Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
File: xN29nyMJGTIb9WcG8QaTd5JhGfk.mft (raw, json)
Hash identifier: P+ScgQgXptgMZ6Ayoqs4XelTGRCNrSjoAleqRjJVejU=
Subject key identifier: 4C:65:D7:1C:1D:35:ED:07:C6:F1:87:11:5F:6A:E6:C6:E2:71:50:0E
Authority key identifier: C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
Certificate issuer: /CN=c4ddbd9f230919321bf56706f1069377926119f9
Certificate serial: 0194BC3BF39C387DA21B4BA900BD15883192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
Manifest number: 0449
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: 7qr12EYwsdyti-EmLWqRDogionQ.roa (hash: 5LhmlqfCFcdrvGQgZrfHuGwVjCahrEpoNBu5iKMaA/w=)
2: JEh62edtGcPK6W4aI6E72di6xCs.roa (hash: PD42vAZ0BIX3jY6yqazrN5UUOFytkMhASMCFsoaVQJg=)
3: xN29nyMJGTIb9WcG8QaTd5JhGfk.crl (hash: uRqr3+UFPEo7ubKC72g/YnUsquZCoHGlqHKzSWY52W8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f3:9c:38:7d:a2:1b:4b:a9:00:bd:15:88:31:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ddbd9f230919321bf56706f1069377926119f9
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=4c65d71c1d35ed07c6f187115f6ae6c6e271500e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:1f:a0:de:1e:d4:91:cc:41:5f:fc:c4:3e:
cc:4e:51:15:49:96:76:92:bd:87:74:59:b0:17:72:
a2:1f:91:aa:37:92:6d:68:e5:73:d1:b3:67:08:ff:
f5:c2:b1:99:67:61:d9:08:a7:48:6c:8f:39:25:aa:
05:cf:ae:9c:19:a6:d8:11:08:7a:a1:e4:40:b7:1e:
b3:ce:f8:19:8a:9b:af:40:54:1f:c3:1c:09:5f:49:
9a:95:cc:f2:2f:1f:0f:66:95:e5:02:e8:94:ac:7e:
ad:7f:58:ad:49:fd:d1:28:fe:61:d3:2c:a4:da:50:
8a:ad:37:3b:d8:7b:e0:37:b8:11:1a:6e:3d:ab:cf:
63:eb:7a:37:dd:9b:df:ca:c0:8a:50:66:e5:ac:97:
e0:aa:f0:35:47:c9:c3:6e:63:c1:c6:5a:98:b8:31:
ca:45:69:de:bc:92:52:63:ac:65:ca:43:4a:23:20:
63:d4:3f:e8:54:16:9b:04:89:62:f3:69:f4:e2:73:
ec:7a:e1:64:46:a2:71:83:e3:c3:e9:69:b9:13:21:
f4:76:8e:8a:1c:1b:36:6f:a7:37:52:6b:41:49:67:
d9:2f:ee:fe:b0:53:ad:04:1e:12:40:89:6d:2d:bd:
ce:0b:28:0c:34:c6:b5:cc:50:82:b8:ba:10:47:df:
b4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:65:D7:1C:1D:35:ED:07:C6:F1:87:11:5F:6A:E6:C6:E2:71:50:0E
X509v3 Authority Key Identifier:
keyid:C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:34:6c:ff:2d:05:d5:be:2e:66:4b:c0:b5:95:0f:bf:da:a6:
44:82:4b:8e:29:ce:3a:75:47:d5:0a:8f:7c:b6:1b:1d:65:de:
2f:fb:39:41:d7:1f:ec:81:57:c3:44:de:d5:58:23:da:1d:5f:
