Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
File: xqvTc8xZUGDxozB2tT4RYlEsPNc.mft (raw, json)
Hash identifier: bOY1WY7COCtTSGTwpkxoSGrYXeWIIpfw/JR9CMmvKfU=
Subject key identifier: D1:BC:99:1B:AC:F4:D0:D1:7F:C6:5B:DC:BF:44:CA:01:21:F0:9F:F9
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial: 0194BBCEF5C651FD1F0274E64CF36212579B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: Ry6CjTQauY6jePfF9K1aXRBPI1U.roa (hash: c9CRHRXe2zz0jhFDuzmDe52TtCa+3RwGF3AlfmTp4Fo=)
2: krks6C9REj8M_gHzn6hFi3S_Skg.roa (hash: GygsjxyP//HYKQINGkFpfbyTmj1FmIDGcflx1a5rTfo=)
3: xqvTc8xZUGDxozB2tT4RYlEsPNc.crl (hash: bCeyx1gP6Va0BFsvWgkAQXvibufhIGUYgjgZ2XaROzQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f5:c6:51:fd:1f:02:74:e6:4c:f3:62:12:57:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=d1bc991bacf4d0d17fc65bdcbf44ca0121f09ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:8a:13:a9:56:09:fe:88:77:ea:20:fb:85:
10:03:59:18:cf:7b:f6:b4:c0:4c:42:57:3f:d8:be:
50:41:ae:e2:1b:44:06:f4:7b:14:e6:30:68:f8:4e:
d1:b5:86:b6:57:26:73:8f:9c:e4:b0:4d:fb:f2:36:
6c:33:6a:c3:30:46:2c:07:79:5a:b6:e5:1f:9f:af:
c4:1d:06:4a:c3:2a:8e:cd:c0:e0:44:f2:38:b4:64:
83:48:33:ab:93:e1:94:57:f1:00:67:bd:1f:f9:dc:
43:ac:42:33:11:bf:37:1f:48:74:8a:bb:ed:a9:f8:
fc:f0:a5:de:d6:1a:93:25:ce:20:34:56:2b:50:6c:
8b:7e:f9:e5:d5:bb:6e:3e:ba:7e:dc:25:c8:eb:6d:
bf:5e:44:21:37:d1:2c:a7:f8:64:59:e8:f0:2b:d4:
cd:ac:d1:67:a8:72:fe:1c:8f:2d:b4:d8:f2:db:ec:
c3:3f:44:a2:bc:8d:43:63:be:39:e6:a6:22:6b:48:
c9:9d:36:3e:df:0b:79:a8:c4:44:9e:e1:f7:0c:e6:
d2:94:35:01:af:63:16:a6:22:98:99:80:54:0e:50:
56:a2:74:29:1f:55:e4:20:df:82:10:12:f2:70:84:
b9:14:f3:04:0d:20:7d:e4:dc:f8:66:ab:43:d2:84:
4f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BC:99:1B:AC:F4:D0:D1:7F:C6:5B:DC:BF:44:CA:01:21:F0:9F:F9
X509v3 Authority Key Identifier:
keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:56:d9:c7:5f:b4:4d:86:94:95:bd:aa:57:61:8c:87:48:70:
97:35:2a:47:0f:5a:5c:a1:c8:2d:ae:0f:ab:f5:52:97:da:7a:
ce:17:88:0e:40:bc:4e:f8:94:71:b6:b3:17:60:27:25:8f:86:
5e:7d:f1:43:56:95:43:54:9c:db:95:7e:0b:93:17:30:8c:ed:
cc:f9:68:4f:55:34:fc:d5:7d:d1:3c:f4:14:e5:fe:04:d8:ca:
61:7a:77:43:14:fe:92:aa:ea:c5:e2:ba:19:03:63:48:a5:d6:
ce:c6:ef:51:7c:dc:34:ff:ed:72:08:c1:f0:6b:f1:86:d0:7b:
d7:62:16:b5:ef:fc:5c:a7:e9:db:5a:9f:4f:b5:42:50:14:8c:
8a:7a:18:f5:86:b5:11:73:15:66:22:91:51:e9:48:ce:02:a6:
61:4b:6f:61:b4:bb:a7:1a:50:f0:e1:43:e7:32:f5:12:22:c2:
5e:8c:67:c4:c5:6f:e2:84:0d:a4:ee:d5:57:01:b3:74:19:65:
f1:ef:db:e3:d0:9d:50:41:22:b2:ca:88:4d:57:15:7c:63:7f:
a3:3e:73:48:c4:43:dd:ba:d8:34:72:2f:ff:74:53:55:fc:31:
50:18:70:66:1f:8d:bd:15:73:99:46:15:a3:29:93:37:a3:c6:
28:76:20:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvXGUf0fAnTmTPNiElebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YWJkMzczY2M1OTUwNjBmMWEzMzA3NmI1M2UxMTYyNTEy
YzNjZDcwHhcNMjUwMTMxMTAwMTMwWhcNMjUwMjAxMTAwMTMwWjAzMTEwLwYDVQQD
EyhkMWJjOTkxYmFjZjRkMGQxN2ZjNjViZGNiZjQ0Y2EwMTIxZjA5ZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3OKE6lWCf6Id+og+4UQA1kYz3v2
tMBMQlc/2L5QQa7iG0QG9HsU5jBo+E7RtYa2VyZzj5zksE378jZsM2rDMEYsB3la
tuUfn6/EHQZKwyqOzcDgRPI4tGSDSDOrk+GUV/EAZ70f+dxDrEIzEb83H0h0irvt
qfj88KXe1hqTJc4gNFYrUGyLfvnl1btuPrp+3CXI622/XkQhN9Esp/hkWejwK9TN
rNFnqHL+HI8ttNjy2+zDP0SivI1DY7455qYia0jJnTY+3wt5qMREnuH3DObSlDUB
r2MWpiKYmYBUDlBWonQpH1XkIN+CEBLycIS5FPMEDSB95Nz4ZqtD0oRPgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNG8mRus9NDRf8Zb3L9EygEh8J/5MB8GA1UdIwQY
MBaAFMar03PMWVBg8aMwdrU+EWJRLDzXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kZDJjZGQtOTY4NC00MWNhLTgwMTUt
OWYxNTBjOGVhOTcxLzEveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9kZDJjZGQtOTY4NC00MWNhLTgwMTUtOWYxNTBjOGVhOTcx
LzEveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1bZx1+0
TYaUlb2qV2GMh0hwlzUqRw9aXKHILa4Pq/VSl9p6zheIDkC8TviUcbazF2AnJY+G
Xn3xQ1aVQ1Sc25V+C5MXMIztzPloT1U0/NV90Tz0FOX+BNjKYXp3QxT+kqrqxeK6
GQNjSKXWzsbvUXzcNP/tcgjB8GvxhtB712IWte/8XKfp21qfT7VCUBSMinoY9Ya1
EXMVZiKRUelIzgKmYUtvYbS7pxpQ8OFD5zL1EiLCXoxnxMVv4oQNpO7VVwGzdBll
8e/b49CdUEEissqITVcVfGN/oz5zSMRD3brYNHIv/3RTVfwxUBhwZh+NvRVzmUYV
oymTN6PGKHYgpA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:30 2025 by rpki-client