Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.mft
File: XzoD6voEyDkjvYaTJGGFDfX3gUY.mft (raw, json)
Hash identifier: R2vNb3KZrz8mpru4L0B7BenauulSlvEuu+sk6nzxnsw=
Subject key identifier: E1:66:52:24:DB:CA:E6:C7:C1:2E:3E:C8:F9:0E:EF:5E:4C:CE:83:8A
Authority key identifier: 5F:3A:03:EA:FA:04:C8:39:23:BD:86:93:24:61:85:0D:F5:F7:81:46
Certificate issuer: /CN=5f3a03eafa04c83923bd86932461850df5f78146
Certificate serial: 0194BD17DF73F0C7E85E36A6C7BB7906F953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzoD6voEyDkjvYaTJGGFDfX3gUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.mft
Manifest number: 1085
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: XzoD6voEyDkjvYaTJGGFDfX3gUY.crl (hash: 2p07r/guMeOm9OluNNr9ieNN3MaorhlTPopmlpCYSfE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:df:73:f0:c7:e8:5e:36:a6:c7:bb:79:06:f9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a03eafa04c83923bd86932461850df5f78146
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=e1665224dbcae6c7c12e3ec8f90eef5e4cce838a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0c:d1:52:85:77:de:1a:0a:62:87:55:7d:4a:
74:31:98:bd:5d:b4:da:d4:78:6b:72:51:45:72:e2:
91:3a:0e:4a:db:2f:d7:56:c7:1b:cf:63:54:ed:96:
94:35:8f:6c:27:3e:0a:58:74:d6:e0:69:cf:b4:6e:
b1:c2:1d:86:b7:ad:b8:68:a0:26:3a:c9:79:e3:49:
b5:9a:06:af:6a:be:f5:2e:a5:d9:9e:ac:c3:f0:fe:
f1:0d:dc:36:aa:6e:dd:c4:4b:22:ae:22:7e:ef:0c:
78:ee:a9:b2:86:66:f2:63:7f:fa:b1:3a:69:60:e1:
27:a7:bb:45:a2:a2:65:99:77:37:bd:50:27:86:4d:
fa:61:eb:14:23:c8:9a:98:83:d9:34:43:1d:9c:ad:
2e:09:1c:ad:c1:40:b6:a1:14:cc:f3:81:c1:f8:5f:
1c:fd:59:84:05:3f:07:7e:9e:24:ef:a8:bb:e9:51:
9f:f8:d4:e9:4d:11:00:8b:6d:d9:20:dd:3b:66:34:
89:3e:6a:f1:fb:1b:94:37:19:47:be:4d:2d:81:7f:
56:a9:c7:34:1f:64:89:f2:7b:75:e6:57:c9:ec:38:
a4:ef:bb:9a:0f:74:05:fa:c6:e3:08:c3:21:8d:fa:
f8:9e:f7:d3:60:2e:ad:1c:f3:59:d4:33:20:00:17:
83:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:66:52:24:DB:CA:E6:C7:C1:2E:3E:C8:F9:0E:EF:5E:4C:CE:83:8A
X509v3 Authority Key Identifier:
keyid:5F:3A:03:EA:FA:04:C8:39:23:BD:86:93:24:61:85:0D:F5:F7:81:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzoD6voEyDkjvYaTJGGFDfX3gUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:90:c1:fd:44:21:75:7b:2b:bc:4e:f7:93:52:fc:36:81:eb:
12:82:dd:ca:23:86:9e:69:70:b2:8d:41:3b:a5:d7:03:49:60:
