Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
File: XuTrnvjdNYniMt-P6HbyXOlwehQ.mft (raw, json)
Hash identifier: Tt6ofC/aqbdyC4dbLakaBmHd5CkaG0k0h5y3kEHa/6E=
Subject key identifier: 15:3D:34:63:17:66:60:FF:E0:8E:7B:56:4E:35:98:0B:46:C4:DA:82
Authority key identifier: 5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
Certificate issuer: /CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Certificate serial: 0194BD17F7B332E06DE7F281D8167346B75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: XuTrnvjdNYniMt-P6HbyXOlwehQ.crl (hash: SwyaLs87osDV+PNQxUSwMr9HnVgMtoJvINDdpJBGoZE=)
2: x05WrfG2zADa49P9m0Z4GCWBqnw.roa (hash: nYf6KTW49tj0mn1iQA6LN+Q+EJ2CseYMPtRfxDW4vn8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f7:b3:32:e0:6d:e7:f2:81:d8:16:73:46:b7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=153d3463176660ffe08e7b564e35980b46c4da82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:00:1b:27:81:c9:c3:2b:31:35:7f:72:a2:dd:
93:f9:f8:5d:0c:00:55:31:42:56:c9:f6:c6:9a:9a:
c3:83:ea:4c:b5:d6:2b:ef:83:82:85:39:29:05:17:
c7:af:78:32:d1:d0:92:59:8c:38:41:ac:aa:30:c2:
93:8d:6b:f1:ba:87:8f:f8:da:3b:24:db:31:f1:33:
89:4b:56:7c:ad:c1:ae:94:0b:ad:cc:62:4e:63:99:
49:70:f2:5e:4a:97:0c:a6:48:69:3c:92:de:b6:2e:
eb:61:82:37:2d:42:96:0c:f5:e9:f0:51:b8:4e:5a:
f1:7b:17:d4:92:ad:7b:dc:b9:1e:58:11:df:12:e9:
be:b4:31:1d:3d:10:eb:8c:ed:7e:4f:d6:a4:ed:91:
a8:e0:51:9f:f4:21:91:45:2a:1c:8b:f1:ae:e8:f3:
3a:59:f6:d4:82:1e:38:3d:a7:02:36:33:c1:51:bf:
32:98:2e:e0:bb:47:2e:f2:cd:c5:69:92:1d:f9:ee:
e9:68:22:fb:61:52:61:bc:2b:0c:59:66:29:3e:09:
9e:3e:4e:9a:e8:38:62:c5:39:d8:47:9f:9f:fc:20:
1b:f5:a0:d6:91:b4:fc:7c:9e:e5:d7:b4:c4:d0:e6:
81:ab:30:fe:98:ec:99:a9:94:b9:94:e3:a1:9d:07:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3D:34:63:17:66:60:FF:E0:8E:7B:56:4E:35:98:0B:46:C4:DA:82
X509v3 Authority Key Identifier:
keyid:5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:52:1f:de:b7:f2:7a:fd:39:78:f3:c7:e1:3f:ed:93:75:0b:
07:ed:d0:a8:1d:be:52:e7:c5:c0:c3:fe:03:60:6b:41:1e:20:
b7:3a:c7:40:f0:1f:f4:05:39:c4:6e:c6:41:a4:ae:7a:18:08:
21:e0:d9:ca:75:1c:a7:24:11:7b:ad:f5:97:b9:14:76:a6:73:
db:67:e3:dc:39:45:5a:3f:48:de:c8:df:d4:f6:65:42:2a:02:
1a:c5:6f:ca:12:f9:df:ce:fa:8b:82:5d:c6:6a:f9:23:43:39:
29:2a:38:e5:a6:7f:a9:04:dc:f4:94:18:a1:80:7b:65:ba:a9:
af:99:3e:65:33:c1:4d:bd:03:a6:77:62:05:c4:00:8c:cf:7e:
8c:c4:7b:cc:79:f8:d1:36:9b:c0:d4:1f:b3:6f:de:93:39:be:
6e:15:9b:28:ab:3e:38:29:36:f6:a6:29:46:f8:22:67:a5:bd:
4d:3f:a8:bf:ba:27:1b:41:61:c6:dd:a2:cb:5e:05:20:12:88:
a1:cd:d3:4e:f2:5d:b7:fe:a4:8f:42:38:70:7c:ac:04:e1:8c:
7b:cb:b9:18:78:d3:c5:e2:85:e8:97:8a:17:69:6d:fc:49:3a:
d9:43:ac:44:49:81:a1:f9:7d:5b:60:8f:32:e5:fb:ee:47:3d:
54:05:1c:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/ezMuBt5/KB2BZzRrdfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTRlYjllZjhkZDM1ODllMjMyZGY4ZmU4NzZmMjVjZTk3
MDdhMTQwHhcNMjUwMTMxMTYwMDUyWhcNMjUwMjAxMTYwMDUyWjAzMTEwLwYDVQQD
EygxNTNkMzQ2MzE3NjY2MGZmZTA4ZTdiNTY0ZTM1OTgwYjQ2YzRkYTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wAbJ4HJwysxNX9yot2T+fhdDABV
MUJWyfbGmprDg+pMtdYr74OChTkpBRfHr3gy0dCSWYw4QayqMMKTjWvxuoeP+No7
JNsx8TOJS1Z8rcGulAutzGJOY5lJcPJeSpcMpkhpPJLeti7rYYI3LUKWDPXp8FG4
TlrxexfUkq173LkeWBHfEum+tDEdPRDrjO1+T9ak7ZGo4FGf9CGRRSoci/Gu6PM6
WfbUgh44PacCNjPBUb8ymC7gu0cu8s3FaZId+e7paCL7YVJhvCsMWWYpPgmePk6a
6DhixTnYR5+f/CAb9aDWkbT8fJ7l17TE0OaBqzD+mOyZqZS5lOOhnQdJzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBU9NGMXZmD/4I57Vk41mAtGxNqCMB8GA1UdIwQY
MBaAFF7k65743TWJ4jLfj+h28lzpcHoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMmY4OTMtOTExZC00MGMwLThhYzIt
ZmQzZmYzNWYzNGE5LzEvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iMmY4OTMtOTExZC00MGMwLThhYzItZmQzZmYzNWYzNGE5
LzEvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVIf3rfy
ev05ePPH4T/tk3ULB+3QqB2+UufFwMP+A2BrQR4gtzrHQPAf9AU5xG7GQaSuehgI
IeDZynUcpyQRe631l7kUdqZz22fj3DlFWj9I3sjf1PZlQioCGsVvyhL53876i4Jd
xmr5I0M5KSo45aZ/qQTc9JQYoYB7Zbqpr5k+ZTPBTb0DpndiBcQAjM9+jMR7zHn4
0TabwNQfs2/ekzm+bhWbKKs+OCk29qYpRvgiZ6W9TT+ov7onG0Fhxt2iy14FIBKI
oc3TTvJdt/6kj0I4cHysBOGMe8u5GHjTxeKF6JeKF2lt/Ek62UOsREmBofl9W2CP
MuX77kc9VAUcdw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:27 2025 by rpki-client