Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
File: Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft (raw, json)
Hash identifier: gfow5zenDcWy3BclbnB0h/6qB1Y3YBkLgL/+n2f1VJ4=
Subject key identifier: 5E:AC:8D:75:C3:1E:FC:52:84:B5:AC:BF:DC:90:11:96:D9:CE:F3:E5
Authority key identifier: 5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
Certificate issuer: /CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Certificate serial: 0194BC3C2CDB29BDB09B71F589CCCDF93EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
Manifest number: 0789
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl (hash: 8ep6k1GApHqyU3mmz56lTEbcACjQksThOudCTBkKMig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2c:db:29:bd:b0:9b:71:f5:89:cc:cd:f9:3e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=5eac8d75c31efc5284b5acbfdc901196d9cef3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:10:9f:72:3a:a4:ff:3a:e8:f7:b2:2c:65:
0e:91:11:73:2e:e5:46:10:39:58:d3:0b:7d:22:30:
f7:98:63:af:21:14:dc:7f:7e:0b:88:84:eb:2e:5c:
9b:c0:38:0f:a5:42:30:8e:fa:59:df:0f:04:16:db:
fe:0e:dd:8d:92:93:44:ac:57:e9:e8:ab:61:b8:1b:
07:73:24:df:e0:02:3b:fb:80:e9:59:05:ed:18:2a:
24:93:30:7a:f8:9f:f7:d8:3a:b5:00:ee:ac:06:eb:
ed:d3:6e:64:5f:d2:84:8e:92:35:cb:65:84:c0:d1:
0e:23:8c:da:f0:c8:fa:dd:9d:a2:24:2f:fd:3f:99:
e1:93:28:99:d2:06:c9:1c:db:4b:aa:40:e3:e5:85:
87:18:69:64:46:24:82:55:5b:86:8f:ca:f7:1e:62:
40:40:22:89:05:1a:05:21:5e:7a:29:3d:31:26:44:
c0:4d:3f:b0:6b:b1:78:ae:78:15:11:57:cc:1c:a3:
50:e5:48:c1:e0:72:cf:96:c9:c1:87:7b:d6:f4:68:
14:ba:c9:25:80:d9:e2:d1:54:8c:3b:2e:4e:17:27:
ff:d9:61:89:e2:f8:3f:0e:f1:41:97:14:39:0d:d6:
2f:8f:d4:61:8f:3c:58:f1:23:53:36:26:03:50:a0:
78:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AC:8D:75:C3:1E:FC:52:84:B5:AC:BF:DC:90:11:96:D9:CE:F3:E5
X509v3 Authority Key Identifier:
keyid:5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d8:68:43:bf:5f:e6:a5:69:bc:39:b1:ea:d3:5c:fb:7e:9f:
2e:9a:dd:0d:b4:99:f5:ce:be:c6:8c:cd:53:2e:70:42:34:1d:
9a:05:47:85:ed:6a:3e:53:9a:3a:98:20:ae:78:c7:69:30:99:
c3:42:2d:59:3b:f0:9d:bf:e8:b4:c3:83:93:cc:9d:11:ac:0a:
98:39:ce:6f:29:2d:7a:4a:92:ea:54:27:73:2b:59:63:00:ac:
6c:7b:f5:78:b8:ac:5e:95:28:57:a4:a6:fd:35:37:20:77:88:
ac:ff:2f:04:05:ea:cb:e5:a6:45:74:af:51:b5:3d:87:7d:16:
66:73:d8:1a:c3:cb:90:eb:22:65:7a:c5:08:ab:65:4f:52:20:
ec:c8:9f:b1:13:11:43:17:88:5a:ed:6e:11:57:dd:00:43:9b:
ae:8a:6c:57:94:ca:c2:8a:64:1b:08:9b:c9:7b:0a:a4:bb:86:
34:5f:2f:04:a6:33:c1:6a:ed:b6:a6:c0:b3:e5:45:3b:f0:49:
1e:34:dc:ea:5b:41:ad:07:dc:1b:ee:da:78:c6:72:23:19:1e:
ac:7c:15:e1:05:9e:8b:3f:6c:78:5e:10:39:88:77:f2:61:e4:
bb:b4:7c:ee:eb:5f:71:59:9e:bc:17:da:3e:5a:c1:7c:09:e6:
01:93:1e:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PCzbKb2wm3H1iczN+T67MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZGZiZWRlYWMwNmIwMWM1YTNmNzg0Y2VhMDQ2ZTVhMmM5
NWNhNWUwHhcNMjUwMTMxMTIwMDQ3WhcNMjUwMjAxMTIwMDQ3WjAzMTEwLwYDVQQD
Eyg1ZWFjOGQ3NWMzMWVmYzUyODRiNWFjYmZkYzkwMTE5NmQ5Y2VmM2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxwQn3I6pP866PeyLGUOkRFzLuVG
EDlY0wt9IjD3mGOvIRTcf34LiITrLlybwDgPpUIwjvpZ3w8EFtv+Dt2NkpNErFfp
6KthuBsHcyTf4AI7+4DpWQXtGCokkzB6+J/32Dq1AO6sBuvt025kX9KEjpI1y2WE
wNEOI4za8Mj63Z2iJC/9P5nhkyiZ0gbJHNtLqkDj5YWHGGlkRiSCVVuGj8r3HmJA
QCKJBRoFIV56KT0xJkTATT+wa7F4rngVEVfMHKNQ5UjB4HLPlsnBh3vW9GgUuskl
gNni0VSMOy5OFyf/2WGJ4vg/DvFBlxQ5DdYvj9RhjzxY8SNTNiYDUKB4EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6sjXXDHvxShLWsv9yQEZbZzvPlMB8GA1UdIwQY
MBaAFF7fvt6sBrAcWj94TOoEbloslcpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHQtLTNxd0dzQnhhUDNoTTZnUnVXaXlWeWw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yODM0M2MtYTRlNC00ZGIwLTkyYmUt
YjU4NjE3ZTE4ODhiLzEvWHQtLTNxd0dzQnhhUDNoTTZnUnVXaXlWeWw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yODM0M2MtYTRlNC00ZGIwLTkyYmUtYjU4NjE3ZTE4ODhi
LzEvWHQtLTNxd0dzQnhhUDNoTTZnUnVXaXlWeWw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATthoQ79f
5qVpvDmx6tNc+36fLprdDbSZ9c6+xozNUy5wQjQdmgVHhe1qPlOaOpggrnjHaTCZ
w0ItWTvwnb/otMODk8ydEawKmDnObyktekqS6lQncytZYwCsbHv1eLisXpUoV6Sm
/TU3IHeIrP8vBAXqy+WmRXSvUbU9h30WZnPYGsPLkOsiZXrFCKtlT1Ig7MifsRMR
QxeIWu1uEVfdAEObropsV5TKwopkGwibyXsKpLuGNF8vBKYzwWrttqbAs+VFO/BJ
HjTc6ltBrQfcG+7aeMZyIxkerHwV4QWeiz9seF4QOYh38mHku7R87utfcVmevBfa
PlrBfAnmAZMeMQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:51 2025 by rpki-client