Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
File: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft (raw, json)
Hash identifier: t9APNC+DFbj3UOLbM258JIEyVADqHb9XD0wuYyZa/nY=
Subject key identifier: E9:75:C6:7C:42:E3:E7:FB:35:E0:D9:88:FB:59:10:EA:6E:64:50:79
Authority key identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
Certificate issuer: /CN=5f2be62be753ba9929355b4ce988bae12af7272a
Certificate serial: 0194BD859A17FB30A9BDDB8A16A9346C1964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
Manifest number: 0383
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: ESLl-bZ97LqqEu-5c2cw2-HWsjE.roa (hash: Jxh/Q8xcc0uLDf1/zXrtw9NWQZKR5wMyKpRis33JWsQ=)
2: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl (hash: IYEHlD1DWO3b/M21+K9nzrtuOrmYhruRASFL3HEOu/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9a:17:fb:30:a9:bd:db:8a:16:a9:34:6c:19:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2be62be753ba9929355b4ce988bae12af7272a
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=e975c67c42e3e7fb35e0d988fb5910ea6e645079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:7d:be:f0:96:59:db:87:11:6b:95:28:33:
bf:a6:41:f7:79:13:1f:f5:d5:92:61:91:52:c2:e3:
8f:43:48:1e:07:ce:27:57:9e:19:21:97:89:49:47:
79:7e:d1:25:ec:05:9f:8a:a1:67:fa:c9:94:30:3b:
ae:56:4b:02:5b:87:11:2f:5a:c3:20:54:90:45:87:
2b:60:3b:49:c6:1d:6d:9b:5b:a5:4a:95:e4:ed:d7:
71:ad:e4:0d:ad:79:7d:d6:30:99:d5:c3:83:e4:bc:
d1:66:6e:ff:48:a4:c4:0e:7e:bb:51:6c:3b:6b:4a:
a2:e9:28:f4:7a:1b:78:45:c5:b1:39:65:3a:c1:31:
b2:ff:f4:17:f7:b2:5c:bf:4f:bb:34:08:4f:58:8f:
14:6f:fc:8e:39:05:66:a2:e8:2e:93:94:2e:12:29:
1e:d6:e6:52:7d:a6:d5:86:cc:10:31:47:41:d7:c3:
12:19:a4:45:2d:8f:a4:61:31:b2:3c:89:54:f0:2d:
63:fa:76:c9:90:00:ff:30:3d:84:02:78:34:bc:ca:
25:9d:1c:fd:40:c4:62:ef:6e:10:ef:f5:14:3e:d3:
a0:62:f2:64:f5:32:b4:30:a6:c9:f3:82:7e:f0:47:
8f:c4:64:2c:09:de:2b:c3:ca:23:55:35:64:92:55:
15:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:75:C6:7C:42:E3:E7:FB:35:E0:D9:88:FB:59:10:EA:6E:64:50:79
X509v3 Authority Key Identifier:
keyid:5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b8:d1:59:f2:5c:82:3d:b6:57:2a:7f:6f:e3:46:f5:f7:17:
a6:0f:5e:cf:7c:01:60:43:e9:dc:c2:59:39:62:eb:4f:9b:29:
df:dc:6a:a6:39:a8:fc:d2:72:8b:f7:0a:c0:b0:a0:39:82:1b:
a7:5b:82:64:75:1e:eb:67:89:6f:60:85:b4:b7:9e:df:db:a8:
1a:f8:b0:92:c1:68:96:09:0d:ff:f3:17:3c:c3:5e:46:a9:16:
00:f7:76:b1:2e:d1:ac:6f:ff:fb:12:53:3e:56:b8:c9:1b:35:
c3:d2:d0:04:14:b4:4e:2d:40:c3:7d:78:9c:bb:1f:0f:d5:2d:
52:af:9d:92:5b:df:f6:33:44:dc:9d:7c:b9:b8:66:f6:d4:ef:
ef:77:a3:c8:1f:3f:a5:e3:5c:47:56:3b:9f:1e:19:9e:51:5b:
4e:75:40:6c:18:be:41:ee:7b:51:2a:72:0d:11:7b:a2:b3:58:
f0:bc:09:59:bc:b4:f0:f4:17:79:05:89:67:e8:9f:2b:e0:80:
e1:a8:13:0d:d3:6b:c4:b9:a0:07:51:d3:93:47:9e:6d:2a:14:
b8:f1:54:a3:6d:a2:79:bd:69:14:f6:6d:6d:6c:55:b0:a3:f7:
bb:9c:35:2b:79:af:db:08:7a:a0:cf:be:b2:04:b9:9e:e2:a1:
45:ed:63:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZoX+zCpvduKFqk0bBlkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMmJlNjJiZTc1M2JhOTkyOTM1NWI0Y2U5ODhiYWUxMmFm
NzI3MmEwHhcNMjUwMTMxMTgwMDM3WhcNMjUwMjAxMTgwMDM3WjAzMTEwLwYDVQQD
EyhlOTc1YzY3YzQyZTNlN2ZiMzVlMGQ5ODhmYjU5MTBlYTZlNjQ1MDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiB9vvCWWduHEWuVKDO/pkH3eRMf
9dWSYZFSwuOPQ0geB84nV54ZIZeJSUd5ftEl7AWfiqFn+smUMDuuVksCW4cRL1rD
IFSQRYcrYDtJxh1tm1ulSpXk7ddxreQNrXl91jCZ1cOD5LzRZm7/SKTEDn67UWw7
a0qi6Sj0eht4RcWxOWU6wTGy//QX97Jcv0+7NAhPWI8Ub/yOOQVmouguk5QuEike
1uZSfabVhswQMUdB18MSGaRFLY+kYTGyPIlU8C1j+nbJkAD/MD2EAng0vMolnRz9
QMRi724Q7/UUPtOgYvJk9TK0MKbJ84J+8EePxGQsCd4rw8ojVTVkklUVfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOl1xnxC4+f7NeDZiPtZEOpuZFB5MB8GA1UdIwQY
MBaAFF8r5ivnU7qZKTVbTOmIuuEq9ycqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHl2bUstZFR1cGtwTlZ0TTZZaTY0U3IzSnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZGEyNjAtOWJjZi00ZjY3LWJmN2It
ZTUyMmNhZTYzNDcwLzEvWHl2bUstZFR1cGtwTlZ0TTZZaTY0U3IzSnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mZGEyNjAtOWJjZi00ZjY3LWJmN2ItZTUyMmNhZTYzNDcw
LzEvWHl2bUstZFR1cGtwTlZ0TTZZaTY0U3IzSnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbjRWfJc
gj22Vyp/b+NG9fcXpg9ez3wBYEPp3MJZOWLrT5sp39xqpjmo/NJyi/cKwLCgOYIb
p1uCZHUe62eJb2CFtLee39uoGviwksFolgkN//MXPMNeRqkWAPd2sS7RrG//+xJT
Pla4yRs1w9LQBBS0Ti1Aw314nLsfD9UtUq+dklvf9jNE3J18ubhm9tTv73ejyB8/
peNcR1Y7nx4ZnlFbTnVAbBi+Qe57USpyDRF7orNY8LwJWby08PQXeQWJZ+ifK+CA
4agTDdNrxLmgB1HTk0eebSoUuPFUo22ieb1pFPZtbWxVsKP3u5w1K3mv2wh6oM++
sgS5nuKhRe1j+A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:15 2025 by rpki-client