Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: 2U1GncJbbXN74sk/9Abm+RzFJWPsxEUDujTNX51/bjI=
Subject key identifier: B6:41:D9:7B:44:92:F9:A0:26:20:A6:45:12:D1:87:BF:2C:F6:5B:FA
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 0194BD85A6E6B6DD37BEE52C5FF9264847ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 1439
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: CxW9CMhkxVrayKYNgSlraHOeOQM.roa (hash: Pd98lEBP8p/URa6hKL85tikarNFnXac6Jxt7ytM5JK0=)
2: U66mGG3Y8A4sBRmpQym2qej1efo.roa (hash: TlVlbRHV8GRl2ttGfufATtjwAKcckCzgbeG9Ag3deSU=)
3: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: Oe0ll80hjrSUllMAjRQu85gYjuxgtU5fXSrzBdn04Ho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a6:e6:b6:dd:37:be:e5:2c:5f:f9:26:48:47:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=b641d97b4492f9a02620a64512d187bf2cf65bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:fb:47:96:19:96:59:a6:01:4c:a5:f0:3c:
76:87:b1:dc:12:47:cd:8c:6f:e4:83:ab:d5:97:e3:
15:bc:aa:4b:d7:f8:50:a4:10:a2:66:32:86:40:65:
35:ef:12:88:91:50:3c:0e:76:69:4d:ec:ff:39:2d:
f0:61:ae:34:68:ff:32:c9:aa:64:3c:6c:43:c8:08:
8f:e9:79:2c:98:54:f7:6a:52:a4:8b:d1:a0:15:3f:
3e:39:6b:96:c4:23:77:3d:a2:21:88:7a:26:cb:ba:
7a:53:91:da:f0:4c:ad:49:90:5d:58:75:30:3a:87:
72:77:f4:6b:94:db:7d:3b:bd:91:55:c7:6c:0a:69:
a7:db:09:c6:cf:31:c6:5e:c3:e4:63:3e:2c:c0:a8:
1f:07:aa:e0:95:11:60:3c:04:50:2d:19:30:e9:84:
08:95:6e:44:8b:b7:8e:26:05:db:60:f4:c8:0d:46:
39:db:8f:73:da:13:ff:2a:01:5e:10:e5:4a:19:15:
89:52:7c:ff:4e:7c:ec:02:44:28:f2:02:2b:13:ff:
79:b8:83:7a:59:e7:4e:81:dd:6a:e1:40:22:45:8d:
67:b2:68:e6:8b:2d:1b:bc:1f:33:d4:a2:4c:69:59:
d2:8f:76:03:f8:7c:b7:dd:03:7c:87:00:16:04:17:
45:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:41:D9:7B:44:92:F9:A0:26:20:A6:45:12:D1:87:BF:2C:F6:5B:FA
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2a:16:d5:58:fa:81:05:8c:1b:f4:9a:74:78:83:b2:c0:46:
6e:d0:f0:88:ce:ab:71:0f:43:38:23:02:63:96:c9:ec:93:94:
62:fb:6b:af:4f:18:db:96:95:11:bb:be:63:65:5a:e4:5b:81:
ed:98:90:0c:d7:8c:52:64:6d:72:fa:1b:08:20:f7:65:02:f5:
b4:36:08:a8:0f:a4:96:c8:54:9b:be:cf:2d:e1:ed:51:96:57:
15:d2:9f:8d:d2:a9:20:8e:cb:d0:da:ab:d9:c6:73:9f:d5:44:
9f:66:8a:1e:3a:a1:13:7a:cb:80:05:85:e7:27:fb:86:83:1c:
86:a2:85:b5:52:b5:c7:fb:d4:11:04:f7:56:2d:68:f9:9d:72:
03:2f:76:51:d8:73:cd:c2:88:67:bf:5c:51:01:b3:88:72:ac:
ac:87:de:cb:31:09:0a:0c:85:86:4a:5f:8a:18:81:d7:9b:b2:
64:53:b0:a6:cd:6a:01:f3:13:9d:8b:38:58:6f:90:f5:d0:b0:
1e:2e:d0:03:47:77:af:a2:09:b3:29:a6:da:06:80:c4:78:ad:
af:fc:d4:54:28:b1:bd:d6:7e:f9:5d:96:d6:ee:77:dc:eb:03:
c4:09:f4:95:0e:fc:00:40:fd:87:d9:a9:f8:3b:42:15:68:d4:
74:c4:e6:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9habmtt03vuUsX/kmSEftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OTI3ODZjZWQ2Y2U1OTc1ODU0NjhiYjRmMzZiMzFjZjZh
Y2VjNmUwHhcNMjUwMTMxMTgwMDQwWhcNMjUwMjAxMTgwMDQwWjAzMTEwLwYDVQQD
EyhiNjQxZDk3YjQ0OTJmOWEwMjYyMGE2NDUxMmQxODdiZjJjZjY1YmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFz7R5YZllmmAUyl8Dx2h7HcEkfN
jG/kg6vVl+MVvKpL1/hQpBCiZjKGQGU17xKIkVA8DnZpTez/OS3wYa40aP8yyapk
PGxDyAiP6XksmFT3alKki9GgFT8+OWuWxCN3PaIhiHomy7p6U5Ha8EytSZBdWHUw
Oodyd/RrlNt9O72RVcdsCmmn2wnGzzHGXsPkYz4swKgfB6rglRFgPARQLRkw6YQI
lW5Ei7eOJgXbYPTIDUY5249z2hP/KgFeEOVKGRWJUnz/TnzsAkQo8gIrE/95uIN6
WedOgd1q4UAiRY1nsmjmiy0bvB8z1KJMaVnSj3YD+Hy33QN8hwAWBBdF2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZB2XtEkvmgJiCmRRLRh78s9lv6MB8GA1UdIwQY
MBaAFMWSeGztbOWXWFRou082sxz2rOxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQt
YmEzNzUxMTQwNGMyLzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQtYmEzNzUxMTQwNGMy
LzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyoW1Vj6
gQWMG/SadHiDssBGbtDwiM6rcQ9DOCMCY5bJ7JOUYvtrr08Y25aVEbu+Y2Va5FuB
7ZiQDNeMUmRtcvobCCD3ZQL1tDYIqA+klshUm77PLeHtUZZXFdKfjdKpII7L0Nqr
2cZzn9VEn2aKHjqhE3rLgAWF5yf7hoMchqKFtVK1x/vUEQT3Vi1o+Z1yAy92Udhz
zcKIZ79cUQGziHKsrIfeyzEJCgyFhkpfihiB15uyZFOwps1qAfMTnYs4WG+Q9dCw
Hi7QA0d3r6IJsymm2gaAxHitr/zUVCixvdZ++V2W1u533OsDxAn0lQ78AED9h9mp
+DtCFWjUdMTmMA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:30:08 2025 by rpki-client