Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
File: XcYkXKggiZ1-tBQDAsIQQbXbygY.mft (raw, json)
Hash identifier: 5xLIaPWaD15yTrkO1tjjSSP50ycEaSAkDhs8avuDmWo=
Subject key identifier: 6D:8C:F0:45:BF:C8:B4:3B:30:02:D6:98:06:2D:93:83:51:9D:C5:D8
Authority key identifier: 5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
Certificate issuer: /CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Certificate serial: 0194BCE05F5BA9750C9D57797AD500341250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
Manifest number: 0415
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: XcYkXKggiZ1-tBQDAsIQQbXbygY.crl (hash: EGfrzQ+sIxbx+u0hwqW0JzieZ0+XOczADzhYwd33Fc0=)
2: p3q-BDwRqsq597BmScWC04Uizbg.roa (hash: vEfpkI+83ThIFnHcYAP8l+1vWWpuU+kEjWNLTSj4mUg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5f:5b:a9:75:0c:9d:57:79:7a:d5:00:34:12:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=6d8cf045bfc8b43b3002d698062d9383519dc5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:60:eb:65:bd:46:ec:cc:d1:e6:d4:5c:0f:10:
a7:23:b9:52:e0:68:86:73:be:e5:fd:f7:cf:63:4c:
e9:3e:e0:c0:a6:43:00:8e:04:a4:89:44:93:a6:f5:
00:c0:0d:e1:79:c0:28:7a:fc:5b:2d:e6:d7:2b:86:
e0:a5:d7:c8:20:a7:eb:d6:c3:c4:0f:b1:23:16:28:
f1:72:eb:07:3f:2d:e8:7b:52:83:a4:0e:1a:a2:5b:
e5:78:33:c4:45:70:72:fd:9d:79:7d:ae:b3:df:18:
0d:93:ca:83:98:98:e5:fb:f5:00:b2:e0:bd:19:4e:
0f:77:99:f3:a1:75:f9:0e:31:c0:ba:20:92:b5:a5:
08:cc:31:67:22:32:f1:1b:24:54:bd:02:58:9d:fa:
cd:14:6f:15:29:15:e2:e9:91:19:f5:3d:1e:8a:65:
54:3b:18:66:7f:ce:48:f4:b7:1f:42:45:cc:8c:1b:
b4:98:0f:b6:e1:57:f9:12:6c:8a:64:ad:6c:f1:5f:
48:db:f9:90:7a:ae:9b:cb:42:29:37:45:e5:33:b2:
8e:d7:62:5b:5f:53:52:8d:17:84:21:f5:ab:e3:fd:
fc:c5:5a:e4:b2:91:87:f8:c9:50:e1:02:31:18:34:
86:7b:d4:d7:f3:91:d6:2c:06:8f:ee:c8:36:46:4c:
e8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8C:F0:45:BF:C8:B4:3B:30:02:D6:98:06:2D:93:83:51:9D:C5:D8
X509v3 Authority Key Identifier:
keyid:5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f3:ea:c2:78:53:ba:78:36:d2:58:64:1b:87:87:e7:30:21:
75:5d:9f:c4:97:1e:cb:f6:a7:9e:0e:6f:13:f5:94:d3:22:7d:
8f:4b:7e:8c:f9:ef:59:4d:34:36:6a:61:72:27:83:cd:55:0a:
4c:4b:46:f6:18:05:88:35:67:1f:76:3f:b5:b9:86:1c:30:2e:
d0:cf:f1:72:5b:5b:6c:11:aa:bd:6f:5f:eb:94:21:14:79:bf:
5b:b7:99:d3:29:80:64:20:49:b6:ac:60:b0:89:68:b5:70:ce:
a3:0b:12:9d:c9:3c:6e:ea:f3:a2:bc:52:ea:5c:bf:dc:64:94:
5c:86:71:ac:cf:12:d4:c6:d4:dd:15:32:ff:f4:66:32:c6:fd:
83:6f:c5:6b:3c:a0:76:ac:20:08:9d:4c:41:10:b1:57:11:d7:
c7:17:5c:09:88:00:40:5b:8e:31:db:26:70:f4:fe:38:39:14:
4e:54:96:64:5a:bd:fc:52:43:43:65:35:90:bf:82:c4:39:fa:
c5:5e:79:a7:92:e0:43:e5:f5:6b:a9:b6:25:2d:6b:44:fb:39:
1d:bf:e8:02:c9:c3:31:0a:56:9d:2e:b4:63:73:66:81:56:b8:
07:13:86:34:09:57:0f:a3:4e:6e:e7:03:4e:9e:60:23:15:68:
d6:fd:2b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84F9bqXUMnVd5etUANBJQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzYyNDVjYTgyMDg5OWQ3ZWI0MTQwMzAyYzIxMDQxYjVk
YmNhMDYwHhcNMjUwMTMxMTUwMDA4WhcNMjUwMjAxMTUwMDA4WjAzMTEwLwYDVQQD
Eyg2ZDhjZjA0NWJmYzhiNDNiMzAwMmQ2OTgwNjJkOTM4MzUxOWRjNWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GDrZb1G7MzR5tRcDxCnI7lS4GiG
c77l/ffPY0zpPuDApkMAjgSkiUSTpvUAwA3hecAoevxbLebXK4bgpdfIIKfr1sPE
D7EjFijxcusHPy3oe1KDpA4aolvleDPERXBy/Z15fa6z3xgNk8qDmJjl+/UAsuC9
GU4Pd5nzoXX5DjHAuiCStaUIzDFnIjLxGyRUvQJYnfrNFG8VKRXi6ZEZ9T0eimVU
Oxhmf85I9LcfQkXMjBu0mA+24Vf5EmyKZK1s8V9I2/mQeq6by0IpN0XlM7KO12Jb
X1NSjReEIfWr4/38xVrkspGH+MlQ4QIxGDSGe9TX85HWLAaP7sg2RkzoTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2M8EW/yLQ7MALWmAYtk4NRncXYMB8GA1UdIwQY
MBaAFF3GJFyoIImdfrQUAwLCEEG128oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDkt
MDc0ZWQ3MGI0NjczLzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDktMDc0ZWQ3MGI0Njcz
LzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPPqwnhT
ung20lhkG4eH5zAhdV2fxJcey/anng5vE/WU0yJ9j0t+jPnvWU00NmphcieDzVUK
TEtG9hgFiDVnH3Y/tbmGHDAu0M/xcltbbBGqvW9f65QhFHm/W7eZ0ymAZCBJtqxg
sIlotXDOowsSnck8burzorxS6ly/3GSUXIZxrM8S1MbU3RUy//RmMsb9g2/Fazyg
dqwgCJ1MQRCxVxHXxxdcCYgAQFuOMdsmcPT+ODkUTlSWZFq9/FJDQ2U1kL+CxDn6
xV55p5LgQ+X1a6m2JS1rRPs5Hb/oAsnDMQpWnS60Y3NmgVa4BxOGNAlXD6NObucD
Tp5gIxVo1v0rfg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:11:58 2025 by rpki-client