Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json)
Hash identifier: 5DGssLij5g69ebJslJymtZXSILrKp0rO/BoKcdTu7JY=
Subject key identifier: 34:57:0C:B8:6F:4D:F9:A2:6C:0A:14:B4:66:58:CF:6B:70:EC:77:19
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 0194BD1748FB906E7F9D6CF8CAFFE62A6299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: 9AFjNACE2QU1U/NjhQ1LvDHjIfuFcuks8fy12fqzNmI=)
2: hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa (hash: lNR9K/eeK5h6bqGDhHsX+aTIDMdTknqLa5mK45GIX18=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:48:fb:90:6e:7f:9d:6c:f8:ca:ff:e6:2a:62:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=34570cb86f4df9a26c0a14b46658cf6b70ec7719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:46:db:4e:ca:43:40:c9:69:05:58:ab:66:eb:
6f:1b:45:05:50:0e:b9:01:ed:f8:62:9f:83:1c:85:
9e:15:3d:82:2f:da:b2:c6:9a:6d:08:fd:66:f2:03:
d2:0e:20:7e:41:ad:44:83:f5:08:98:ec:de:02:13:
e9:6c:4f:8f:4b:0e:9f:6f:2b:16:52:c7:dd:b7:70:
76:7a:c1:d1:c1:5d:70:2a:00:7a:94:2f:a2:6d:e5:
3c:59:eb:fc:6c:70:9d:25:60:e7:f7:1c:5f:3e:fd:
92:1f:1d:ba:c4:66:c1:14:2f:0e:45:bd:65:75:c1:
bc:5d:7b:8f:d3:4c:fc:62:af:61:72:e6:0c:76:8f:
ec:58:ae:eb:7a:ea:89:ed:a3:0d:dc:e8:89:59:8f:
a4:0e:88:15:88:a5:33:9a:f0:ff:28:7c:c5:8c:25:
f1:7b:2e:c1:2d:71:33:54:66:ca:8f:ca:ae:2a:fd:
26:e4:ab:da:32:34:bc:64:d1:77:6d:57:7b:19:a9:
23:57:15:91:9e:03:da:5f:67:f2:96:e6:1b:7f:07:
cf:0c:a9:9b:fe:19:2f:cd:a0:ab:d4:0c:88:57:99:
b9:5c:9a:a1:cd:9a:30:ee:34:61:a2:fc:67:d7:76:
63:aa:07:90:b9:f9:1f:14:08:ba:3d:56:dc:b7:65:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:57:0C:B8:6F:4D:F9:A2:6C:0A:14:B4:66:58:CF:6B:70:EC:77:19
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ad:2d:a3:4f:72:5d:c1:41:52:46:ea:3c:17:d9:a9:ca:1c:
1f:71:c2:ff:8d:cf:2d:8e:2f:c8:0d:a4:09:2b:44:21:f2:43:
c0:80:ce:62:f4:2c:9d:83:65:1c:bd:7b:89:bc:50:a5:1e:c3:
29:60:2b:4a:03:fd:05:bb:a3:db:6f:84:69:13:c1:f6:a3:d8:
c4:95:f3:eb:ab:6c:3e:f4:bd:a7:18:56:70:0d:12:2f:94:72:
0e:9d:f9:41:b9:25:b7:3e:e5:c9:80:7e:b3:36:ce:67:d5:8a:
a5:3c:71:4d:90:4e:fe:b4:5a:8c:06:82:40:76:c5:c1:0f:0b:
c3:1b:e5:54:10:b9:d9:0a:40:e0:3b:80:43:c5:39:d2:c8:c6:
3f:b3:b5:84:21:e6:8f:4d:6a:cc:77:6a:f9:29:1c:3d:46:c8:
ba:0a:6e:38:1f:86:d1:6e:fa:a1:04:36:7b:5b:53:62:37:95:
13:a4:02:7f:53:48:73:d7:6f:da:15:61:ae:69:37:1c:6f:f0:
25:6f:cb:3f:9d:5a:a6:9c:a5:3d:10:4c:de:06:70:08:5f:f9:
25:c9:53:6a:b5:c2:a8:de:35:7b:d7:d5:44:ef:06:83:89:0a:
a9:b9:48:d0:d3:54:04:8c:3e:42:13:2e:f6:94:2a:26:77:d4:
11:d4:f9:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F0j7kG5/nWz4yv/mKmKZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMWJhNDAwMDdjY2RjZDA5MzBmMWEyYmRjNGIwMmUyOTk0
NTc2N2EwHhcNMjUwMTMxMTYwMDA3WhcNMjUwMjAxMTYwMDA3WjAzMTEwLwYDVQQD
EygzNDU3MGNiODZmNGRmOWEyNmMwYTE0YjQ2NjU4Y2Y2YjcwZWM3NzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EbbTspDQMlpBVirZutvG0UFUA65
Ae34Yp+DHIWeFT2CL9qyxpptCP1m8gPSDiB+Qa1Eg/UImOzeAhPpbE+PSw6fbysW
Usfdt3B2esHRwV1wKgB6lC+ibeU8Wev8bHCdJWDn9xxfPv2SHx26xGbBFC8ORb1l
dcG8XXuP00z8Yq9hcuYMdo/sWK7reuqJ7aMN3OiJWY+kDogViKUzmvD/KHzFjCXx
ey7BLXEzVGbKj8quKv0m5KvaMjS8ZNF3bVd7GakjVxWRngPaX2fyluYbfwfPDKmb
/hkvzaCr1AyIV5m5XJqhzZow7jRhovxn13ZjqgeQufkfFAi6PVbct2WqfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRXDLhvTfmibAoUtGZYz2tw7HcZMB8GA1UdIwQY
MBaAFP8bpAAHzNzQkw8aK9xLAuKZRXZ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3h1a0FBZk0zTkNURHhvcjNFc0M0cGxGZG5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8wNjA3MjAtNzMyMC00OWI1LTg5YWIt
OGQyYTY1M2JhOTk5LzEvX3h1a0FBZk0zTkNURHhvcjNFc0M0cGxGZG5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8wNjA3MjAtNzMyMC00OWI1LTg5YWItOGQyYTY1M2JhOTk5
LzEvX3h1a0FBZk0zTkNURHhvcjNFc0M0cGxGZG5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApa0to09y
XcFBUkbqPBfZqcocH3HC/43PLY4vyA2kCStEIfJDwIDOYvQsnYNlHL17ibxQpR7D
KWArSgP9Bbuj22+EaRPB9qPYxJXz66tsPvS9pxhWcA0SL5RyDp35Qbkltz7lyYB+
szbOZ9WKpTxxTZBO/rRajAaCQHbFwQ8LwxvlVBC52QpA4DuAQ8U50sjGP7O1hCHm
j01qzHdq+SkcPUbIugpuOB+G0W76oQQ2e1tTYjeVE6QCf1NIc9dv2hVhrmk3HG/w
JW/LP51appylPRBM3gZwCF/5JclTarXCqN41e9fVRO8Gg4kKqblI0NNUBIw+QhMu
9pQqJnfUEdT5yg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:51 2025 by rpki-client