Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
File: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft (raw, json)
Hash identifier: r5yPk+QancdSVUzzPNeSlnOpwjG2AhmzvIBe3m8iw6E=
Subject key identifier: D8:B6:50:F5:7E:9F:10:65:91:82:12:89:BD:2C:30:1C:1F:B2:C7:FD
Authority key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
Certificate issuer: /CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Certificate serial: 0194BCAA0B82F247A9BDEC012209DE9D03D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
Manifest number: 10DF
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl (hash: GZE2ejmubhSiPAFeVNw/ovJb6zh4fJCFL3XbbebqyDw=)
2: gbEdvQz4q0AdyM98MXiZjERkDX4.roa (hash: QnkSlwi1hREwXQkmvd9zqXoHe57V+gXhpktYubECCFM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0b:82:f2:47:a9:bd:ec:01:22:09:de:9d:03:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=d8b650f57e9f106591821289bd2c301c1fb2c7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:e5:ec:bd:e0:07:bc:ed:8f:42:e7:1c:52:
4e:6e:65:98:09:5d:40:61:48:1e:5d:26:c3:b7:1a:
13:b9:ef:6c:4c:da:87:6b:e4:93:17:65:9e:c7:0a:
22:93:fb:96:cf:9e:f3:7f:d9:6a:05:8f:d7:9f:9a:
ba:71:f4:8a:5c:88:a6:18:f3:d3:15:8a:4b:5b:50:
fd:0a:4a:bc:ce:f3:16:6d:2b:35:83:4a:eb:5b:e9:
f2:fc:86:5e:76:d7:49:ec:6a:4d:41:c3:30:77:3a:
73:47:4b:b9:81:30:78:aa:94:41:67:54:ac:49:16:
99:10:db:30:85:0a:3f:35:6f:fe:8e:51:df:cd:59:
fe:17:da:b4:4d:65:bf:c5:66:97:38:6d:31:f4:0f:
8a:4a:cd:ab:0a:9c:33:0e:47:4f:cf:0a:9d:8f:0d:
e3:b0:87:af:d1:ef:7c:64:d6:8e:6a:0e:80:a4:0a:
a3:0e:61:a3:45:4e:5a:0a:47:00:a4:6d:49:f5:ac:
23:6a:48:6e:58:05:fa:ba:e5:80:3d:bb:04:00:d7:
4c:50:0e:eb:02:37:5e:ad:fd:2f:62:62:8c:a7:92:
4a:51:56:12:8f:eb:c9:48:3a:8e:00:12:89:0b:0c:
55:39:5f:66:a0:43:1c:01:37:cb:0a:f9:25:bf:5d:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B6:50:F5:7E:9F:10:65:91:82:12:89:BD:2C:30:1C:1F:B2:C7:FD
X509v3 Authority Key Identifier:
keyid:5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c4:cf:c4:a5:26:87:33:b0:d1:ed:57:9f:93:e3:b4:ff:ac:
14:2a:96:d0:05:97:94:df:85:30:a3:22:37:0e:8e:83:75:85:
bf:25:68:5f:51:d8:a5:a8:e2:64:72:f7:52:75:4a:59:80:60:
4c:fb:cf:5d:60:27:87:89:8e:d9:a8:df:a9:9d:0e:57:52:48:
a0:07:24:6f:6c:13:0f:77:25:16:6c:0b:f7:77:7b:2e:3c:99:
0d:9f:68:05:c0:57:c0:6e:a6:cf:97:2a:60:7b:8a:ba:41:99:
d9:32:21:09:2d:a4:6e:f5:84:35:2a:80:af:55:b7:c7:2e:bd:
69:f1:0a:fd:d7:06:dd:27:c4:e5:7e:2e:90:6a:9e:15:19:be:
70:ae:68:6a:48:fd:a2:79:e5:73:27:12:9a:aa:26:cf:3b:44:
37:02:bd:97:e4:73:85:b4:70:16:84:36:91:ff:34:77:16:65:
60:e9:45:a6:8f:50:9d:e7:72:d5:8a:8c:2f:d7:e6:53:86:b3:
bf:59:c9:30:13:74:c4:e9:8e:e4:8f:ee:f3:7c:28:93:a3:0e:
49:2a:5e:f6:15:f2:d3:15:0a:95:48:0d:79:a0:10:78:7b:62:
74:37:de:6f:b7:18:46:d8:90:a0:2e:3c:e6:07:bd:bc:c4:e6:
d4:94:44:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qguC8kepvewBIgnenQPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlN2ZkOTU4NmY5Y2NiMGZiNDQ4N2IyMDhjZGY0Njc1ZTVi
YmYzMzAwHhcNMjUwMTMxMTQwMDQ4WhcNMjUwMjAxMTQwMDQ4WjAzMTEwLwYDVQQD
EyhkOGI2NTBmNTdlOWYxMDY1OTE4MjEyODliZDJjMzAxYzFmYjJjN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+Pl7L3gB7ztj0LnHFJObmWYCV1A
YUgeXSbDtxoTue9sTNqHa+STF2Wexwoik/uWz57zf9lqBY/Xn5q6cfSKXIimGPPT
FYpLW1D9Ckq8zvMWbSs1g0rrW+ny/IZedtdJ7GpNQcMwdzpzR0u5gTB4qpRBZ1Ss
SRaZENswhQo/NW/+jlHfzVn+F9q0TWW/xWaXOG0x9A+KSs2rCpwzDkdPzwqdjw3j
sIev0e98ZNaOag6ApAqjDmGjRU5aCkcApG1J9awjakhuWAX6uuWAPbsEANdMUA7r
Ajderf0vYmKMp5JKUVYSj+vJSDqOABKJCwxVOV9moEMcATfLCvklv13r2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNi2UPV+nxBlkYISib0sMBwfssf9MB8GA1UdIwQY
MBaAFF5/2VhvnMsPtEh7IIzfRnXlu/MwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5fWldHLWN5dy0wU0hzZ2pOOUdkZVc3OHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xNWU1M2QtNzBiMC00MjY4LTkxMjQt
NGIwMWQ2M2U3OTVjLzEvWG5fWldHLWN5dy0wU0hzZ2pOOUdkZVc3OHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8xNWU1M2QtNzBiMC00MjY4LTkxMjQtNGIwMWQ2M2U3OTVj
LzEvWG5fWldHLWN5dy0wU0hzZ2pOOUdkZVc3OHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArMTPxKUm
hzOw0e1Xn5PjtP+sFCqW0AWXlN+FMKMiNw6Og3WFvyVoX1HYpajiZHL3UnVKWYBg
TPvPXWAnh4mO2ajfqZ0OV1JIoAckb2wTD3clFmwL93d7LjyZDZ9oBcBXwG6mz5cq
YHuKukGZ2TIhCS2kbvWENSqAr1W3xy69afEK/dcG3SfE5X4ukGqeFRm+cK5oakj9
onnlcycSmqomzztENwK9l+RzhbRwFoQ2kf80dxZlYOlFpo9Qnedy1YqML9fmU4az
v1nJMBN0xOmO5I/u83wok6MOSSpe9hXy0xUKlUgNeaAQeHtidDfeb7cYRtiQoC48
5ge9vMTm1JREfA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:23 2025 by rpki-client