Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
File: xvw4sqEAOV-puZGa15LnrLLbLgc.mft (raw, json)
Hash identifier: XddCZDh50QYMyG9gu0MD0pYzNH1BUd15J2Dat3PTvMM=
Subject key identifier: D0:4F:24:63:A5:C5:BE:1E:17:CF:55:86:B6:DA:33:3B:F2:9D:2A:4B
Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
Certificate issuer: /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Certificate serial: 0194BBCE6FFDAC4A01B9E823142129510374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
Manifest number: 03F6
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: gAeMHhtFSbcycnERLLnOEpIkAko.roa (hash: e6fugfkqh4EKp2KogcF4JNMD2SRVe0PwewPhIKGPhCE=)
2: xvw4sqEAOV-puZGa15LnrLLbLgc.crl (hash: jlGuePZEbfXQKE4RzknpaohKYCUJRVCMkla5LPQXMnU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6f:fd:ac:4a:01:b9:e8:23:14:21:29:51:03:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=d04f2463a5c5be1e17cf5586b6da333bf29d2a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:a5:13:59:fb:d4:8d:f8:be:91:9f:0e:f7:
f3:a4:f8:99:bb:de:26:f7:91:75:1f:90:b6:b4:53:
64:0a:bd:8e:c5:0c:06:9a:0d:cc:c3:db:e0:81:fc:
b2:73:83:47:d5:83:d4:3a:e2:8c:88:5d:ae:82:da:
2e:6a:29:c4:5a:46:0b:3c:10:6a:ce:07:fa:f3:81:
55:d6:b3:29:4e:9f:2d:a5:68:ed:c5:17:b4:cb:d8:
76:98:6c:47:32:3e:0d:be:7d:bf:83:ed:d3:90:02:
fb:ab:31:6b:39:bd:51:e4:dc:7a:d7:bd:5c:53:5d:
10:89:9b:a7:3c:d2:51:da:63:3e:3b:83:78:34:8c:
78:35:f7:5e:a3:a2:9e:75:82:33:53:3d:15:a7:21:
7f:ed:0d:09:b1:bb:c0:fb:3c:04:06:9a:ad:79:fa:
26:0a:c7:44:56:55:b1:37:b2:ef:25:a6:b8:b5:0e:
fe:ae:88:87:56:a7:b4:61:11:51:8e:02:cc:83:1e:
e2:ec:cb:ce:05:a2:19:f9:0f:11:7f:98:73:fa:d2:
d4:8a:6f:ed:30:09:ea:d9:a5:fe:cb:ed:ec:0e:ff:
9b:ca:3e:0d:46:35:34:1e:de:eb:0d:c0:9c:2f:3c:
da:67:e6:6b:a1:8b:ea:7d:a7:e4:9f:bc:f6:43:90:
d6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4F:24:63:A5:C5:BE:1E:17:CF:55:86:B6:DA:33:3B:F2:9D:2A:4B
X509v3 Authority Key Identifier:
keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:99:e2:4c:3d:cc:b6:1a:79:4d:bd:eb:66:73:1f:ac:c2:1b:
1d:fe:52:52:d3:a8:a8:61:24:3c:69:26:59:bd:b3:c6:1d:34:
a8:13:7c:db:b6:a2:ff:8e:82:17:f1:c6:58:e3:e6:e7:b1:74:
bf:c1:67:fc:3d:95:55:c2:61:b2:b1:00:95:c0:14:de:4e:9f:
7a:13:07:bd:cf:07:ec:17:05:eb:8b:97:11:19:b5:a1:74:0e:
e5:67:da:9d:8d:af:81:06:af:dc:16:5c:c3:13:47:ce:d7:9b:
b0:b8:2e:73:82:05:12:fb:be:bf:ba:7b:59:d0:f1:05:63:be:
25:54:10:cc:de:6b:5e:29:f8:7b:3b:18:42:95:8b:d7:1a:c4:
fa:02:9f:d9:58:04:27:b3:52:6c:d6:a5:dd:50:89:7d:a7:46:
65:b1:d2:b0:d1:62:46:a5:37:3d:16:73:50:85:51:15:cc:f2:
41:b4:9e:50:05:0d:7e:92:94:a8:eb:c0:35:77:17:51:2f:14:
d0:e2:80:05:d6:71:68:9e:4f:d8:49:6d:5e:4f:fd:53:1f:ad:
48:24:17:d5:c3:e2:40:c9:1a:e2:9e:64:dd:f6:fc:59:81:f5:
dc:be:45:d0:7d:df:d5:f6:91:d7:13:ea:56:71:67:da:f9:73:
6e:ee:97:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zm/9rEoBuegjFCEpUQN0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZmMzOGIyYTEwMDM5NWZhOWI5OTE5YWQ3OTJlN2FjYjJk
YjJlMDcwHhcNMjUwMTMxMTAwMDU1WhcNMjUwMjAxMTAwMDU1WjAzMTEwLwYDVQQD
EyhkMDRmMjQ2M2E1YzViZTFlMTdjZjU1ODZiNmRhMzMzYmYyOWQyYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrOlE1n71I34vpGfDvfzpPiZu94m
95F1H5C2tFNkCr2OxQwGmg3Mw9vggfyyc4NH1YPUOuKMiF2ugtouainEWkYLPBBq
zgf684FV1rMpTp8tpWjtxRe0y9h2mGxHMj4Nvn2/g+3TkAL7qzFrOb1R5Nx6171c
U10QiZunPNJR2mM+O4N4NIx4Nfdeo6KedYIzUz0VpyF/7Q0JsbvA+zwEBpqtefom
CsdEVlWxN7LvJaa4tQ7+roiHVqe0YRFRjgLMgx7i7MvOBaIZ+Q8Rf5hz+tLUim/t
MAnq2aX+y+3sDv+byj4NRjU0Ht7rDcCcLzzaZ+ZroYvqfafkn7z2Q5DWewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBPJGOlxb4eF89VhrbaMzvynSpLMB8GA1UdIwQY
MBaAFMb8OLKhADlfqbmRmteS56yy2y4HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHZ3NHNxRUFPVi1wdVpHYTE1TG5yTExiTGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OTgwMGQtMTUxZi00ZTMwLTlmZDgt
YTg5YTcwMjhkNDI5LzEveHZ3NHNxRUFPVi1wdVpHYTE1TG5yTExiTGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OTgwMGQtMTUxZi00ZTMwLTlmZDgtYTg5YTcwMjhkNDI5
LzEveHZ3NHNxRUFPVi1wdVpHYTE1TG5yTExiTGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpniTD3M
thp5Tb3rZnMfrMIbHf5SUtOoqGEkPGkmWb2zxh00qBN827ai/46CF/HGWOPm57F0
v8Fn/D2VVcJhsrEAlcAU3k6fehMHvc8H7BcF64uXERm1oXQO5WfanY2vgQav3BZc
wxNHztebsLguc4IFEvu+v7p7WdDxBWO+JVQQzN5rXin4ezsYQpWL1xrE+gKf2VgE
J7NSbNal3VCJfadGZbHSsNFiRqU3PRZzUIVRFczyQbSeUAUNfpKUqOvANXcXUS8U
0OKABdZxaJ5P2EltXk/9Ux+tSCQX1cPiQMka4p5k3fb8WYH13L5F0H3f1faR1xPq
VnFn2vlzbu6X2Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:43 2025 by rpki-client