Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
File: xVoeQFH2j-i3IOg92tM7dlHLfvk.mft (raw, json)
Hash identifier: ihuX4YmiG/VlZO9obelzLKWRr1bxBXuLmKsEOlFeteU=
Subject key identifier: 3A:DC:46:C4:46:5D:B5:82:37:5A:2E:64:72:F2:A5:BB:2D:1E:70:05
Authority key identifier: C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
Certificate issuer: /CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Certificate serial: 0194BCAA1FD618CF200A9D8009488152D9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
Manifest number: 0AAC
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: ZCz_B_c4Ab7TJ-Wdj6CNbe4vJM8.roa (hash: GKBVpj9NFqT4kWPy6LEsdkgiDMQ6Chmhcoso+7TmqfM=)
2: xVoeQFH2j-i3IOg92tM7dlHLfvk.crl (hash: vCAaNNvruMYfWsB3UND8QI9TAoJwaa2Lly630sqo2b8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1f:d6:18:cf:20:0a:9d:80:09:48:81:52:d9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=3adc46c4465db582375a2e6472f2a5bb2d1e7005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:cc:ba:6f:65:3f:e8:fc:22:3d:93:1e:11:
6c:62:ee:5a:5d:dc:22:f7:a6:e4:33:33:df:23:bc:
25:be:6c:f8:8f:09:a4:92:ad:b7:10:ee:50:76:76:
ab:f7:25:b7:4f:0c:f7:b8:7b:2a:d7:7a:91:57:6f:
27:6e:38:3c:20:fd:25:0b:e6:27:c3:5d:f5:2e:e4:
be:68:4c:bd:6d:01:b8:58:0c:04:18:21:14:a3:c6:
1f:d2:b9:a8:89:a7:5a:83:ee:e3:0d:0e:c2:5c:42:
63:d5:6b:97:e3:68:3f:b3:b7:81:29:f3:f9:83:eb:
1d:ff:1c:8f:f0:58:d0:82:52:58:4f:77:80:bf:cb:
08:e6:6b:0f:37:4b:3f:bb:16:da:1f:15:e3:e7:32:
1c:64:7f:1c:68:3d:c4:55:13:78:e4:bd:71:c3:30:
8b:6a:0f:e0:96:d1:a6:55:8d:34:8d:9f:e0:fc:ec:
7d:6b:c3:4e:6e:89:44:12:ae:7a:d1:64:7b:e5:e1:
82:25:54:59:89:c9:08:47:8e:82:a6:74:e0:11:67:
5a:b7:fd:e4:72:fa:a9:0f:9e:25:f1:0a:68:0d:19:
92:53:0c:d1:b6:58:74:5f:a7:16:20:c7:e6:fb:57:
66:43:0c:ea:03:12:71:df:dc:2d:50:71:03:2f:12:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DC:46:C4:46:5D:B5:82:37:5A:2E:64:72:F2:A5:BB:2D:1E:70:05
X509v3 Authority Key Identifier:
keyid:C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:03:8f:c6:96:d8:59:89:24:e4:a3:1c:fe:bd:6b:65:64:3f:
1b:1c:89:3b:a2:83:ae:d1:08:94:83:d3:f0:fa:88:84:cf:f8:
6c:a0:91:1e:ce:7a:fa:4f:11:ff:4b:92:e6:e7:6b:3a:49:6d:
ea:8f:91:56:3e:2b:4b:4b:46:88:0d:d6:35:c4:39:f5:34:6c:
65:61:f2:e9:8c:fd:e1:af:08:e8:99:13:64:0c:f1:17:f8:06:
da:19:5c:d3:22:29:14:8d:79:f3:be:63:4d:11:8e:b2:b1:04:
75:22:44:14:60:ad:4b:af:eb:aa:66:a8:9f:7a:91:65:c9:86:
8e:da:17:7e:d9:7f:95:7f:c4:14:58:c3:7c:33:3c:84:09:ae:
bb:7e:21:1a:69:06:90:99:78:90:b6:01:d8:fd:1f:c9:06:64:
34:db:af:3c:34:49:5f:2b:24:83:41:47:61:bf:9e:49:2d:a7:
92:7c:8f:13:0c:0e:18:be:06:83:aa:e6:45:c0:ff:31:d4:e9:
65:64:3c:be:f0:6d:d9:35:24:1c:81:20:18:28:5f:a9:83:9e:
d9:56:ab:b4:c6:ac:0f:bb:19:4f:43:1d:51:85:46:9a:1b:b6:
ea:18:08:ef:5e:a6:d1:74:73:6e:a6:86:5b:69:d6:5e:90:9b:
87:bf:bf:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qh/WGM8gCp2ACUiBUtnYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NWExZTQwNTFmNjhmZThiNzIwZTgzZGRhZDMzYjc2NTFj
YjdlZjkwHhcNMjUwMTMxMTQwMDUzWhcNMjUwMjAxMTQwMDUzWjAzMTEwLwYDVQQD
EygzYWRjNDZjNDQ2NWRiNTgyMzc1YTJlNjQ3MmYyYTViYjJkMWU3MDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwHMum9lP+j8Ij2THhFsYu5aXdwi
96bkMzPfI7wlvmz4jwmkkq23EO5Qdnar9yW3Twz3uHsq13qRV28nbjg8IP0lC+Yn
w131LuS+aEy9bQG4WAwEGCEUo8Yf0rmoiadag+7jDQ7CXEJj1WuX42g/s7eBKfP5
g+sd/xyP8FjQglJYT3eAv8sI5msPN0s/uxbaHxXj5zIcZH8caD3EVRN45L1xwzCL
ag/gltGmVY00jZ/g/Ox9a8NObolEEq560WR75eGCJVRZickIR46CpnTgEWdat/3k
cvqpD54l8QpoDRmSUwzRtlh0X6cWIMfm+1dmQwzqAxJx39wtUHEDLxJWHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrcRsRGXbWCN1ouZHLypbstHnAFMB8GA1UdIwQY
MBaAFMVaHkBR9o/otyDoPdrTO3ZRy375MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNTUzMzItYmFjYy00YjBmLWIxNmYt
MDNkYTdlNzRkY2FkLzEveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mNTUzMzItYmFjYy00YjBmLWIxNmYtMDNkYTdlNzRkY2Fk
LzEveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQOPxpbY
WYkk5KMc/r1rZWQ/GxyJO6KDrtEIlIPT8PqIhM/4bKCRHs56+k8R/0uS5udrOklt
6o+RVj4rS0tGiA3WNcQ59TRsZWHy6Yz94a8I6JkTZAzxF/gG2hlc0yIpFI15875j
TRGOsrEEdSJEFGCtS6/rqmaon3qRZcmGjtoXftl/lX/EFFjDfDM8hAmuu34hGmkG
kJl4kLYB2P0fyQZkNNuvPDRJXyskg0FHYb+eSS2nknyPEwwOGL4Gg6rmRcD/MdTp
ZWQ8vvBt2TUkHIEgGChfqYOe2VartMasD7sZT0MdUYVGmhu26hgI716m0XRzbqaG
W2nWXpCbh7+/LA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:10 2025 by rpki-client