Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
File: xPHyFPsizFNhKPXeSqAXqHiA8oU.mft (raw, json)
Hash identifier: 8/snc9I4L+GTpO/XG6QBk4vCDY2F+fV2aDru9mgfP+0=
Subject key identifier: 4F:A4:56:80:8F:77:B8:A8:A5:4D:98:C3:F5:E6:B9:65:90:4E:56:DB
Authority key identifier: C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
Certificate issuer: /CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Certificate serial: 0194BCA9757D8D6004CA11D822F416CCEAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
Manifest number: 0596
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: NEtQy5f2240GFeET2QYMep1OUSw.roa (hash: MvgE972/GBhvnhbQmRaRf/7py1gPZlkr59j136VjyK4=)
2: xPHyFPsizFNhKPXeSqAXqHiA8oU.crl (hash: JXcPrCSA7+mdHyruIzTjn7wxo3Yl82cCLzfuJ3Rgw1M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:75:7d:8d:60:04:ca:11:d8:22:f4:16:cc:ea:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=4fa456808f77b8a8a54d98c3f5e6b965904e56db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:2b:07:54:ec:cf:87:43:32:b7:06:3f:f6:
ef:ef:5b:6f:f3:20:25:0d:13:be:33:ec:2b:c2:b9:
ef:03:64:3d:db:64:07:d6:cc:55:ce:87:5a:59:37:
05:a7:9a:ff:9a:29:93:ba:20:fc:1a:34:7c:77:45:
86:25:02:ab:b8:12:37:a0:66:ed:bb:ce:b2:48:48:
d9:af:35:52:64:cf:73:32:b2:a5:c3:ca:63:87:02:
49:b4:bf:dd:09:87:df:1f:24:8a:05:59:59:99:ab:
34:ad:04:81:0a:71:85:7a:15:58:35:85:54:4f:ff:
19:0d:e0:5a:65:fa:d0:18:2e:9f:73:aa:d7:4d:30:
6d:f6:f9:33:4a:e4:b2:65:fc:f2:43:b4:7c:c4:09:
9a:93:4f:16:1c:be:ad:cf:29:d1:c4:a3:3f:be:61:
f7:12:83:fd:01:d7:54:56:e9:41:11:f6:ac:85:e0:
e7:25:c4:07:0e:42:71:a2:7f:2d:e0:b1:85:47:ca:
e2:e8:af:2a:44:ff:79:72:5e:d6:f1:3d:3a:07:0b:
37:71:88:19:25:f9:f8:a0:84:13:3f:90:79:aa:a0:
2f:6e:92:8e:fd:75:8e:e9:66:77:ee:33:54:f8:29:
bb:9e:81:9b:27:a4:df:20:0c:71:bc:a1:d9:32:c3:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A4:56:80:8F:77:B8:A8:A5:4D:98:C3:F5:E6:B9:65:90:4E:56:DB
X509v3 Authority Key Identifier:
keyid:C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:60:43:42:e0:3a:67:62:72:ea:d3:0e:b9:f2:30:ca:6b:61:
a0:6f:5d:26:02:17:2b:86:b8:e7:48:3a:59:db:bb:2f:5d:2e:
b8:a4:4c:65:e8:33:36:10:22:b8:a5:45:f2:54:90:26:4a:13:
36:58:53:5b:e3:f7:71:3b:c2:ba:01:62:83:8c:95:aa:db:24:
99:3c:3f:b8:be:81:4f:c1:ab:41:73:48:99:de:d3:eb:a0:ab:
43:61:c8:0b:19:64:a9:f1:3a:b3:1b:5a:ba:3d:29:5e:d5:35:
3e:71:0e:cf:76:58:29:da:f8:07:86:22:08:e1:26:6c:e6:25:
9d:d6:e0:32:02:8f:99:bb:0d:b1:78:05:c6:86:a7:b7:a6:59:
2a:7f:ca:d5:3d:b1:18:54:c0:b1:a0:22:e5:56:3b:e9:ca:8f:
c7:88:e5:6b:49:d8:1a:8a:98:12:ab:94:94:9a:cc:57:94:4d:
4d:78:6c:ac:36:19:d2:7a:7c:77:75:3a:52:44:af:ea:d3:a0:
15:82:6f:90:9b:a6:a2:0a:e2:a5:bb:5d:b0:00:f9:6f:88:64:
43:31:3e:fb:86:7e:e5:df:2c:ff:0b:9f:3a:34:ae:3b:3d:02:
a8:a2:04:0c:0f:b7:76:34:c3:93:a6:a7:bd:e9:b7:42:3a:d0:
c8:97:f4:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qXV9jWAEyhHYIvQWzOrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZjFmMjE0ZmIyMmNjNTM2MTI4ZjVkZTRhYTAxN2E4Nzg4
MGYyODUwHhcNMjUwMTMxMTQwMDA5WhcNMjUwMjAxMTQwMDA5WjAzMTEwLwYDVQQD
Eyg0ZmE0NTY4MDhmNzdiOGE4YTU0ZDk4YzNmNWU2Yjk2NTkwNGU1NmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5orB1Tsz4dDMrcGP/bv71tv8yAl
DRO+M+wrwrnvA2Q922QH1sxVzodaWTcFp5r/mimTuiD8GjR8d0WGJQKruBI3oGbt
u86ySEjZrzVSZM9zMrKlw8pjhwJJtL/dCYffHySKBVlZmas0rQSBCnGFehVYNYVU
T/8ZDeBaZfrQGC6fc6rXTTBt9vkzSuSyZfzyQ7R8xAmak08WHL6tzynRxKM/vmH3
EoP9AddUVulBEfasheDnJcQHDkJxon8t4LGFR8ri6K8qRP95cl7W8T06Bws3cYgZ
Jfn4oIQTP5B5qqAvbpKO/XWO6WZ37jNU+Cm7noGbJ6TfIAxxvKHZMsOnkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+kVoCPd7iopU2Yw/XmuWWQTlbbMB8GA1UdIwQY
MBaAFMTx8hT7IsxTYSj13kqgF6h4gPKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lMmIzNDktZTc5Ni00ODY1LTgwNDAt
ZWNmNGY0MjBjOThhLzEveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lMmIzNDktZTc5Ni00ODY1LTgwNDAtZWNmNGY0MjBjOThh
LzEveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGBDQuA6
Z2Jy6tMOufIwymthoG9dJgIXK4a450g6Wdu7L10uuKRMZegzNhAiuKVF8lSQJkoT
NlhTW+P3cTvCugFig4yVqtskmTw/uL6BT8GrQXNImd7T66CrQ2HICxlkqfE6sxta
uj0pXtU1PnEOz3ZYKdr4B4YiCOEmbOYlndbgMgKPmbsNsXgFxoant6ZZKn/K1T2x
GFTAsaAi5VY76cqPx4jla0nYGoqYEquUlJrMV5RNTXhsrDYZ0np8d3U6UkSv6tOg
FYJvkJumogripbtdsAD5b4hkQzE++4Z+5d8s/wufOjSuOz0CqKIEDA+3djTDk6an
vem3QjrQyJf00w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:57 2025 by rpki-client