Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File: xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier: nCBRMaAYGTLsRRvNnZveUeWFwO7gIyNkn2Zohx7mw0A=
Subject key identifier: 20:E2:0A:13:C0:00:0A:AE:56:24:6D:8E:16:EF:8D:B0:BC:9C:C9:23
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 0194BCE0CA9B463806AC05AD84B615244E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number: 135C
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: PzyzSWT4zWJ7K4Xqd4I7pv369ec.roa (hash: kQSQuA7MhqelhKVGJ/f7HDWMP3sBIAz6W/9i3q+k7jg=)
2: afz7BRJzqEPxj8BZVsdOin_5y-4.roa (hash: 8P/qRECRaiQdIehiJb8DPPkG7wuZbj1mnaUAo4ZwGHI=)
3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: e5aAzr0QZ2lGg1T0o7Rk0cS8anAn3EDypBQBysOwnBE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ca:9b:46:38:06:ac:05:ad:84:b6:15:24:4e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=20e20a13c0000aae56246d8e16ef8db0bc9cc923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:3c:31:06:82:4e:d2:b7:55:e3:ae:49:a6:
f4:73:50:7e:f7:84:84:9f:29:84:97:85:f3:18:89:
1b:38:82:e4:2e:ec:af:85:cc:ef:bc:89:24:1b:a5:
3a:c7:62:90:8e:79:39:7f:54:81:92:21:d1:fc:4a:
38:d1:7c:4b:55:53:f5:32:fa:b2:9b:8e:99:38:e9:
2e:f2:17:dd:4b:b6:a9:e4:df:29:72:b8:75:29:18:
e0:f5:a7:9c:67:ef:18:47:57:c0:45:bb:29:0f:e3:
ed:16:8e:46:b6:18:9b:74:12:54:32:20:cd:af:47:
f5:3e:46:33:c3:55:4d:77:da:3e:77:9e:62:8c:98:
7e:0a:71:03:c6:f2:c3:00:2c:78:e5:67:47:0d:9c:
81:61:b8:1c:ba:cb:99:d0:0c:2a:82:a8:5d:5d:94:
38:af:43:5d:18:fb:5b:5f:2d:99:06:79:20:6a:84:
36:b0:d2:58:00:fe:b3:dc:5f:e8:ac:bb:d5:bd:08:
45:d0:35:31:46:12:ff:ff:4a:a1:c4:27:f5:97:bf:
7a:2f:dd:85:d1:7d:8e:07:b6:68:6f:f0:aa:7a:da:
40:24:f6:29:f5:3f:18:01:c8:e5:21:4b:4c:55:46:
1a:87:c7:de:26:7d:22:a7:75:19:03:72:85:03:eb:
eb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E2:0A:13:C0:00:0A:AE:56:24:6D:8E:16:EF:8D:B0:BC:9C:C9:23
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:62:37:b3:9a:84:a0:fd:24:15:15:e3:03:90:cf:d0:40:d4:
6f:63:18:5b:b5:50:e1:23:c4:68:b7:92:25:16:ce:78:04:04:
db:7f:18:9f:8e:e2:27:46:0d:6b:66:68:7f:bf:fe:59:49:10:
0c:ae:40:6b:8f:92:63:46:0f:22:57:d0:b9:bd:48:24:e5:e5:
f8:e5:04:19:e4:2b:53:41:30:3f:f4:07:31:cd:db:7e:7f:dc:
ea:fc:98:fc:b6:4e:18:6e:73:00:e9:30:d2:53:a2:48:9a:5c:
a5:16:23:03:52:96:0e:a0:9d:44:17:20:7e:56:ac:69:ab:62:
3d:2c:bf:57:fd:73:aa:f9:50:7d:74:a1:d5:e0:b5:2c:a1:aa:
c2:aa:03:ff:7a:59:3d:b0:5e:5c:7e:90:1e:ff:b3:75:98:0f:
3b:21:c3:bb:63:ff:ee:07:df:48:94:4e:a0:37:20:c9:a5:69:
33:98:f7:31:de:18:bf:af:37:8e:ef:fe:f8:d2:72:cc:e2:cf:
3e:75:f1:57:13:4a:9e:a6:52:e2:52:27:75:19:8a:07:0c:56:
6d:5a:62:2b:02:19:2a:d9:7e:4f:89:3a:09:3f:a8:9d:46:bd:
83:3c:cc:98:27:8d:08:3d:49:e2:2f:c7:6c:56:fa:86:fd:6d:
d8:95:4f:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84MqbRjgGrAWthLYVJE4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NTNmNWUyMzA0MjBiYzRhNzBkMGE2MWRlM2I0N2RjZGEx
YThkMGUwHhcNMjUwMTMxMTUwMDM1WhcNMjUwMjAxMTUwMDM1WjAzMTEwLwYDVQQD
EygyMGUyMGExM2MwMDAwYWFlNTYyNDZkOGUxNmVmOGRiMGJjOWNjOTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMQ8MQaCTtK3VeOuSab0c1B+94SE
nymEl4XzGIkbOILkLuyvhczvvIkkG6U6x2KQjnk5f1SBkiHR/Eo40XxLVVP1Mvqy
m46ZOOku8hfdS7ap5N8pcrh1KRjg9aecZ+8YR1fARbspD+PtFo5GthibdBJUMiDN
r0f1PkYzw1VNd9o+d55ijJh+CnEDxvLDACx45WdHDZyBYbgcusuZ0AwqgqhdXZQ4
r0NdGPtbXy2ZBnkgaoQ2sNJYAP6z3F/orLvVvQhF0DUxRhL//0qhxCf1l796L92F
0X2OB7Zob/CqetpAJPYp9T8YAcjlIUtMVUYah8feJn0ip3UZA3KFA+vrKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDiChPAAAquViRtjhbvjbC8nMkjMB8GA1UdIwQY
MBaAFMRT9eIwQgvEpw0KYd47R9zaGo0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1Njkt
ZTZjZjE3Y2RkYTRmLzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1NjktZTZjZjE3Y2RkYTRm
LzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2I3s5qE
oP0kFRXjA5DP0EDUb2MYW7VQ4SPEaLeSJRbOeAQE238Yn47iJ0YNa2Zof7/+WUkQ
DK5Aa4+SY0YPIlfQub1IJOXl+OUEGeQrU0EwP/QHMc3bfn/c6vyY/LZOGG5zAOkw
0lOiSJpcpRYjA1KWDqCdRBcgflasaatiPSy/V/1zqvlQfXSh1eC1LKGqwqoD/3pZ
PbBeXH6QHv+zdZgPOyHDu2P/7gffSJROoDcgyaVpM5j3Md4Yv683ju/++NJyzOLP
PnXxVxNKnqZS4lIndRmKBwxWbVpiKwIZKtl+T4k6CT+onUa9gzzMmCeNCD1J4i/H
bFb6hv1t2JVPbA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:18 2025 by rpki-client