5e:ca:4c:e7:04:af:df:36:38:a5:1e:0a:62:15:68:28:76:08:
ae:ef:84:9c:84:f2:7e:68:5a:2d:8b:63:5f:59:d6:71:f1:7f:
fc:f7:e1:4e:db:41:28:0c:93:76:83:34:ce:e1:46:02:ed:43:
a0:9d:cf:3f:59:c4:77:e7:03:f1:77:ea:65:50:af:ef:74:cc:
70:c0:83:0c:7a:ad:3e:cb:30:40:ec:37:93:a4:8f:08:15:63:
f8:fb:1b:82:0c:05:f6:91:3e:6c:8e:f6:3d:d3:ba:46:5b:f1:
97:8b:8f:0e:55:52:8a:76:0f:fc:1d:b0:94:bb:24:4d:23:f2:
5e:1f:34:88:96:22:2c:76:04:5c:01:a2:86:62:36:b4:81:f7:
f8:f9:f3:d5:71:e7:55:95:92:59:58:59:15:c3:cd:93:9c:13:
64:d6:7d:ed:7c:de:b8:0e:d5:87:17:6b:20:ca:db:98:80:37:
be:53:be:9c:9e:df:91:00:a9:a6:94:af:e7:22:5d:1c:02:53:
76:01:fb:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/OcOH2iG0upAL0ViDGSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZGRiZDlmMjMwOTE5MzIxYmY1NjcwNmYxMDY5Mzc3OTI2
MTE5ZjkwHhcNMjUwMTMxMTIwMDMzWhcNMjUwMjAxMTIwMDMzWjAzMTEwLwYDVQQD
Eyg0YzY1ZDcxYzFkMzVlZDA3YzZmMTg3MTE1ZjZhZTZjNmUyNzE1MDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cMfoN4e1JHMQV/8xD7MTlEVSZZ2
kr2HdFmwF3KiH5GqN5JtaOVz0bNnCP/1wrGZZ2HZCKdIbI85JaoFz66cGabYEQh6
oeRAtx6zzvgZipuvQFQfwxwJX0malczyLx8PZpXlAuiUrH6tf1itSf3RKP5h0yyk
2lCKrTc72HvgN7gRGm49q89j63o33ZvfysCKUGblrJfgqvA1R8nDbmPBxlqYuDHK
RWnevJJSY6xlykNKIyBj1D/oVBabBIli82n04nPseuFkRqJxg+PD6Wm5EyH0do6K
HBs2b6c3UmtBSWfZL+7+sFOtBB4SQIltLb3OCygMNMa1zFCCuLoQR9+0TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExl1xwdNe0HxvGHEV9q5sbicVAOMB8GA1UdIwQY
MBaAFMTdvZ8jCRkyG/VnBvEGk3eSYRn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE4yOW55TUpHVEliOVdjRzhRYVRkNUpoR2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lOWM4ZmUtYTY4Ny00OTUyLTlkODgt
YmZhYzkyOGJmNjU4LzEveE4yOW55TUpHVEliOVdjRzhRYVRkNUpoR2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lOWM4ZmUtYTY4Ny00OTUyLTlkODgtYmZhYzkyOGJmNjU4
LzEveE4yOW55TUpHVEliOVdjRzhRYVRkNUpoR2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzRs/y0F
1b4uZkvAtZUPv9qmRIJLjinOOnVH1QqPfLYbHWXeL/s5Qdcf7IFXw0Te1Vgj2h1f
XspM5wSv3zY4pR4KYhVoKHYIru+EnITyfmhaLYtjX1nWcfF//PfhTttBKAyTdoM0
zuFGAu1DoJ3PP1nEd+cD8XfqZVCv73TMcMCDDHqtPsswQOw3k6SPCBVj+PsbggwF
9pE+bI72PdO6Rlvxl4uPDlVSinYP/B2wlLskTSPyXh80iJYiLHYEXAGihmI2tIH3
+Pnz1XHnVZWSWVhZFcPNk5wTZNZ97XzeuA7VhxdrIMrbmIA3vlO+nJ7fkQCpppSv
5yJdHAJTdgH7+g==
-----END CERTIFICATE-----
Generated at Thu May 1 07:08:18 2025 by rpki-client