Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
File: XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft (raw, json)
Hash identifier: S+Pucu3R0gH7lV1xFzGTxD3UDcizMmKFBrKvwOqMo/4=
Subject key identifier: 44:50:47:BA:FB:7B:83:9C:07:BD:16:97:C0:1A:CB:EA:08:E8:04:8E
Authority key identifier: 5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
Certificate issuer: /CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03
Certificate serial: 0194BCA9FF48D6470D5DA8EC6EDD91673AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
Manifest number: 0BA7
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: 1-EeSCCOFCUoz0VplGP1Lo0h-9As.roa (hash: ZLnUsrTQcRzljBuufN+eacOU/oxAjJXf2wRzESRepgg=)
2: XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl (hash: DP9qFo+0I590+iYotWaQjJq6sDrrfKEAyx+W6HhV3f4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ff:48:d6:47:0d:5d:a8:ec:6e:dd:91:67:3a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=445047bafb7b839c07bd1697c01acbea08e8048e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:ee:4d:f3:2d:01:1f:4d:6b:02:10:d6:45:
56:70:2a:ed:8b:fe:f8:83:05:91:a9:83:c2:f7:07:
e7:5f:d5:ea:39:61:7f:1f:ba:54:f8:31:dc:b7:02:
23:2a:33:69:63:cc:1e:de:8c:4a:5e:95:75:ad:b6:
75:d4:88:c6:ed:b0:62:7e:1c:19:04:af:fa:8c:f3:
e1:ca:8f:79:65:13:8f:5d:81:c0:e7:57:8a:f0:73:
72:25:3d:d5:f4:6f:43:f2:54:07:33:bc:84:8e:5a:
a0:ab:15:09:73:28:5b:c1:38:d1:c7:02:f1:aa:c4:
2e:4c:3e:99:52:7e:17:2a:f3:8f:4c:3d:85:bd:c6:
c2:ab:af:64:a8:96:30:85:fe:46:83:d6:44:5d:5d:
e7:77:78:f8:c3:ea:d2:25:bb:08:be:1e:6c:ce:99:
67:ab:76:f7:3f:bc:62:02:31:6f:3a:c3:e2:94:a8:
45:7b:df:e4:83:50:dd:1e:23:1b:0d:ef:5e:e7:65:
20:d5:36:e8:d6:db:ff:96:6d:d5:0a:df:f4:07:b0:
d3:78:53:c0:b9:fb:64:92:9e:09:82:88:76:bc:c6:
9f:f9:45:d5:33:db:6b:94:9f:f6:bb:5d:8d:96:4a:
0c:fb:92:4a:46:91:56:ac:34:38:be:f2:22:d6:0c:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:50:47:BA:FB:7B:83:9C:07:BD:16:97:C0:1A:CB:EA:08:E8:04:8E
X509v3 Authority Key Identifier:
keyid:5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1a:e2:fd:27:4f:c6:a0:d3:f4:9e:cb:cc:39:5e:ba:c3:b3:
ae:13:74:6f:a7:fd:fc:22:ca:e0:39:a9:90:1a:bc:b8:0f:00:
1d:87:de:1d:dc:87:b7:dc:9f:c6:6d:71:f0:98:38:cf:0a:c5:
70:14:85:c9:59:16:73:24:31:bb:41:c5:f3:63:35:d9:6b:73:
68:22:d4:9b:c9:12:46:ef:f5:48:2b:4b:af:90:0f:6b:65:46:
e0:ef:81:dc:2e:12:c1:88:30:7d:ea:80:34:19:bd:ba:2e:41:
9a:ab:6d:3a:5e:76:94:cd:9b:bc:90:8b:3b:3b:ec:6c:42:32:
2e:5e:e0:7d:43:38:ee:62:dd:81:e0:72:57:41:6c:24:e1:2e:
a2:52:3d:c9:40:99:12:80:30:31:0d:ef:85:66:1a:8e:43:c7:
03:fd:4d:59:78:bb:d6:10:f1:b5:3e:4b:0b:f7:d6:2f:9d:e2:
a7:05:96:a3:ac:dd:70:f0:e8:45:34:f5:0f:31:39:80:ed:ea:
ae:dd:1d:44:17:d5:12:14:65:5a:f7:e8:78:e6:ac:9a:bd:46:
42:86:2d:3e:dc:f1:24:44:93:22:60:77:26:ec:22:20:27:01:
02:be:8a:fe:16:88:0d:eb:bb:03:da:0b:d1:92:7c:5c:c4:e1:
b2:19:20:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qf9I1kcNXajsbt2RZzqiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZDM3OWNlZGNkYzIwZjA4NzVjNGIwOGI5NGI0MTE2MWIz
ZThjMDMwHhcNMjUwMTMxMTQwMDQ0WhcNMjUwMjAxMTQwMDQ0WjAzMTEwLwYDVQQD
Eyg0NDUwNDdiYWZiN2I4MzljMDdiZDE2OTdjMDFhY2JlYTA4ZTgwNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbruTfMtAR9NawIQ1kVWcCrti/74
gwWRqYPC9wfnX9XqOWF/H7pU+DHctwIjKjNpY8we3oxKXpV1rbZ11IjG7bBifhwZ
BK/6jPPhyo95ZROPXYHA51eK8HNyJT3V9G9D8lQHM7yEjlqgqxUJcyhbwTjRxwLx
qsQuTD6ZUn4XKvOPTD2FvcbCq69kqJYwhf5Gg9ZEXV3nd3j4w+rSJbsIvh5szpln
q3b3P7xiAjFvOsPilKhFe9/kg1DdHiMbDe9e52Ug1Tbo1tv/lm3VCt/0B7DTeFPA
uftkkp4Jgoh2vMaf+UXVM9trlJ/2u12NlkoM+5JKRpFWrDQ4vvIi1gx/UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERQR7r7e4OcB70Wl8Aay+oI6ASOMB8GA1UdIwQY
MBaAFFzTec7c3CDwh1xLCLlLQRYbPowDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE5ONXp0emNJUENIWEVzSXVVdEJGaHMtakFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mM2NjYTQtZjZiZi00NzM0LWFiYmQt
MDk2NDQ2NGMxNzUxLzEvWE5ONXp0emNJUENIWEVzSXVVdEJGaHMtakFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mM2NjYTQtZjZiZi00NzM0LWFiYmQtMDk2NDQ2NGMxNzUx
LzEvWE5ONXp0emNJUENIWEVzSXVVdEJGaHMtakFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBri/SdP
xqDT9J7LzDleusOzrhN0b6f9/CLK4DmpkBq8uA8AHYfeHdyHt9yfxm1x8Jg4zwrF
cBSFyVkWcyQxu0HF82M12WtzaCLUm8kSRu/1SCtLr5APa2VG4O+B3C4SwYgwfeqA
NBm9ui5BmqttOl52lM2bvJCLOzvsbEIyLl7gfUM47mLdgeByV0FsJOEuolI9yUCZ
EoAwMQ3vhWYajkPHA/1NWXi71hDxtT5LC/fWL53ipwWWo6zdcPDoRTT1DzE5gO3q
rt0dRBfVEhRlWvfoeOasmr1GQoYtPtzxJESTImB3JuwiICcBAr6K/haIDeu7A9oL
0ZJ8XMThshkgrA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:33 2025 by rpki-client