Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: bhh2EhZAx7ll8zUorgRC9SDM6c0mjeHrM/6dws/xtO0=
Subject key identifier: E0:FC:C7:B9:8A:3B:1F:78:B3:EB:09:F6:A4:69:9C:91:01:63:33:42
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 0194BBCE27BD26E89B30FA7BF82210B21C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: tnQ5odqGfmjwtl_VRpWmuxnJVZc.roa (hash: jWqwIWRjWImreknKrwhsqWkckPsMaq433dW/u+UVzTY=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: 8jzXm8pkva1zpYO9e2qNjESPcf4fL1pYvRHqNohVmMU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:27:bd:26:e8:9b:30:fa:7b:f8:22:10:b2:1c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=e0fcc7b98a3b1f78b3eb09f6a4699c9101633342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:71:b2:bb:97:00:75:2e:ae:98:e9:8b:95:bb:
d3:49:11:68:27:fb:48:72:60:78:33:07:3e:2a:dc:
f8:f5:b2:2a:90:43:d1:4e:e7:b3:17:e7:40:d1:50:
90:07:08:fe:43:c6:7f:8a:5e:72:60:91:b5:8f:35:
27:26:b2:40:c2:d4:55:27:5b:0f:f7:46:76:ee:15:
0c:4b:c4:08:1d:16:ec:4b:d9:2a:87:7a:42:5e:4f:
68:9c:ae:de:20:17:d3:95:f5:fb:5a:7c:8f:1b:cf:
de:a1:35:06:95:93:9b:f1:88:2c:a2:99:5b:ba:39:
81:07:d4:49:12:c2:96:21:61:92:2c:d8:4c:d5:64:
ec:43:e5:b8:d0:65:8c:de:a9:48:98:6c:e5:53:79:
66:7e:77:19:37:80:0e:71:b4:5f:18:8e:83:ff:7f:
e6:26:f1:0d:d8:87:73:01:93:84:20:56:23:74:82:
4c:02:1a:fc:61:8a:e7:98:6f:da:00:d1:58:8d:7f:
1d:86:1b:24:c5:f5:cd:99:58:4b:ab:e8:68:81:65:
b5:32:ca:8f:ef:73:52:48:dc:79:40:03:29:78:a3:
ea:fb:da:46:48:1b:3a:0b:9d:4c:dd:62:f7:3f:20:
70:67:42:95:b7:38:19:7e:34:d4:fa:9d:10:47:f5:
e6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FC:C7:B9:8A:3B:1F:78:B3:EB:09:F6:A4:69:9C:91:01:63:33:42
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:96:85:35:67:03:1a:de:14:92:e3:85:6e:d6:1e:74:8b:5f:
cb:c5:07:b3:85:64:42:37:f3:e6:df:6c:17:99:42:bf:1f:9b:
27:02:b6:5a:77:d8:1d:66:61:65:b7:81:d6:26:dc:69:aa:25:
e2:73:10:4b:05:e0:c4:16:d5:c7:c3:12:0c:43:62:7b:2b:e9:
a6:fc:5d:08:b8:93:28:34:bd:a7:20:82:c7:df:ae:c1:d9:04:
43:17:09:4f:bb:53:61:d1:f0:80:36:db:aa:90:dd:f5:87:0c:
4e:2f:a8:68:17:8d:4a:70:c7:66:2d:e5:64:81:af:29:6d:82:
1c:b0:5a:4e:63:b0:b6:61:82:78:99:4a:74:8c:c6:10:dc:d6:
c9:67:ac:7a:49:57:89:c4:4c:68:b5:98:82:48:65:52:09:06:
4f:8f:92:de:a7:63:e7:38:45:9c:61:f3:12:35:91:dc:a6:14:
66:84:2c:8c:3f:b2:8f:5a:61:92:23:f1:33:3e:3e:54:76:03:
b8:b4:c4:f6:78:fa:33:90:7a:26:a6:36:06:1a:18:70:14:f1:
68:ef:68:af:9e:15:69:6a:3e:95:45:97:e6:02:6a:0c:74:a6:
36:34:7e:da:36:c7:89:62:4a:96:54:25:45:5a:9a:0d:da:83:
bb:9a:ae:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zie9JuibMPp7+CIQshxkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MTE5ZTc1MjAwMzkyZjFhMmYwOGJlOTkwNzMyZDgwNDdi
MjhiMDkwHhcNMjUwMTMxMTAwMDM3WhcNMjUwMjAxMTAwMDM3WjAzMTEwLwYDVQQD
EyhlMGZjYzdiOThhM2IxZjc4YjNlYjA5ZjZhNDY5OWM5MTAxNjMzMzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XGyu5cAdS6umOmLlbvTSRFoJ/tI
cmB4Mwc+Ktz49bIqkEPRTuezF+dA0VCQBwj+Q8Z/il5yYJG1jzUnJrJAwtRVJ1sP
90Z27hUMS8QIHRbsS9kqh3pCXk9onK7eIBfTlfX7WnyPG8/eoTUGlZOb8Ygsoplb
ujmBB9RJEsKWIWGSLNhM1WTsQ+W40GWM3qlImGzlU3lmfncZN4AOcbRfGI6D/3/m
JvEN2IdzAZOEIFYjdIJMAhr8YYrnmG/aANFYjX8dhhskxfXNmVhLq+hogWW1MsqP
73NSSNx5QAMpeKPq+9pGSBs6C51M3WL3PyBwZ0KVtzgZfjTU+p0QR/Xm6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOD8x7mKOx94s+sJ9qRpnJEBYzNCMB8GA1UdIwQY
MBaAFMURnnUgA5LxovCL6ZBzLYBHsosJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJHZWRTQURrdkdpOEl2cGtITXRnRWV5aXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zMjBiYWYtNTlkYy00NmEyLWFmN2Qt
ZDgxOWNlZDVkMzVhLzEveFJHZWRTQURrdkdpOEl2cGtITXRnRWV5aXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8zMjBiYWYtNTlkYy00NmEyLWFmN2QtZDgxOWNlZDVkMzVh
LzEveFJHZWRTQURrdkdpOEl2cGtITXRnRWV5aXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5aFNWcD
Gt4UkuOFbtYedItfy8UHs4VkQjfz5t9sF5lCvx+bJwK2WnfYHWZhZbeB1ibcaaol
4nMQSwXgxBbVx8MSDENieyvppvxdCLiTKDS9pyCCx9+uwdkEQxcJT7tTYdHwgDbb
qpDd9YcMTi+oaBeNSnDHZi3lZIGvKW2CHLBaTmOwtmGCeJlKdIzGENzWyWeseklX
icRMaLWYgkhlUgkGT4+S3qdj5zhFnGHzEjWR3KYUZoQsjD+yj1phkiPxMz4+VHYD
uLTE9nj6M5B6JqY2BhoYcBTxaO9or54VaWo+lUWX5gJqDHSmNjR+2jbHiWJKllQl
RVqaDdqDu5quLw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:46 2025 by rpki-client