Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
File: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft (raw, json)
Hash identifier: SxvOkeAeYLQbjjougJp7uwdmCO9Jrz5TS1k0ArIrTVU=
Subject key identifier: 48:D5:B4:17:BB:D9:77:69:FE:C5:66:52:78:3B:8F:92:29:19:6C:86
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 0194BCE0A0F314762BD8872EF1B3E032274F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: 1-eNX-zOFtjFclCSH0mTJdCSae98.roa (hash: M30Jnhsr3n3FbZbY3hov7cmuQb2xUsoReMhqFsTONps=)
2: MsrjwPiofwRbqxLYk1Ga7WSIbIA.roa (hash: IMwhFKCuLtTRw4YQ2OqrJF8QQPbmc6DZSTTcYhHXS88=)
3: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl (hash: fmytJVqV/efc7kB+bPsXTxECUx6n/nU3ljfk9AFO7e4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a0:f3:14:76:2b:d8:87:2e:f1:b3:e0:32:27:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=48d5b417bbd97769fec56652783b8f9229196c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ce:7f:d0:f6:f7:9f:78:5d:47:bd:17:ee:16:
19:26:12:d3:12:5f:4d:a5:2d:aa:5d:e7:87:d3:e9:
4c:d4:a7:97:a4:e3:99:1a:97:13:b4:20:44:53:34:
1e:43:5b:41:9f:30:ef:0c:b9:ec:bb:96:5f:4b:29:
19:0c:9e:0b:ba:47:46:8d:18:43:05:9d:a2:f0:f6:
5a:d3:41:89:7b:58:32:a6:2d:98:81:9e:89:4e:9e:
6a:cc:48:1c:d0:d6:06:8e:37:6e:9a:f8:b5:70:57:
93:cd:81:96:40:fd:23:56:a6:7f:f5:83:fa:62:57:
5e:6a:12:23:aa:04:95:6e:60:82:21:1e:fe:5c:ac:
c3:49:b8:3c:a2:0e:03:c3:c5:d3:1b:39:97:9c:57:
40:84:3e:09:f2:46:f3:68:90:a0:f6:fd:b9:55:1f:
db:8e:86:8f:d8:61:ba:49:4f:a1:7e:97:c4:63:84:
80:bb:89:fe:94:1f:8a:5c:f7:cf:43:6c:ba:cd:b8:
18:36:94:9f:8e:f2:5f:fb:a7:03:65:88:e0:d4:7e:
80:8e:d1:6d:04:62:d4:26:63:65:c2:16:53:51:fd:
71:47:1a:eb:4f:ba:03:c7:72:41:76:86:cc:33:59:
0a:af:e0:9e:a4:04:25:11:c8:cb:cf:fe:2f:d5:fd:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D5:B4:17:BB:D9:77:69:FE:C5:66:52:78:3B:8F:92:29:19:6C:86
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:12:ee:e7:06:1f:11:36:fb:72:42:24:41:84:ae:f2:46:6f:
ff:bf:9b:3b:fb:72:70:36:21:4e:dc:79:66:dc:37:07:28:45:
6d:fd:cc:36:ed:d9:52:fa:66:b8:61:96:09:a8:5f:84:a7:0b:
cf:2d:90:37:96:43:ae:ac:85:05:30:f6:7c:07:3d:a3:d4:eb:
13:7d:b2:f9:a5:f3:db:46:d7:b4:da:0b:7c:17:50:af:f2:2c:
d3:40:ed:5d:01:d7:d2:aa:2a:70:84:ac:55:71:c1:f1:5c:b0:
8b:5f:e2:7e:a6:4b:85:c0:2b:8a:34:e6:7c:4d:6f:b3:95:4d:
1e:f4:83:3a:0c:f1:a3:02:2f:d9:9b:5c:e4:81:87:a5:77:11:
4f:ca:2f:80:d7:d7:98:18:68:8c:3c:91:bd:1a:27:a5:2f:0b:
d3:3f:59:ce:07:28:fe:73:e6:8a:2a:0b:e3:23:c3:c6:9e:a0:
b9:c2:6f:07:91:b7:a9:67:95:0e:5c:a9:1e:61:60:d8:aa:d2:
15:24:31:a8:a7:e7:eb:d6:f8:79:9d:32:76:d1:59:83:e9:32:
12:3d:d0:76:ba:26:bd:b0:dc:9a:62:f2:a3:28:78:fd:e1:93:
17:f8:3e:bd:36:1e:ec:66:3e:e5:84:01:69:9b:ea:71:f8:43:
b6:3e:78:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KDzFHYr2Icu8bPgMidPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNWQ4Njk3NGE3YjYyNDE5MmVjOGQ4MzRjZjI5MDZlMTMw
MmU0MzEwHhcNMjUwMTMxMTUwMDI1WhcNMjUwMjAxMTUwMDI1WjAzMTEwLwYDVQQD
Eyg0OGQ1YjQxN2JiZDk3NzY5ZmVjNTY2NTI3ODNiOGY5MjI5MTk2Yzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh85/0Pb3n3hdR70X7hYZJhLTEl9N
pS2qXeeH0+lM1KeXpOOZGpcTtCBEUzQeQ1tBnzDvDLnsu5ZfSykZDJ4LukdGjRhD
BZ2i8PZa00GJe1gypi2YgZ6JTp5qzEgc0NYGjjdumvi1cFeTzYGWQP0jVqZ/9YP6
YldeahIjqgSVbmCCIR7+XKzDSbg8og4Dw8XTGzmXnFdAhD4J8kbzaJCg9v25VR/b
joaP2GG6SU+hfpfEY4SAu4n+lB+KXPfPQ2y6zbgYNpSfjvJf+6cDZYjg1H6AjtFt
BGLUJmNlwhZTUf1xRxrrT7oDx3JBdobMM1kKr+CepAQlEcjLz/4v1f1yYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjVtBe72Xdp/sVmUng7j5IpGWyGMB8GA1UdIwQY
MBaAFFxdhpdKe2JBkuyNg0zykG4TAuQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEYyR2wwcDdZa0dTN0kyRFRQS1FiaE1DNURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mNTViNTctZWNiYS00ZDNkLTlhODEt
YmQ4MDJmYzRhYTk0LzEvWEYyR2wwcDdZa0dTN0kyRFRQS1FiaE1DNURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mNTViNTctZWNiYS00ZDNkLTlhODEtYmQ4MDJmYzRhYTk0
LzEvWEYyR2wwcDdZa0dTN0kyRFRQS1FiaE1DNURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxLu5wYf
ETb7ckIkQYSu8kZv/7+bO/tycDYhTtx5Ztw3ByhFbf3MNu3ZUvpmuGGWCahfhKcL
zy2QN5ZDrqyFBTD2fAc9o9TrE32y+aXz20bXtNoLfBdQr/Is00DtXQHX0qoqcISs
VXHB8Vywi1/ifqZLhcArijTmfE1vs5VNHvSDOgzxowIv2Ztc5IGHpXcRT8ovgNfX
mBhojDyRvRonpS8L0z9Zzgco/nPmiioL4yPDxp6gucJvB5G3qWeVDlypHmFg2KrS
FSQxqKfn69b4eZ0ydtFZg+kyEj3QdromvbDcmmLyoyh4/eGTF/g+vTYe7GY+5YQB
aZvqcfhDtj54Cg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:14 2025 by rpki-client