Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft
File: XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft (raw, json)
Hash identifier: K+JO2864uDQmkGqWeMgaqU/j5lLgqjR/LOQfEW71rUA=
Subject key identifier: DB:7D:33:47:AE:10:F9:EC:5C:2B:61:58:1B:60:10:BF:1B:C7:AC:E4
Authority key identifier: 5D:D6:C1:38:4B:4A:4C:A5:01:DD:33:C5:F0:D8:58:0D:44:16:EB:3A
Certificate issuer: /CN=5dd6c1384b4a4ca501dd33c5f0d8580d4416eb3a
Certificate serial: 0194BD17F5D8409C52E894ED17302716600B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdbBOEtKTKUB3TPF8NhYDUQW6zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft
Manifest number: 0124
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: XdbBOEtKTKUB3TPF8NhYDUQW6zo.crl (hash: 0xyU2M90gUHhNT97Lngjq3DGBUZDJPZioTa9ZoxB8dg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f5:d8:40:9c:52:e8:94:ed:17:30:27:16:60:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6c1384b4a4ca501dd33c5f0d8580d4416eb3a
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=db7d3347ae10f9ec5c2b61581b6010bf1bc7ace4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:55:fa:ba:e8:45:6b:a0:76:b2:e3:01:ec:
93:87:ab:43:6d:aa:a4:1b:66:3c:64:4c:21:64:67:
ac:f5:31:7e:15:d0:7d:af:6a:a0:d5:88:4c:54:b7:
b0:1e:36:76:9c:0f:0b:0e:9e:35:e7:17:7e:7e:01:
32:80:6e:17:c8:aa:a9:82:18:ad:39:f2:87:e4:9b:
f1:4e:d2:a2:89:47:fb:fd:e5:d2:61:52:df:d0:df:
7e:f5:86:4a:4f:9a:95:38:bc:5f:9d:c7:3e:d3:e0:
ab:22:53:ca:86:c2:78:cf:4f:00:b4:20:95:15:cd:
ef:95:11:8a:21:a2:74:f2:87:3c:a0:e0:5b:0a:38:
b8:53:78:c9:29:d6:fb:01:09:98:6b:b3:23:39:82:
63:1a:98:43:a6:1a:d6:46:0c:ba:a2:61:d7:fa:0b:
4b:91:65:78:8d:2f:f6:a6:be:67:7e:e6:c8:ee:c4:
8c:e4:b6:3a:2b:2b:1f:90:f8:45:65:99:be:39:c1:
55:b5:6e:57:e5:39:08:d3:0e:2a:4e:93:b1:39:66:
99:32:9e:db:96:e0:27:fb:f1:c7:29:61:a9:3d:56:
56:68:b7:48:a6:b9:ab:73:ee:4a:02:eb:de:27:c8:
1f:3a:d9:40:2d:d0:fb:29:64:05:24:a8:a9:93:87:
69:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7D:33:47:AE:10:F9:EC:5C:2B:61:58:1B:60:10:BF:1B:C7:AC:E4
X509v3 Authority Key Identifier:
keyid:5D:D6:C1:38:4B:4A:4C:A5:01:DD:33:C5:F0:D8:58:0D:44:16:EB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdbBOEtKTKUB3TPF8NhYDUQW6zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:41:a1:e9:d8:0c:1c:3e:db:bd:b9:75:be:59:86:1a:ff:53:
9c:23:3b:ee:27:e4:a6:8a:8b:7d:a2:9a:1a:a1:72:59:5f:04:
