Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
File: xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft (raw, json)
Hash identifier: 5Ri4Z3KothYagPz2M3u8LoEK8ktOsGbomxVGrKZ07t4=
Subject key identifier: CD:C4:3A:4F:7B:B0:8F:CF:25:C2:41:27:05:D6:79:74:DC:6D:2B:C0
Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Certificate serial: 0194BCE0D738EDBA0897814A459A3272BD02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
Manifest number: 1382
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: C3xZoR3LtseXs9YgZ15-hhPr18E.roa (hash: 1WbsEFbzKO5s8iSa/8CXV3aiHCeUKDOXCmds/8JgsxY=)
2: xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl (hash: 9QjwsKoOIii9zgOyn5wD71vM+C4u8PsXxMv9wviZI1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d7:38:ed:ba:08:97:81:4a:45:9a:32:72:bd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=cdc43a4f7bb08fcf25c2412705d67974dc6d2bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:5d:a0:fd:0f:79:9f:57:20:7d:93:8e:fc:
e6:71:4d:45:03:49:0d:e7:fc:d5:88:29:92:40:9e:
fc:4e:2d:79:83:69:ef:69:db:aa:be:42:3b:dd:57:
69:74:c0:d6:63:ed:1c:ef:c1:07:53:45:89:33:5a:
61:e8:40:e9:d3:41:95:e5:27:a7:6b:9d:8c:6c:8d:
fe:c0:7c:9e:69:2c:c1:04:94:77:df:e7:f6:e6:2c:
f1:d3:aa:5e:c7:3f:a3:2d:41:4b:e2:d5:20:a5:65:
9e:f4:97:d6:17:b3:a9:e5:ea:c7:ac:ed:43:09:d5:
ac:42:01:5b:79:43:ee:c7:e1:af:41:c4:a7:cc:27:
30:61:23:dd:d6:a1:c9:d1:72:b1:e2:c7:5b:8b:81:
da:43:ee:fa:f5:bd:84:8f:cc:26:06:fd:ad:18:48:
af:f9:7e:55:b2:36:b6:a9:bd:8a:89:4b:39:e0:2f:
ca:47:b8:4d:05:3f:9a:13:2c:3d:eb:f3:67:2c:f5:
54:3d:41:7a:4e:f5:f9:f0:a9:9d:94:e3:69:1f:86:
70:2d:c2:22:4e:93:c4:d3:8d:5e:ea:29:8d:1b:a6:
ce:c0:86:fd:31:4d:fd:ee:04:b5:70:ef:7e:e6:b9:
f9:70:3f:62:95:ea:af:53:b4:cc:3a:0a:bc:b2:5f:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C4:3A:4F:7B:B0:8F:CF:25:C2:41:27:05:D6:79:74:DC:6D:2B:C0
X509v3 Authority Key Identifier:
keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:4f:fb:6b:ac:76:9a:9b:38:9b:60:b8:43:a4:51:03:64:c7:
90:21:72:7a:0a:a3:c3:11:0e:72:67:d7:48:42:43:49:d7:08:
7b:9b:40:01:b1:68:a8:34:3d:f9:13:88:50:b7:26:bf:2f:90:
f2:af:8f:30:8c:58:55:bc:85:16:60:9d:31:7a:7a:dc:ff:ce:
fa:16:8d:6c:25:e0:87:8a:a8:3b:e8:ae:fd:07:73:c5:a8:f5:
29:4e:6c:0f:6e:a4:34:ab:06:c2:1e:fa:61:c7:53:d0:8e:0c:
de:b8:62:50:f4:5c:76:6a:47:49:3b:d2:9b:c6:b4:bf:b8:77:
aa:47:05:d3:74:4e:be:37:b5:0b:6f:3c:08:fd:ab:c1:6b:df:
88:7c:0c:2a:7d:e1:21:db:18:c6:9b:4e:df:ed:92:df:88:30:
e6:97:d6:f3:37:e7:d2:88:90:c3:1c:d3:15:ee:7d:03:1c:82:
43:eb:b7:2d:71:48:97:03:34:c9:e2:90:cf:05:1a:22:18:45:
a1:c5:62:db:51:3d:79:cd:3e:72:80:37:1d:ee:0a:53:b2:cc:
8d:8d:db:55:97:37:05:8c:b7:66:79:9b:fa:1b:91:32:ce:5f:
88:f1:5b:4f:88:87:11:e5:90:9a:03:db:48:94:7a:86:d7:76:
5a:93:db:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Nc47boIl4FKRZoycr0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MjVhZmI5Y2UzMzVlZWQzZTUzMTI4YjRhOWViMjVmYzQ5
NWQ2ZTAwHhcNMjUwMTMxMTUwMDM5WhcNMjUwMjAxMTUwMDM5WjAzMTEwLwYDVQQD
EyhjZGM0M2E0ZjdiYjA4ZmNmMjVjMjQxMjcwNWQ2Nzk3NGRjNmQyYmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR5doP0PeZ9XIH2TjvzmcU1FA0kN
5/zViCmSQJ78Ti15g2nvaduqvkI73VdpdMDWY+0c78EHU0WJM1ph6EDp00GV5Sen
a52MbI3+wHyeaSzBBJR33+f25izx06pexz+jLUFL4tUgpWWe9JfWF7Op5erHrO1D
CdWsQgFbeUPux+GvQcSnzCcwYSPd1qHJ0XKx4sdbi4HaQ+769b2Ej8wmBv2tGEiv
+X5Vsja2qb2KiUs54C/KR7hNBT+aEyw96/NnLPVUPUF6TvX58KmdlONpH4ZwLcIi
TpPE041e6imNG6bOwIb9MU397gS1cO9+5rn5cD9ileqvU7TMOgq8sl/APQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3EOk97sI/PJcJBJwXWeXTcbSvAMB8GA1UdIwQY
MBaAFMYlr7nOM17tPlMSi0qesl/EldbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGlXdnVjNHpYdTAtVXhLTFNwNnlYOFNWMXVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wZjliNTAtNDY4OS00Y2Q4LWFlNmQt
MTAwYzNlMWJlM2EyLzEveGlXdnVjNHpYdTAtVXhLTFNwNnlYOFNWMXVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8wZjliNTAtNDY4OS00Y2Q4LWFlNmQtMTAwYzNlMWJlM2Ey
LzEveGlXdnVjNHpYdTAtVXhLTFNwNnlYOFNWMXVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA00/7a6x2
mps4m2C4Q6RRA2THkCFyegqjwxEOcmfXSEJDSdcIe5tAAbFoqDQ9+ROIULcmvy+Q
8q+PMIxYVbyFFmCdMXp63P/O+haNbCXgh4qoO+iu/Qdzxaj1KU5sD26kNKsGwh76
YcdT0I4M3rhiUPRcdmpHSTvSm8a0v7h3qkcF03ROvje1C288CP2rwWvfiHwMKn3h
IdsYxptO3+2S34gw5pfW8zfn0oiQwxzTFe59AxyCQ+u3LXFIlwM0yeKQzwUaIhhF
ocVi21E9ec0+coA3He4KU7LMjY3bVZc3BYy3Znmb+huRMs5fiPFbT4iHEeWQmgPb
SJR6htd2WpPbPw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:05 2025 by rpki-client