Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
File: xk0ihrXMe-Qviuuutqrlfnzn2is.mft (raw, json)
Hash identifier: F9DgwFa5PxAyOjbCCEBTV29Jhe1CTyhcrb3odSwcSEI=
Subject key identifier: 56:EC:99:B1:1D:86:3F:7F:36:59:77:42:86:31:75:AC:2F:15:59:2E
Authority key identifier: C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
Certificate issuer: /CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Certificate serial: 0194BD17CDA28A3540A6971D04DF57B4AF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
Manifest number: 112B
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: kR9L0FG1sHus996EjzOxHeu0FXE.roa (hash: UCFmwyRMlD4Wx3VXNW0aEuOECURhEH5R/h4nsdT+Qoc=)
2: xk0ihrXMe-Qviuuutqrlfnzn2is.crl (hash: dFyaOlrbQYNOVMN5uiIBpS83MfgtsEDk4bKdJgsWed0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cd:a2:8a:35:40:a6:97:1d:04:df:57:b4:af:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=56ec99b11d863f7f36597742863175ac2f15592e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:5d:98:7e:f6:61:a5:1e:8c:6f:0f:8b:7a:
81:39:34:f1:b5:85:02:f9:42:16:b8:ba:bb:b9:82:
d8:6c:5b:26:ca:d3:7b:81:02:2a:14:de:b6:c0:9e:
aa:4d:ad:49:fd:fb:0e:58:49:52:e7:78:e9:80:d2:
f7:33:cd:18:05:74:ce:f7:20:41:3a:c5:83:fc:c2:
c1:9d:36:d5:1d:99:d6:ee:f3:5d:5c:29:4b:35:35:
be:5c:d2:2b:ae:bc:b9:64:59:d7:1f:66:0d:8b:19:
f4:80:9e:ab:ef:29:a0:22:42:a4:12:c4:b2:d0:32:
09:6b:b5:a0:0e:96:f8:81:6b:c0:93:a4:58:21:48:
ca:ba:98:b8:1a:75:8d:f7:ae:cb:c4:85:c1:6a:9d:
88:9c:e6:85:59:d5:87:6c:cf:07:fe:9d:b7:de:51:
27:c9:d7:7b:d6:c8:e4:2e:7c:f4:87:3d:1a:2f:de:
ba:39:d2:56:3e:8b:5d:65:cf:b2:7f:a3:e6:a8:83:
18:9f:01:0d:5d:ce:05:86:bd:06:42:02:8e:ab:90:
65:f3:ab:40:29:3f:2b:3f:cf:9e:55:ba:4c:19:2a:
87:29:82:4c:5c:e1:f9:39:ca:0a:4f:85:71:76:12:
1a:a0:c7:e8:75:e2:89:b2:d6:2c:69:b0:f5:19:42:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EC:99:B1:1D:86:3F:7F:36:59:77:42:86:31:75:AC:2F:15:59:2E
X509v3 Authority Key Identifier:
keyid:C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:67:64:a6:c2:39:e1:d8:28:ea:03:3b:d7:53:7a:18:5b:f2:
27:59:c9:88:43:46:07:dc:e8:ed:2b:87:2c:bd:49:c2:03:e3:
5e:7c:37:6a:ed:3d:78:b1:6a:dd:04:2b:54:61:6e:cb:03:2a:
ae:05:e3:01:2e:8e:f6:a3:16:1c:21:54:2d:74:7f:55:6b:a4:
b1:6c:c6:20:2e:4e:4f:47:f5:13:b9:d4:4a:91:05:68:ce:0c:
68:f9:8d:39:f1:bc:4c:2c:a2:49:0c:7a:c9:ef:aa:83:cd:8e:
71:c8:34:33:17:77:3b:32:44:9a:77:4a:38:f5:ea:a9:05:06:
5b:9b:2d:0b:26:5d:e3:1f:b8:1a:54:a7:7d:3d:64:d2:8a:82:
58:bb:03:56:90:dc:90:f0:53:5c:65:4a:c6:07:90:be:f0:6d:
24:33:a5:65:d9:5b:dc:48:fb:23:65:7e:1b:31:32:34:db:bd:
b1:7f:6f:05:52:28:67:75:e2:d3:aa:9c:78:c4:7e:31:91:11:
7a:4b:e5:67:ae:c1:a4:4b:d6:96:d6:bf:75:7f:28:d1:79:b0:
6f:e0:87:22:01:df:e8:0c:6c:15:12:5a:36:cc:2d:b8:50:c6:
64:03:34:d4:ad:81:ef:e5:30:b8:1b:11:60:3a:1d:3f:77:52:
b4:8e:19:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F82iijVAppcdBN9XtK8MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NGQyMjg2YjVjYzdiZTQyZjhhZWJhZWI2YWFlNTdlN2Nl
N2RhMmIwHhcNMjUwMTMxMTYwMDQxWhcNMjUwMjAxMTYwMDQxWjAzMTEwLwYDVQQD
Eyg1NmVjOTliMTFkODYzZjdmMzY1OTc3NDI4NjMxNzVhYzJmMTU1OTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8BdmH72YaUejG8Pi3qBOTTxtYUC
+UIWuLq7uYLYbFsmytN7gQIqFN62wJ6qTa1J/fsOWElS53jpgNL3M80YBXTO9yBB
OsWD/MLBnTbVHZnW7vNdXClLNTW+XNIrrry5ZFnXH2YNixn0gJ6r7ymgIkKkEsSy
0DIJa7WgDpb4gWvAk6RYIUjKupi4GnWN967LxIXBap2InOaFWdWHbM8H/p233lEn
ydd71sjkLnz0hz0aL966OdJWPotdZc+yf6PmqIMYnwENXc4Fhr0GQgKOq5Bl86tA
KT8rP8+eVbpMGSqHKYJMXOH5OcoKT4VxdhIaoMfodeKJstYsabD1GUK06wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbsmbEdhj9/Nll3QoYxdawvFVkuMB8GA1UdIwQY
MBaAFMZNIoa1zHvkL4rrrraq5X5859orMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGswaWhyWE1lLVF2aXV1dXRxcmxmbnpuMmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hM2MwNTUtYjI1YS00MjVmLThkOTkt
ZTVhNzAwM2UxMGRlLzEveGswaWhyWE1lLVF2aXV1dXRxcmxmbnpuMmlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hM2MwNTUtYjI1YS00MjVmLThkOTktZTVhNzAwM2UxMGRl
LzEveGswaWhyWE1lLVF2aXV1dXRxcmxmbnpuMmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGdkpsI5
4dgo6gM711N6GFvyJ1nJiENGB9zo7SuHLL1JwgPjXnw3au09eLFq3QQrVGFuywMq
rgXjAS6O9qMWHCFULXR/VWuksWzGIC5OT0f1E7nUSpEFaM4MaPmNOfG8TCyiSQx6
ye+qg82Occg0Mxd3OzJEmndKOPXqqQUGW5stCyZd4x+4GlSnfT1k0oqCWLsDVpDc
kPBTXGVKxgeQvvBtJDOlZdlb3Ej7I2V+GzEyNNu9sX9vBVIoZ3Xi06qceMR+MZER
ekvlZ67BpEvWlta/dX8o0Xmwb+CHIgHf6AxsFRJaNswtuFDGZAM01K2B7+UwuBsR
YDodP3dStI4ZjA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:17:58 2025 by rpki-client