2e:81:21:cd:08:4f:8e:59:e1:5b:04:48:9a:26:c7:d0:aa:30:
ca:8e:40:ba:59:69:91:80:50:0d:b7:a1:33:b2:aa:3b:36:3b:
0f:e4:d2:25:5c:64:f5:6e:83:be:46:66:1c:b1:7b:8e:63:df:
eb:6f:42:4d:e5:c3:4b:88:c5:ae:2f:a9:6f:ab:b4:1b:01:d3:
e7:df:71:d5:e7:b3:46:d9:5c:40:ca:b3:29:02:0f:dd:09:e1:
87:b4:d8:13:42:00:29:e5:4f:77:fc:c3:eb:87:f4:d9:43:63:
d5:24:66:0d:a0:97:e0:64:e6:f4:b6:70:0f:70:89:56:cb:5b:
d8:e2:ac:ce:05:8c:97:44:fe:26:4c:1a:0b:f9:b0:99:1e:60:
fb:3e:1a:b7:e0:ab:7b:c2:ab:86:28:14:54:63:5f:a9:3f:06:
85:28:8f:20:2a:d6:db:6d:f0:eb:80:eb:cd:b8:ca:37:fc:42:
98:e2:f5:78:2e:bf:7f:86:d4:61:92:cd:5f:ff:89:bd:6a:30:
af:30:cd:7b:3c:4a:f9:48:51:b2:98:4a:80:aa:cb:33:7c:27:
69:7e:d7:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/XYQJxS6JTtFzAnFmALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDZjMTM4NGI0YTRjYTUwMWRkMzNjNWYwZDg1ODBkNDQx
NmViM2EwHhcNMjUwMTMxMTYwMDUxWhcNMjUwMjAxMTYwMDUxWjAzMTEwLwYDVQQD
EyhkYjdkMzM0N2FlMTBmOWVjNWMyYjYxNTgxYjYwMTBiZjFiYzdhY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB1V+rroRWugdrLjAeyTh6tDbaqk
G2Y8ZEwhZGes9TF+FdB9r2qg1YhMVLewHjZ2nA8LDp415xd+fgEygG4XyKqpghit
OfKH5JvxTtKiiUf7/eXSYVLf0N9+9YZKT5qVOLxfncc+0+CrIlPKhsJ4z08AtCCV
Fc3vlRGKIaJ08oc8oOBbCji4U3jJKdb7AQmYa7MjOYJjGphDphrWRgy6omHX+gtL
kWV4jS/2pr5nfubI7sSM5LY6KysfkPhFZZm+OcFVtW5X5TkI0w4qTpOxOWaZMp7b
luAn+/HHKWGpPVZWaLdIprmrc+5KAuveJ8gfOtlALdD7KWQFJKipk4dp3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNt9M0euEPnsXCthWBtgEL8bx6zkMB8GA1UdIwQY
MBaAFF3WwThLSkylAd0zxfDYWA1EFus6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRiQk9FdEtUS1VCM1RQRjhOaFlEVVFXNnpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85MTU3YTktMDRiMC00MWJlLTljMjQt
ZDgyZDA2YTg3YmZlLzEvWGRiQk9FdEtUS1VCM1RQRjhOaFlEVVFXNnpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi85MTU3YTktMDRiMC00MWJlLTljMjQtZDgyZDA2YTg3YmZl
LzEvWGRiQk9FdEtUS1VCM1RQRjhOaFlEVVFXNnpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkGh6dgM
HD7bvbl1vlmGGv9TnCM77ifkpoqLfaKaGqFyWV8ELoEhzQhPjlnhWwRImibH0Kow
yo5AullpkYBQDbehM7KqOzY7D+TSJVxk9W6DvkZmHLF7jmPf629CTeXDS4jFri+p
b6u0GwHT599x1eezRtlcQMqzKQIP3Qnhh7TYE0IAKeVPd/zD64f02UNj1SRmDaCX
4GTm9LZwD3CJVstb2OKszgWMl0T+JkwaC/mwmR5g+z4at+Cre8KrhigUVGNfqT8G
hSiPICrW223w64DrzbjKN/xCmOL1eC6/f4bUYZLNX/+JvWowrzDNezxK+UhRsphK
gKrLM3wnaX7XeQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:02:14 2025 by rpki-client