9b:c2:8c:34:9a:ba:0d:07:73:2c:7b:f0:16:94:9c:2c:5a:60:
74:b9:24:c8:e3:1a:0e:b6:9c:3c:20:9d:39:78:8b:9c:42:7e:
9c:73:44:0c:74:bc:e3:e4:cb:82:fe:d6:d8:fa:80:7d:fb:d3:
88:d2:6f:0b:64:a0:22:b5:9d:3c:a1:11:73:55:78:f3:2c:ff:
74:9e:b1:71:e8:dc:a2:32:5c:41:c0:b0:09:f5:77:f3:67:83:
3c:86:16:6a:a4:9e:12:a5:b0:c5:2d:7a:b6:4e:97:5c:1d:b0:
b4:ba:b4:17:fd:bb:53:af:32:57:88:92:ad:5e:94:52:2d:e9:
72:11:f7:72:c2:57:60:08:ba:b6:93:d9:ea:74:80:0b:bb:65:
a4:c4:2a:be:c2:97:b8:33:8a:b0:25:30:9c:40:c8:15:74:c3:
a4:8b:53:55:04:58:7d:ce:34:56:40:37:16:7d:9a:bf:79:18:
12:42:70:03:bb:51:89:6f:55:8f:e5:4e:53:a5:86:84:e6:14:
87:42:91:4d:cb:d7:54:2c:8e:40:2e:ed:83:27:9d:4c:bf:70:
b9:c3:97:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F99z8MfoXjamx7t5BvlTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmM2EwM2VhZmEwNGM4MzkyM2JkODY5MzI0NjE4NTBkZjVm
NzgxNDYwHhcNMjUwMTMxMTYwMDQ1WhcNMjUwMjAxMTYwMDQ1WjAzMTEwLwYDVQQD
EyhlMTY2NTIyNGRiY2FlNmM3YzEyZTNlYzhmOTBlZWY1ZTRjY2U4MzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAzRUoV33hoKYodVfUp0MZi9XbTa
1HhrclFFcuKROg5K2y/XVscbz2NU7ZaUNY9sJz4KWHTW4GnPtG6xwh2Gt624aKAm
Osl540m1mgavar71LqXZnqzD8P7xDdw2qm7dxEsiriJ+7wx47qmyhmbyY3/6sTpp
YOEnp7tFoqJlmXc3vVAnhk36YesUI8iamIPZNEMdnK0uCRytwUC2oRTM84HB+F8c
/VmEBT8Hfp4k76i76VGf+NTpTREAi23ZIN07ZjSJPmrx+xuUNxlHvk0tgX9Wqcc0
H2SJ8nt15lfJ7Dik77uaD3QF+sbjCMMhjfr4nvfTYC6tHPNZ1DMgABeD9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFmUiTbyubHwS4+yPkO715MzoOKMB8GA1UdIwQY
MBaAFF86A+r6BMg5I72GkyRhhQ3194FGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHpvRDZ2b0V5RGtqdllhVEpHR0ZEZlgzZ1VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xYmFmZTEtNjk5Ni00ZGNmLTg3NTIt
ZDU0MGU4YjEzZjdkLzEvWHpvRDZ2b0V5RGtqdllhVEpHR0ZEZlgzZ1VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xYmFmZTEtNjk5Ni00ZGNmLTg3NTItZDU0MGU4YjEzZjdk
LzEvWHpvRDZ2b0V5RGtqdllhVEpHR0ZEZlgzZ1VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5DB/UQh
dXsrvE73k1L8NoHrEoLdyiOGnmlwso1BO6XXA0lgm8KMNJq6DQdzLHvwFpScLFpg
dLkkyOMaDracPCCdOXiLnEJ+nHNEDHS84+TLgv7W2PqAffvTiNJvC2SgIrWdPKER
c1V48yz/dJ6xcejcojJcQcCwCfV382eDPIYWaqSeEqWwxS16tk6XXB2wtLq0F/27
U68yV4iSrV6UUi3pchH3csJXYAi6tpPZ6nSAC7tlpMQqvsKXuDOKsCUwnEDIFXTD
pItTVQRYfc40VkA3Fn2av3kYEkJwA7tRiW9Vj+VOU6WGhOYUh0KRTcvXVCyOQC7t
gyedTL9wucOXAw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:47 2025 by rpki-client