Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
File: XVTR8F5RVk-oGdtyu47dOYeza74.mft (raw, json)
Hash identifier: 7H3dh52Qf0GWIHDLOvBlhCp1WUwHTCdMksi8YWDnc1Y=
Subject key identifier: 68:FC:13:FD:4D:F7:EC:DA:2B:76:71:8E:02:EF:5D:07:A1:47:D5:95
Authority key identifier: 5D:54:D1:F0:5E:51:56:4F:A8:19:DB:72:BB:8E:DD:39:87:B3:6B:BE
Certificate issuer: /CN=5d54d1f05e51564fa819db72bb8edd3987b36bbe
Certificate serial: 0194BCA98D250B0199D19294484A9E8D4856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
Manifest number: 13AA
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: XVTR8F5RVk-oGdtyu47dOYeza74.crl (hash: XRmzg37gI4ZfPPjcHJOo4u/VdDEuz/1NWl5EDgrZgjg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8d:25:0b:01:99:d1:92:94:48:4a:9e:8d:48:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d54d1f05e51564fa819db72bb8edd3987b36bbe
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=68fc13fd4df7ecda2b76718e02ef5d07a147d595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:b9:cd:e0:f0:96:eb:a5:02:db:18:86:2e:
1b:18:30:c7:0f:7c:64:41:d5:14:34:c8:2b:72:8d:
66:4c:7a:eb:48:aa:01:14:31:9d:8e:e7:51:49:0d:
92:1e:cb:16:51:e8:a3:d9:14:d7:0a:95:b4:b9:fd:
9f:e2:a6:0e:37:c7:5d:9d:30:0e:8a:84:6d:62:40:
33:d9:1a:2f:97:e8:e7:73:a6:1c:f0:7b:82:67:5d:
9d:89:94:7d:e5:a3:20:3c:b9:a3:4b:9a:56:6b:5d:
8d:e8:ac:78:72:2d:53:e8:40:41:6f:f9:fa:99:57:
c7:95:b7:48:22:c6:91:c7:e8:68:78:e9:9e:03:1c:
50:79:65:c4:e0:fa:08:65:6a:67:e2:5c:cb:0c:d7:
ec:4b:b9:d6:91:09:b4:74:4a:b3:8a:8e:26:1c:ee:
10:7b:98:ad:31:ba:dc:03:3d:3a:d3:cc:53:b9:0f:
56:76:cc:a4:2d:4c:fe:fa:c9:66:c7:8a:ee:fe:b5:
80:10:33:22:e3:0b:72:f5:1c:65:19:29:63:69:8d:
cb:a7:dc:5b:93:9e:3b:a3:9e:f5:16:fe:18:80:93:
af:9d:7c:ff:70:49:51:18:83:53:e0:55:f4:45:33:
cd:2b:1c:cf:81:c6:dc:9a:24:35:fe:a8:f3:26:f7:
ab:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FC:13:FD:4D:F7:EC:DA:2B:76:71:8E:02:EF:5D:07:A1:47:D5:95
X509v3 Authority Key Identifier:
keyid:5D:54:D1:F0:5E:51:56:4F:A8:19:DB:72:BB:8E:DD:39:87:B3:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:15:f8:c8:d3:2b:92:a5:8b:45:7f:6b:33:cf:c1:4a:aa:78:
9f:b2:33:99:b7:68:40:f9:32:c7:59:78:0d:d7:79:38:6e:93:
91:af:1a:fd:22:34:a8:dc:3d:ae:09:f2:13:d1:f3:49:c4:ec:
aa:75:ff:07:b0:62:80:73:70:bc:ba:ea:32:a3:c2:cf:60:e2:
e4:04:c1:f2:f2:7e:8a:6b:20:ba:a7:4c:97:9a:1d:6a:ca:ff:
24:c1:93:70:ce:60:7b:26:5d:12:cb:31:05:a9:c0:13:ca:0c:
6e:60:92:e4:e9:87:a5:41:0f:3d:29:bf:5b:24:10:f9:d8:10:
f6:37:30:fd:52:64:57:7a:2f:d3:9c:41:08:17:33:67:6b:c4:
61:b2:7c:87:88:06:af:0b:45:94:c1:2d:99:82:25:cb:4f:81:
6c:eb:0c:80:da:32:0e:79:2d:39:de:5b:e7:b3:d9:6a:f3:87:
66:f3:5a:ce:cd:b5:3c:2c:b0:af:de:ff:65:03:d1:04:02:fe:
a5:a6:9b:db:3f:8d:4b:29:d0:76:c7:df:3e:2b:40:61:82:ca:
1f:f9:02:8b:b8:01:05:05:0a:48:3a:ba:58:33:2b:aa:10:22:
c7:73:3c:d2:40:fe:88:62:89:1f:be:46:1e:11:2a:7e:79:d6:
24:6d:7e:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qY0lCwGZ0ZKUSEqejUhWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNTRkMWYwNWU1MTU2NGZhODE5ZGI3MmJiOGVkZDM5ODdi
MzZiYmUwHhcNMjUwMTMxMTQwMDE1WhcNMjUwMjAxMTQwMDE1WjAzMTEwLwYDVQQD
Eyg2OGZjMTNmZDRkZjdlY2RhMmI3NjcxOGUwMmVmNWQwN2ExNDdkNTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDu5zeDwluulAtsYhi4bGDDHD3xk
QdUUNMgrco1mTHrrSKoBFDGdjudRSQ2SHssWUeij2RTXCpW0uf2f4qYON8ddnTAO
ioRtYkAz2Rovl+jnc6Yc8HuCZ12diZR95aMgPLmjS5pWa12N6Kx4ci1T6EBBb/n6
mVfHlbdIIsaRx+hoeOmeAxxQeWXE4PoIZWpn4lzLDNfsS7nWkQm0dEqzio4mHO4Q
e5itMbrcAz0608xTuQ9WdsykLUz++slmx4ru/rWAEDMi4wty9RxlGSljaY3Lp9xb
k547o571Fv4YgJOvnXz/cElRGINT4FX0RTPNKxzPgcbcmiQ1/qjzJver3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGj8E/1N9+zaK3ZxjgLvXQehR9WVMB8GA1UdIwQY
MBaAFF1U0fBeUVZPqBnbcruO3TmHs2u+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFZUUjhGNVJWay1vR2R0eXU0N2RPWWV6YTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iMjU0NWEtNmFlOS00MjdmLTgzYWUt
Y2UzZjg1MTVhNjliLzEvWFZUUjhGNVJWay1vR2R0eXU0N2RPWWV6YTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9iMjU0NWEtNmFlOS00MjdmLTgzYWUtY2UzZjg1MTVhNjli
LzEvWFZUUjhGNVJWay1vR2R0eXU0N2RPWWV6YTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBX4yNMr
kqWLRX9rM8/BSqp4n7IzmbdoQPkyx1l4Ddd5OG6Tka8a/SI0qNw9rgnyE9HzScTs
qnX/B7BigHNwvLrqMqPCz2Di5ATB8vJ+imsguqdMl5odasr/JMGTcM5geyZdEssx
BanAE8oMbmCS5OmHpUEPPSm/WyQQ+dgQ9jcw/VJkV3ov05xBCBczZ2vEYbJ8h4gG
rwtFlMEtmYIly0+BbOsMgNoyDnktOd5b57PZavOHZvNazs21PCywr97/ZQPRBAL+
paab2z+NSynQdsffPitAYYLKH/kCi7gBBQUKSDq6WDMrqhAix3M80kD+iGKJH75G
HhEqfnnWJG1+XQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:56 2025 by rpki-client