Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
File: XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft (raw, json)
Hash identifier: O8PHyoevr7pPHqjP14+Qewa4+JctWnoF8yYYEQhhr1o=
Subject key identifier: 15:31:61:DC:75:99:15:BC:70:63:A0:6A:14:76:6C:AB:BA:96:99:FE
Authority key identifier: 5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
Certificate issuer: /CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Certificate serial: 0194BC3C9BFD35349D5EF5F9F017D4FF3B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
Manifest number: 0EC5
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: Cla5c1NehU4owZxYbWxe5QAstj0.roa (hash: kJV6jFD/Rf8rBVTNLGsW3TqMX9jv4tuD1CIR8TuTHbQ=)
2: XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl (hash: 3IHDsx9fsa4O+a0/zuNuitd9fKbwPWNhwQatdwx2grk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9b:fd:35:34:9d:5e:f5:f9:f0:17:d4:ff:3b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=153161dc759915bc7063a06a14766cabba9699fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:7b:fa:f0:69:07:ab:be:a9:d9:2d:11:03:
1e:43:51:00:fb:39:a0:93:cf:64:b5:ea:85:d4:52:
2e:31:9f:c9:32:22:aa:31:15:92:eb:58:79:97:91:
b5:26:19:77:0a:da:10:76:82:23:ab:91:38:a5:9f:
0b:c0:3c:8c:cc:06:0c:a6:4a:0f:a6:25:2d:ae:a5:
b2:7b:1f:34:83:93:dc:ba:0e:88:c3:98:04:41:c8:
74:58:6f:91:a7:23:6a:9a:49:0c:f5:1f:58:d2:a9:
9a:b2:7e:ca:63:e3:6f:09:dc:bc:04:df:ac:81:99:
bc:d5:98:17:a3:b5:f5:66:5e:41:76:34:16:f7:15:
f9:8f:58:81:30:e0:08:a4:50:41:40:38:70:59:a8:
0b:ba:ee:88:7f:cd:6f:d8:1b:96:f1:a4:63:50:21:
89:dd:2f:51:53:42:c7:2b:e1:b8:35:44:5a:86:f8:
a6:86:4b:64:80:c0:fe:7f:02:71:75:83:0c:d0:71:
c3:82:6b:2c:3a:2a:91:a1:2c:a8:3f:69:53:b8:ed:
da:a7:0f:72:ea:e1:48:1d:a3:fb:d5:ba:35:01:65:
e7:ac:a4:64:ee:74:40:09:a2:d3:04:41:59:ca:9e:
e8:e5:40:10:2e:5b:bd:14:91:57:11:27:72:22:cc:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:31:61:DC:75:99:15:BC:70:63:A0:6A:14:76:6C:AB:BA:96:99:FE
X509v3 Authority Key Identifier:
keyid:5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d2:f6:f3:59:38:c3:04:14:f0:2a:96:ba:1d:02:c0:4b:44:
bd:a6:f4:24:ea:16:78:f5:4e:57:5e:0c:e6:2a:4e:38:dd:51:
f3:a1:15:ad:8a:d0:f6:6b:f9:e9:bd:0a:3a:46:bd:9f:18:5c:
09:c9:18:2a:e1:99:4f:98:99:fc:06:6f:4a:ac:99:1f:ef:66:
61:0f:8d:be:be:0d:e8:c9:52:2c:c2:19:7b:f0:8f:11:a3:b9:
52:52:3a:01:f0:f1:bb:ad:ac:0e:83:e5:c5:10:01:ec:6c:c1:
a0:62:a4:cf:8d:48:72:93:59:91:0d:49:f3:a2:d1:54:48:1d:
f3:62:73:b5:14:87:24:ad:bb:82:7d:91:3a:8d:f1:e1:05:3e:
17:9a:fb:24:d3:ce:50:cb:3b:49:91:e4:ad:d6:2d:d5:ae:7b:
81:8b:12:ab:c0:6b:b5:6f:61:b4:56:e8:63:77:9d:64:f9:d6:
c3:a8:2c:05:c2:81:85:51:a0:0a:aa:fe:25:ae:2d:bb:cb:1c:
3f:98:d4:de:f5:42:7e:25:07:84:28:d9:9f:db:97:d3:dc:8f:
2c:88:87:7e:c1:64:8d:d8:19:58:8f:04:f3:56:0b:c0:ee:56:
81:eb:e7:81:04:8a:2a:a8:df:27:d4:21:10:cc:72:62:43:a1:
77:cd:6c:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJv9NTSdXvX58BfU/zuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNjM3M2Y1ZGY5OWQ4MjFkY2I1N2M3ZmI5MjAyZmI0Njg2
ZTVkNjEwHhcNMjUwMTMxMTIwMTE2WhcNMjUwMjAxMTIwMTE2WjAzMTEwLwYDVQQD
EygxNTMxNjFkYzc1OTkxNWJjNzA2M2EwNmExNDc2NmNhYmJhOTY5OWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwd7+vBpB6u+qdktEQMeQ1EA+zmg
k89kteqF1FIuMZ/JMiKqMRWS61h5l5G1Jhl3CtoQdoIjq5E4pZ8LwDyMzAYMpkoP
piUtrqWyex80g5Pcug6Iw5gEQch0WG+RpyNqmkkM9R9Y0qmasn7KY+NvCdy8BN+s
gZm81ZgXo7X1Zl5BdjQW9xX5j1iBMOAIpFBBQDhwWagLuu6If81v2BuW8aRjUCGJ
3S9RU0LHK+G4NURahvimhktkgMD+fwJxdYMM0HHDgmssOiqRoSyoP2lTuO3apw9y
6uFIHaP71bo1AWXnrKRk7nRACaLTBEFZyp7o5UAQLlu9FJFXESdyIsykNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUxYdx1mRW8cGOgahR2bKu6lpn+MB8GA1UdIwQY
MBaAFF1jc/Xfmdgh3LV8f7kgL7Robl1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdOejlkLVoyQ0hjdFh4X3VTQXZ0R2h1WFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wYzkxMjgtYTA0My00NzhjLTk5MjAt
YWQyMTUyODVjODY0LzEvWFdOejlkLVoyQ0hjdFh4X3VTQXZ0R2h1WFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wYzkxMjgtYTA0My00NzhjLTk5MjAtYWQyMTUyODVjODY0
LzEvWFdOejlkLVoyQ0hjdFh4X3VTQXZ0R2h1WFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9L281k4
wwQU8CqWuh0CwEtEvab0JOoWePVOV14M5ipOON1R86EVrYrQ9mv56b0KOka9nxhc
CckYKuGZT5iZ/AZvSqyZH+9mYQ+Nvr4N6MlSLMIZe/CPEaO5UlI6AfDxu62sDoPl
xRAB7GzBoGKkz41IcpNZkQ1J86LRVEgd82JztRSHJK27gn2ROo3x4QU+F5r7JNPO
UMs7SZHkrdYt1a57gYsSq8BrtW9htFboY3edZPnWw6gsBcKBhVGgCqr+Ja4tu8sc
P5jU3vVCfiUHhCjZn9uX09yPLIiHfsFkjdgZWI8E81YLwO5WgevngQSKKqjfJ9Qh
EMxyYkOhd81sLQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:04 2025 by rpki-client