Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
File: S_xaKUEPH_z03ipacFj1FiCzC3k.mft (raw, json)
Hash identifier: eX47sahXkqFV8nb3dAPqhlqk8bKRhooRDwOHqc6Yihs=
Subject key identifier: DA:BD:29:C6:01:8C:44:9C:42:31:D5:CA:F0:D6:54:18:04:04:A5:1F
Authority key identifier: 4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
Certificate issuer: /CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Certificate serial: 0194BCE0E4A287CB605A6F5C6D9E2848E2E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
Manifest number: 0BDD
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: S_xaKUEPH_z03ipacFj1FiCzC3k.crl (hash: cDwPgsI5WPcvZ9mqa16+5uqZ9N3pVIl82eexzhNpVGY=)
2: bgx026u65bEUIofoNprJyhzn_S4.roa (hash: mkA02/DFrwmq5MSNIOugSkJaE1Y0Xy5Utto0dixWmsQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e4:a2:87:cb:60:5a:6f:5c:6d:9e:28:48:e2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=dabd29c6018c449c4231d5caf0d654180404a51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:0f:92:55:69:7e:28:31:95:fa:b4:ef:4b:
6b:47:3c:16:ae:a2:3d:e3:84:4d:61:6f:7e:21:b2:
9d:00:7f:49:03:8e:83:47:cd:b4:19:10:78:4a:86:
81:6c:a6:08:f6:98:20:f6:b6:c7:8e:80:00:18:bd:
d2:7c:ee:c5:5a:b4:63:91:47:dd:8f:12:03:ca:ea:
bb:fa:51:a8:aa:3d:0b:14:b9:81:8c:d4:dd:f2:ff:
f8:c0:a9:ea:20:e5:7f:70:5b:ab:37:d8:cb:2e:97:
a3:cc:35:9e:ab:93:cc:dc:03:f5:93:98:62:cd:fc:
13:11:91:ff:44:8e:5d:6f:18:a7:8e:f7:ba:b9:53:
a3:2d:eb:21:83:20:80:db:a7:9f:c3:6a:68:fe:fe:
a6:85:5f:3a:ea:ee:d1:32:0d:0d:2b:ec:62:cd:3c:
e6:57:3f:1b:7b:dc:a5:b6:0b:dc:f6:a3:4b:1d:25:
9b:cf:51:b9:80:3d:b2:4b:1d:33:90:e0:e1:e9:a5:
ea:05:4f:83:d3:34:85:c1:d4:c5:4e:1c:b0:a6:39:
44:61:86:2e:4e:28:bb:e8:c9:36:b7:50:66:95:59:
23:93:57:13:c2:dd:29:a5:0e:9c:c8:83:c2:98:e0:
fb:22:32:14:b3:71:10:e2:27:ef:3e:5f:84:83:36:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BD:29:C6:01:8C:44:9C:42:31:D5:CA:F0:D6:54:18:04:04:A5:1F
X509v3 Authority Key Identifier:
keyid:4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4a:1d:16:8b:a0:f5:ed:f4:4c:dc:89:6e:41:c7:35:01:be:
33:07:45:4f:1f:6e:f1:d1:06:6f:b8:55:7e:2f:d2:c4:06:9a:
1d:a7:24:d4:23:a1:01:54:4b:90:08:61:06:b1:b5:a6:87:c3:
8e:ba:4d:50:08:5d:b9:af:e2:e8:d3:04:25:10:fe:48:4c:37:
99:3c:80:52:0e:00:a6:2e:af:2b:fa:78:aa:c1:9f:d2:55:8b:
98:ba:59:0f:c9:c6:2b:16:79:3b:38:e0:71:ec:d8:8b:74:63:
fe:be:01:e0:71:94:4c:ce:1f:43:c0:cf:c8:a5:dd:96:7e:10:
30:8f:4d:4b:fa:23:bf:43:d0:0f:2d:4c:e2:14:b8:05:fc:10:
04:cc:44:81:63:56:57:2a:2a:4b:bb:3e:02:43:ab:3f:23:65:
ac:e9:63:27:71:b5:ba:c3:db:dc:41:66:a2:53:a0:00:76:16:
da:dc:f1:cd:de:e8:40:93:32:f5:e2:78:4d:f4:49:90:a7:14:
00:b9:f9:b8:77:0f:fb:ba:41:80:17:5d:42:95:cd:c4:d3:ce:
d7:0a:7b:2d:44:a8:bd:78:61:e2:55:d5:b4:08:93:fe:18:58:
e7:27:22:f5:f1:a4:0f:ca:90:d8:41:ed:77:7f:e9:84:66:cd:
08:74:db:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OSih8tgWm9cbZ4oSOLlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZmM1YTI5NDEwZjFmZmNmNGRlMmE1YTcwNThmNTE2MjBi
MzBiNzkwHhcNMjUwMTMxMTUwMDQyWhcNMjUwMjAxMTUwMDQyWjAzMTEwLwYDVQQD
EyhkYWJkMjljNjAxOGM0NDljNDIzMWQ1Y2FmMGQ2NTQxODA0MDRhNTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQAPklVpfigxlfq070trRzwWrqI9
44RNYW9+IbKdAH9JA46DR820GRB4SoaBbKYI9pgg9rbHjoAAGL3SfO7FWrRjkUfd
jxIDyuq7+lGoqj0LFLmBjNTd8v/4wKnqIOV/cFurN9jLLpejzDWeq5PM3AP1k5hi
zfwTEZH/RI5dbxinjve6uVOjLeshgyCA26efw2po/v6mhV866u7RMg0NK+xizTzm
Vz8be9yltgvc9qNLHSWbz1G5gD2ySx0zkODh6aXqBU+D0zSFwdTFThywpjlEYYYu
Tii76Mk2t1BmlVkjk1cTwt0ppQ6cyIPCmOD7IjIUs3EQ4ifvPl+EgzaKJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNq9KcYBjEScQjHVyvDWVBgEBKUfMB8GA1UdIwQY
MBaAFEv8WilBDx/89N4qWnBY9RYgswt5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjJiZmQtNjBlYi00Y2JmLTlmN2Yt
MTM2MjU3ZTMwNzZlLzEvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8zYjJiZmQtNjBlYi00Y2JmLTlmN2YtMTM2MjU3ZTMwNzZl
LzEvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkodFoug
9e30TNyJbkHHNQG+MwdFTx9u8dEGb7hVfi/SxAaaHack1COhAVRLkAhhBrG1pofD
jrpNUAhdua/i6NMEJRD+SEw3mTyAUg4Api6vK/p4qsGf0lWLmLpZD8nGKxZ5Ozjg
cezYi3Rj/r4B4HGUTM4fQ8DPyKXdln4QMI9NS/ojv0PQDy1M4hS4BfwQBMxEgWNW
VyoqS7s+AkOrPyNlrOljJ3G1usPb3EFmolOgAHYW2tzxzd7oQJMy9eJ4TfRJkKcU
ALn5uHcP+7pBgBddQpXNxNPO1wp7LUSovXhh4lXVtAiT/hhY5yci9fGkD8qQ2EHt
d3/phGbNCHTbCA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:54 2025 by rpki-client