Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: 0nXw6cpqPnO+qBTpuMjAJIHql3GlVoQIrmFZpVRLf70=
Subject key identifier: 5B:73:59:DB:C5:06:25:17:03:52:4B:5E:E6:2D:10:96:CB:80:5B:03
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 0194BBCE08B27C08C4F32521A845B1C23B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: 90NkAjkP5P3wZwJqnXSO9AQDG_M.roa (hash: eK7yCOQkJI1NI1OGTayx19wjsA64ORHdInhLei4bvc8=)
2: eXxQ74lf_D70ri2LePLnjdcMkBc.roa (hash: n78D7QenzcNLmShQTibMqzzt2qmVHcGGjBzWjuUDoBA=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: 4NMz81zvVjkSkv5L/o9njmKuQ3u/s/vq1DPabdzDkAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:08:b2:7c:08:c4:f3:25:21:a8:45:b1:c2:3b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=5b7359dbc506251703524b5ee62d1096cb805b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:5f:63:b1:93:d7:95:fd:d7:51:c9:1f:7e:
cc:79:4a:d0:78:85:09:a0:e9:e8:b6:f2:6a:d5:b0:
87:d9:6c:2c:e5:da:f5:e7:f7:8c:6e:db:dc:d4:40:
4a:01:a4:2a:6d:d2:fb:1b:b0:5b:39:74:20:8c:ab:
0a:e3:eb:39:6d:40:68:43:ff:80:d7:72:3f:69:46:
ee:8b:9c:69:ce:ae:cb:c5:5a:17:db:47:d4:6d:3b:
0f:a3:61:d7:63:9a:e7:7c:c8:b3:f1:30:e1:97:fa:
eb:c7:a2:31:9f:5d:17:65:aa:ca:c8:66:0a:ae:9d:
00:4e:e3:87:0d:de:e0:d0:b2:98:a4:6f:cd:64:5f:
ef:1f:8d:b8:23:7c:c8:5e:e1:c9:c7:a2:5c:0a:9e:
5a:be:ae:c9:61:9e:87:20:fe:41:15:12:a9:f5:ea:
db:5d:80:7f:9a:14:20:de:c8:a3:46:9c:27:a9:05:
2e:51:f9:dc:72:80:55:ad:b9:ee:21:2d:b2:b8:eb:
4c:97:46:59:76:da:23:d7:47:83:f5:82:c5:45:23:
b6:22:9e:79:86:38:ee:a3:19:46:33:19:93:e6:d6:
b4:6b:48:5e:bc:0e:88:ac:d3:1a:52:46:40:a2:cb:
51:68:3a:a4:9e:85:c3:d8:9d:0e:01:23:7a:90:b2:
b5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:73:59:DB:C5:06:25:17:03:52:4B:5E:E6:2D:10:96:CB:80:5B:03
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:02:d0:e2:03:c5:01:fd:89:b9:f8:6d:4d:bb:04:bc:77:1d:
e1:f3:80:c9:a5:a5:a6:aa:69:fb:11:40:4c:f8:90:ef:8c:e3:
58:bc:d9:5b:03:9d:5d:7d:ca:fc:11:ea:1a:bf:d3:a8:0c:7b:
a8:5d:ac:f9:f5:fe:e6:c3:79:47:ca:a1:eb:9a:12:95:94:4e:
09:91:5b:7f:96:7c:e2:1e:72:4c:4e:6d:0a:93:ee:3e:42:fa:
79:84:67:52:75:ff:dd:5a:cd:4b:98:dd:28:c4:d9:7b:38:0b:
76:99:d0:1f:a9:02:60:25:dd:b3:04:cd:e4:6e:80:fc:fc:ed:
1f:e6:41:b2:b9:57:6b:46:4f:68:1c:c8:83:fa:ad:43:4f:f9:
0f:94:6f:5c:bd:d1:14:33:6a:56:4d:3f:d2:6f:22:98:a7:e4:
1f:fe:75:49:a1:10:7a:24:e2:63:2c:e3:00:7d:9e:17:b8:6e:
39:fd:eb:6f:b5:7d:0f:aa:d1:d9:f3:6b:b9:af:88:0a:3d:ae:
5c:e2:4c:11:a7:eb:a8:31:41:3f:6b:73:1a:73:74:2d:73:f2:
ca:84:ff:52:62:7f:4d:40:d4:03:7a:15:1a:f8:23:57:fb:7b:
64:f4:f8:cf:0e:60:87:cf:b8:82:90:d6:06:a9:87:e3:94:23:
dc:d7:1d:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgiyfAjE8yUhqEWxwjs9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDZlMTU4MTllYWNkMDViY2NlYmY4MDAxOWNhM2NiN2M0
YTM4ZTAwHhcNMjUwMTMxMTAwMDI5WhcNMjUwMjAxMTAwMDI5WjAzMTEwLwYDVQQD
Eyg1YjczNTlkYmM1MDYyNTE3MDM1MjRiNWVlNjJkMTA5NmNiODA1YjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoRfY7GT15X911HJH37MeUrQeIUJ
oOnotvJq1bCH2Wws5dr15/eMbtvc1EBKAaQqbdL7G7BbOXQgjKsK4+s5bUBoQ/+A
13I/aUbui5xpzq7LxVoX20fUbTsPo2HXY5rnfMiz8TDhl/rrx6Ixn10XZarKyGYK
rp0ATuOHDd7g0LKYpG/NZF/vH424I3zIXuHJx6JcCp5avq7JYZ6HIP5BFRKp9erb
XYB/mhQg3sijRpwnqQUuUfnccoBVrbnuIS2yuOtMl0ZZdtoj10eD9YLFRSO2Ip55
hjjuoxlGMxmT5ta0a0hevA6IrNMaUkZAostRaDqknoXD2J0OASN6kLK1iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtzWdvFBiUXA1JLXuYtEJbLgFsDMB8GA1UdIwQY
MBaAFMVG4VgZ6s0FvM6/gAGco8t8SjjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEt
MmRiMjI0NWYyOTg1LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEtMmRiMjI0NWYyOTg1
LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQLQ4gPF
Af2JufhtTbsEvHcd4fOAyaWlpqpp+xFATPiQ74zjWLzZWwOdXX3K/BHqGr/TqAx7
qF2s+fX+5sN5R8qh65oSlZROCZFbf5Z84h5yTE5tCpPuPkL6eYRnUnX/3VrNS5jd
KMTZezgLdpnQH6kCYCXdswTN5G6A/PztH+ZBsrlXa0ZPaBzIg/qtQ0/5D5RvXL3R
FDNqVk0/0m8imKfkH/51SaEQeiTiYyzjAH2eF7huOf3rb7V9D6rR2fNrua+ICj2u
XOJMEafrqDFBP2tzGnN0LXPyyoT/UmJ/TUDUA3oVGvgjV/t7ZPT4zw5gh8+4gpDW
BqmH45Qj3Ncdsg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:15 2025 by rpki-client