Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
File: xwy87PJahmXDWnjIIdEes6ZCNiE.mft (raw, json)
Hash identifier: wTKwXj4pq+BlIR+gUqoTbmcVlSBSDpGsTpwQsMqnysk=
Subject key identifier: 2D:E7:23:44:9A:AB:0E:7A:B0:83:FF:44:D0:7F:7B:17:8A:A0:3A:5D
Authority key identifier: C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21
Certificate issuer: /CN=c70cbcecf25a8665c35a78c821d11eb3a6423621
Certificate serial: 0194BD17552DF0D7F3B962E3D15EC8AF6806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: xwy87PJahmXDWnjIIdEes6ZCNiE.crl (hash: +/YsyyYGl/usrcH9BC4bbnTz5ZoLnptIT5IYnRU8jDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:55:2d:f0:d7:f3:b9:62:e3:d1:5e:c8:af:68:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c70cbcecf25a8665c35a78c821d11eb3a6423621
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=2de723449aab0e7ab083ff44d07f7b178aa03a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:74:7c:cd:5c:a4:8c:58:a2:ea:39:c3:de:
52:f7:b6:b8:e4:ed:d1:25:1e:e3:a5:79:01:e1:80:
71:9b:df:e4:47:19:80:c0:cc:3b:09:df:37:77:a3:
cf:b8:75:1f:61:bb:e0:51:b8:1e:d1:db:33:3a:35:
c8:c8:39:b6:7c:63:12:bf:c8:33:6d:d2:c0:59:be:
f8:fd:e6:a6:99:40:fd:45:c1:b4:f2:ee:e5:26:5b:
ab:e3:6d:1d:20:1e:60:ba:1d:7d:6e:7b:02:17:8e:
d1:3f:fc:20:8a:4a:ff:36:de:c0:f7:b2:b6:96:0f:
ef:8b:94:af:a1:bf:5b:79:38:35:86:ea:25:27:01:
fc:3e:0a:2f:32:dd:85:3a:fb:92:9e:94:d2:52:90:
43:56:8f:de:ee:2f:4c:39:4c:ef:38:10:9c:c8:06:
05:0b:6b:03:31:a8:e8:31:35:37:ba:c0:c9:d3:e0:
6c:ce:89:de:81:c0:3e:2e:42:79:ee:90:2d:44:d5:
60:af:88:11:2d:18:db:2f:9c:e3:57:64:8b:ce:84:
21:a3:dd:f3:5a:38:d7:e4:a6:2c:15:49:87:e9:37:
8a:fd:09:3b:65:be:32:13:b4:9d:b0:93:97:c1:4a:
8e:0e:8e:b1:4d:0b:8b:47:12:88:87:55:9d:3b:7c:
3f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E7:23:44:9A:AB:0E:7A:B0:83:FF:44:D0:7F:7B:17:8A:A0:3A:5D
X509v3 Authority Key Identifier:
keyid:C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fb:9d:08:9b:fb:a7:05:5e:d6:44:22:4f:bf:63:15:7e:08:
1f:43:99:3f:8b:bb:e9:36:c8:c0:14:56:25:fc:61:03:19:c7:
06:93:68:52:81:13:60:02:35:cf:ed:ec:c9:29:c2:5a:50:1a:
59:e7:f5:09:06:8c:e3:c8:92:75:26:83:36:59:b0:b9:0b:37:
15:a6:96:ed:21:90:37:9b:1d:93:b6:72:ec:a5:ac:59:95:75:
42:a7:c1:3d:72:8c:0b:7a:31:38:3e:6b:fc:a3:c8:9e:f9:25:
8c:9f:bf:a2:26:47:64:21:db:25:7e:cd:12:bc:f1:09:77:6e:
04:eb:8d:c1:ec:1c:58:72:5a:a0:57:d4:a4:c3:71:d6:07:ed:
4d:27:38:fe:1a:1e:a4:6e:39:dd:af:a7:b7:72:93:7d:df:7e:
0e:2b:30:68:66:16:a1:c8:ee:ff:1b:bf:a6:d2:15:6a:78:8a:
61:d3:9c:84:85:70:81:c5:8b:74:2b:b4:c8:f0:0b:03:8f:eb:
03:61:2d:1b:1e:63:fb:3a:61:85:99:6f:74:5c:f4:b6:a3:5b:
ab:cd:3c:02:48:17:a3:7d:89:1a:de:84:87:de:40:0b:1b:20:
17:8a:63:3c:03:3b:60:35:57:bc:87:63:5b:63:2f:95:88:ec:
ed:65:41:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F1Ut8NfzuWLj0V7Ir2gGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MGNiY2VjZjI1YTg2NjVjMzVhNzhjODIxZDExZWIzYTY0
MjM2MjEwHhcNMjUwMTMxMTYwMDEwWhcNMjUwMjAxMTYwMDEwWjAzMTEwLwYDVQQD
EygyZGU3MjM0NDlhYWIwZTdhYjA4M2ZmNDRkMDdmN2IxNzhhYTAzYTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVV0fM1cpIxYouo5w95S97a45O3R
JR7jpXkB4YBxm9/kRxmAwMw7Cd83d6PPuHUfYbvgUbge0dszOjXIyDm2fGMSv8gz
bdLAWb74/eammUD9RcG08u7lJlur420dIB5guh19bnsCF47RP/wgikr/Nt7A97K2
lg/vi5Svob9beTg1huolJwH8PgovMt2FOvuSnpTSUpBDVo/e7i9MOUzvOBCcyAYF
C2sDMajoMTU3usDJ0+BszonegcA+LkJ57pAtRNVgr4gRLRjbL5zjV2SLzoQho93z
WjjX5KYsFUmH6TeK/Qk7Zb4yE7SdsJOXwUqODo6xTQuLRxKIh1WdO3w/3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3nI0Saqw56sIP/RNB/exeKoDpdMB8GA1UdIwQY
MBaAFMcMvOzyWoZlw1p4yCHRHrOmQjYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHd5ODdQSmFobVhEV25qSUlkRWVzNlpDTmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82OGU2NTMtMThjNS00NDllLTk1ZDgt
ZTY5N2JiNTc2NGMzLzEveHd5ODdQSmFobVhEV25qSUlkRWVzNlpDTmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82OGU2NTMtMThjNS00NDllLTk1ZDgtZTY5N2JiNTc2NGMz
LzEveHd5ODdQSmFobVhEV25qSUlkRWVzNlpDTmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/udCJv7
pwVe1kQiT79jFX4IH0OZP4u76TbIwBRWJfxhAxnHBpNoUoETYAI1z+3sySnCWlAa
Wef1CQaM48iSdSaDNlmwuQs3FaaW7SGQN5sdk7Zy7KWsWZV1QqfBPXKMC3oxOD5r
/KPInvkljJ+/oiZHZCHbJX7NErzxCXduBOuNwewcWHJaoFfUpMNx1gftTSc4/hoe
pG453a+nt3KTfd9+DiswaGYWocju/xu/ptIVaniKYdOchIVwgcWLdCu0yPALA4/r
A2EtGx5j+zphhZlvdFz0tqNbq808AkgXo32JGt6Eh95ACxsgF4pjPAM7YDVXvIdj
W2MvlYjs7WVB7g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:33 2025 by rpki-client