Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: CG5aXMaXyotArrl2vMbYaeSYVTXR5oB+ljqv6R5BZv4=
Subject key identifier: B2:A6:DF:25:9C:FD:1B:BC:D8:35:AF:EB:32:84:95:1D:D3:DB:45:90
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 0194BD177B9E112C797921632FA04C32590F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 0813
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: Rd6wwfMPxazAs5nhcwJ5XTJpDwg3TblbH8//BQFQJHg=)
2: gSiRx4os8QFHcIb_8HNB1oNvcB4.roa (hash: xKETz16WqJ7ei2SjBEUSJgDLxyYrlv9+GX/GJKUW2iM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7b:9e:11:2c:79:79:21:63:2f:a0:4c:32:59:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=b2a6df259cfd1bbcd835afeb3284951dd3db4590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:e7:10:fa:e8:84:fb:1a:c7:1e:e2:44:93:
d5:45:54:1b:93:7c:00:bc:d3:7c:b7:13:54:e7:90:
82:1c:92:34:4d:a4:85:fb:56:5f:2b:ef:37:92:24:
50:11:3a:d8:0a:a2:6e:a2:15:d4:62:a9:48:b0:24:
09:01:68:b0:3b:ed:9f:4a:73:4a:e5:81:0f:9c:b7:
33:c6:ee:97:05:34:a7:4c:2f:d7:c5:24:be:ce:30:
c3:a3:bb:14:2a:7e:4d:a3:fd:bc:de:53:88:75:33:
6c:aa:d0:1a:54:f1:dd:95:32:56:16:73:98:e0:bc:
0b:0c:63:43:16:50:8e:3d:2d:2e:03:fa:13:49:a6:
80:2d:8b:63:d5:b9:78:51:18:ab:9c:2c:29:09:d9:
2e:38:9d:25:f2:aa:a1:68:44:3a:0f:b1:b0:17:2e:
cf:eb:ab:eb:55:76:55:69:cc:b5:45:db:1c:5e:b6:
7c:de:5e:d8:e2:7e:6f:53:7f:b2:e5:11:6b:14:e7:
a7:18:4e:fe:62:7d:3b:04:15:af:b0:3e:e6:05:7a:
a0:7f:af:22:49:1b:8c:64:1d:ab:bc:07:cd:0f:05:
df:3b:72:a2:ac:60:67:3b:a7:3b:cf:aa:08:cd:cf:
18:bc:bb:2f:2a:a9:c6:9b:fe:16:1a:e7:7c:7c:df:
bf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A6:DF:25:9C:FD:1B:BC:D8:35:AF:EB:32:84:95:1D:D3:DB:45:90
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:09:4a:b4:0c:e0:dc:5c:6d:02:f7:16:69:60:6b:23:ac:1d:
0e:d9:3a:73:26:00:dd:f0:7f:de:c5:b0:55:c5:99:f6:f3:ab:
cf:a7:f1:43:75:e9:ee:db:6a:fa:5a:4a:62:41:b0:18:ea:e0:
b6:f0:f0:86:f8:9d:f0:6f:49:c4:ae:59:dc:4c:ba:85:9c:dd:
17:f6:1c:17:c4:39:4c:f1:26:d0:d8:39:c4:4a:0b:97:82:c2:
88:b1:bf:7a:02:44:01:1d:a8:a7:f1:85:c7:61:e1:7c:de:e0:
22:8f:95:89:d6:86:e5:f5:f8:c6:23:07:29:3a:02:57:70:17:
1f:23:f1:bb:3f:1e:27:06:4c:fc:75:4b:87:f3:23:49:08:9d:
ea:72:a7:94:8e:cc:83:e9:f7:ae:66:6e:bb:bd:9d:a1:9a:71:
c4:76:6d:5f:53:36:08:2d:2a:e8:e9:f7:39:83:24:99:07:13:
1f:4f:a3:c1:d4:b2:51:14:91:9a:35:be:73:59:b7:67:8a:00:
b4:d7:6d:15:6c:60:39:e2:7f:37:03:4a:11:02:4d:70:2a:41:
ae:a6:bd:3e:04:58:58:12:9f:8b:f4:0b:cc:e3:41:17:65:66:
8d:d7:83:07:53:73:4e:fd:70:d4:f6:94:1a:bc:a3:98:c3:96:
71:0f:0c:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3ueESx5eSFjL6BMMlkPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlN2MxM2Y1ZmYxNjlhZmVkODI1Yjc1ZDhmYzA3N2FmY2E1
MGQ2YTEwHhcNMjUwMTMxMTYwMDIwWhcNMjUwMjAxMTYwMDIwWjAzMTEwLwYDVQQD
EyhiMmE2ZGYyNTljZmQxYmJjZDgzNWFmZWIzMjg0OTUxZGQzZGI0NTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoDnEProhPsaxx7iRJPVRVQbk3wA
vNN8txNU55CCHJI0TaSF+1ZfK+83kiRQETrYCqJuohXUYqlIsCQJAWiwO+2fSnNK
5YEPnLczxu6XBTSnTC/XxSS+zjDDo7sUKn5No/283lOIdTNsqtAaVPHdlTJWFnOY
4LwLDGNDFlCOPS0uA/oTSaaALYtj1bl4URirnCwpCdkuOJ0l8qqhaEQ6D7GwFy7P
66vrVXZVacy1RdscXrZ83l7Y4n5vU3+y5RFrFOenGE7+Yn07BBWvsD7mBXqgf68i
SRuMZB2rvAfNDwXfO3KirGBnO6c7z6oIzc8YvLsvKqnGm/4WGud8fN+/RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKm3yWc/Ru82DWv6zKElR3T20WQMB8GA1UdIwQY
MBaAFF58E/X/Fpr+2CW3XY/Ad6/KUNahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85NGY2NDItNTVmNy00YzFjLTgxZDQt
OWU1OWMxMTFhYTM4LzEvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85NGY2NDItNTVmNy00YzFjLTgxZDQtOWU1OWMxMTFhYTM4
LzEvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAlKtAzg
3FxtAvcWaWBrI6wdDtk6cyYA3fB/3sWwVcWZ9vOrz6fxQ3Xp7ttq+lpKYkGwGOrg
tvDwhvid8G9JxK5Z3Ey6hZzdF/YcF8Q5TPEm0Ng5xEoLl4LCiLG/egJEAR2op/GF
x2HhfN7gIo+VidaG5fX4xiMHKToCV3AXHyPxuz8eJwZM/HVLh/MjSQid6nKnlI7M
g+n3rmZuu72doZpxxHZtX1M2CC0q6On3OYMkmQcTH0+jwdSyURSRmjW+c1m3Z4oA
tNdtFWxgOeJ/NwNKEQJNcCpBrqa9PgRYWBKfi/QLzONBF2VmjdeDB1NzTv1w1PaU
GryjmMOWcQ8MkA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:23 2025 by rpki-client