:18:50:0d:bb:8c:5c:d3:
36:8b:ac:e4:5e:11:1d:86:32:54:26:40:5d:99:81:
54:b2:ba:a0:50:2d:6d:42:07:75:be:09:b2:2c:d8:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:29:CC:3E:B3:FD:8B:9B:F0:73:8A:4B:1F:03:D1:2D:94:D2:7C:84
X509v3 Authority Key Identifier:
keyid:A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0f:6f:f6:4d:e6:4c:14:4b:e4:75:89:65:43:47:61:c8:bb:
ac:ee:8a:30:46:28:fa:b2:4a:ee:50:99:27:fe:ac:80:2c:c7:
e2:41:f8:83:ff:2f:dd:f7:f2:f5:f2:4d:b3:ce:10:54:c3:7a:
3d:15:ac:61:7a:f2:74:e0:dc:65:1b:c8:a8:0d:44:0f:54:6c:
52:23:da:73:db:22:5d:19:30:65:87:fb:d2:a2:f4:08:a4:cb:
9d:97:45:59:54:a4:58:df:eb:cb:fd:61:7d:be:89:68:c9:74:
05:c9:ad:61:61:39:30:52:b2:aa:7b:71:44:81:ed:95:9a:1e:
7e:40:d8:ea:68:ee:d6:f6:13:6a:0d:84:2f:5d:64:02:26:d1:
17:13:f3:56:85:21:f6:d3:a2:31:98:7d:32:5e:d7:d1:45:64:
34:42:03:91:b4:dd:ba:b2:40:a5:b2:7e:a3:07:6b:c2:a3:7d:
f7:35:52:12:40:dd:5a:70:10:8b:0d:d5:ed:88:2a:f8:2a:37:
9c:79:22:2a:19:38:3d:06:c4:9e:eb:15:19:bf:7d:86:e3:53:
73:21:b1:69:f2:94:f4:c6:0f:74:7c:57:fe:94:40:df:b3:de:
7b:23:ff:5b:f2:09:01:4b:74:e5:01:60:46:78:6e:09:1b:b3:
00:b5:4c:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PB4fjEhCueZTPC9q6/f3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZmM1YzY1YzkzYTc0MDQwODZiMTdhNTRlN2UwZGE5NjBh
OWIyOTMwHhcNMjUwMTMxMTIwMDQzWhcNMjUwMjAxMTIwMDQzWjAzMTEwLwYDVQQD
Eyg4MDI5Y2MzZWIzZmQ4YjliZjA3MzhhNGIxZjAzZDEyZDk0ZDI3Yzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mm+RXEKn1zDzcX+uOxxaXmGKy6K
lydF2NdUQqYF+thnuNYxcNpbwCS3L9nIEt1rFj3ii0L3ROxR3pI2saul+ctBQ74d
nn7qV83a5L7iC5ysZtuJf8dYYj8SHjRTDZvgOXSvE/28c5IFjeVeoDbw69QXRBJJ
cYVQW5Kxl77M0Gy/VOM5qhqrfTF1nba1EMDWF/4vEbvsJl6K0gRBlByoP2/ZFhkV
N/bdjkXJbxcmKcq+M292n6D+kWD1QqbPS+hwQN9HYXbHfYvN/G0YjBUyIjCnC4P5
wMgp1RhQDbuMXNM2i6zkXhEdhjJUJkBdmYFUsrqgUC1tQgd1vgmyLNiSfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIApzD6z/Yub8HOKSx8D0S2U0nyEMB8GA1UdIwQY
MBaAFKf8XGXJOnQECGsXpU5+DalgqbKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF94Y1pjazZkQVFJYXhlbFRuNE5xV0Nwc3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84ZmNiMTItYWU0ZS00MzUzLWEzYjkt
ZjBhZDM3NWE4MDg2LzEvcF94Y1pjazZkQVFJYXhlbFRuNE5xV0Nwc3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84ZmNiMTItYWU0ZS00MzUzLWEzYjktZjBhZDM3NWE4MDg2
LzEvcF94Y1pjazZkQVFJYXhlbFRuNE5xV0Nwc3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXw9v9k3m
TBRL5HWJZUNHYci7rO6KMEYo+rJK7lCZJ/6sgCzH4kH4g/8v3ffy9fJNs84QVMN6
PRWsYXrydODcZRvIqA1ED1RsUiPac9siXRkwZYf70qL0CKTLnZdFWVSkWN/ry/1h
fb6JaMl0BcmtYWE5MFKyqntxRIHtlZoefkDY6mju1vYTag2EL11kAibRFxPzVoUh
9tOiMZh9Ml7X0UVkNEIDkbTdurJApbJ+owdrwqN99zVSEkDdWnAQiw3V7Ygq+Co3
nHkiKhk4PQbEnusVGb99huNTcyGxafKU9MYPdHxX/pRA37PeeyP/W/IJAUt05QFg
RnhuCRuzALVM5w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:37 2025 by rpki-client