Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
File: XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft (raw, json)
Hash identifier: YnPtcoXq9y0/lp9Znuc9261qm83tO0zuQz3P4dohfgk=
Subject key identifier: B3:7E:E6:13:4B:DF:95:3E:36:6A:D5:45:7D:0A:40:D4:6A:79:90:EA
Authority key identifier: 5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
Certificate issuer: /CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Certificate serial: 0194BD4E9AB35E1574F4A915089657F757AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
Manifest number: 04BA
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl (hash: UKYO6L/YjGwArNTrZDILLVwo0TACuUCMO3P6FqwclW4=)
2: _kNyIo0elab0AX-AZl6-Wfa7Vf4.roa (hash: wDY0OVb6O20WgRVNC3x/4ucGS15YyhNH0PrMxdCX/4c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9a:b3:5e:15:74:f4:a9:15:08:96:57:f7:57:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=b37ee6134bdf953e366ad5457d0a40d46a7990ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:90:7b:10:a7:13:22:e3:8c:2d:02:5b:42:4a:
2b:70:20:ed:f8:3b:ef:12:6b:59:49:39:34:02:2d:
40:87:2a:1b:a7:39:cb:03:ad:1b:aa:6b:2b:57:a7:
df:40:ec:35:bf:9f:f1:76:03:ff:ac:a7:ec:4f:85:
53:e0:1e:f8:88:f2:de:fe:c8:13:d7:0f:e1:40:67:
15:93:ff:19:62:e3:9a:a1:d0:61:42:88:2d:0e:35:
72:4d:5e:c0:e1:02:bd:a2:dc:99:71:ef:b0:63:d2:
1e:d4:48:fa:a2:9c:c8:cb:f7:52:2c:6d:f2:f0:49:
fc:b0:7d:88:71:a4:85:80:b7:98:ec:97:64:30:93:
81:3f:5e:0a:f9:03:5e:dc:bd:fe:48:2c:18:9f:4c:
26:b9:bb:54:75:0d:0f:b8:a7:f3:4f:44:d4:77:18:
f7:88:38:37:9c:db:54:e4:94:a1:1f:09:ae:38:55:
15:74:83:13:f6:66:f7:cf:86:db:bf:f8:76:6f:04:
d8:08:1b:93:1a:7f:6e:ff:a4:01:2c:b0:fb:e0:4e:
3e:65:eb:f3:38:6f:b9:d8:dd:a2:28:07:02:17:28:
a7:26:d5:1e:c2:35:d8:c3:ef:ba:35:cc:8a:29:4b:
ea:ce:9a:0c:be:4f:59:a5:57:3f:78:34:83:82:54:
64:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7E:E6:13:4B:DF:95:3E:36:6A:D5:45:7D:0A:40:D4:6A:79:90:EA
X509v3 Authority Key Identifier:
keyid:5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1d:fd:5b:85:4b:c2:fd:40:4e:3f:88:7e:79:cd:d9:60:16:
69:54:2c:3d:a1:9f:4c:d1:c5:93:c8:49:5d:c7:24:42:0c:ae:
4a:dd:8e:d2:89:2e:c3:1f:42:e3:01:02:f1:06:53:4a:3e:68:
ac:4f:8a:53:7f:6d:8e:4a:81:04:c0:81:8d:56:19:03:b0:57:
d0:32:7c:93:dd:08:f5:66:8b:6e:b0:eb:91:07:6a:cb:b9:08:
c7:6d:e9:9c:79:49:c9:0d:b4:50:eb:4c:0c:d0:74:7a:a9:6d:
31:99:a7:24:c4:57:28:0c:3c:6e:0a:31:71:73:a8:b6:b1:a6:
bb:ad:e9:89:be:ef:3c:29:f5:b1:92:d7:04:03:64:d8:39:93:
52:57:a7:37:7e:c1:a8:13:a1:9e:5f:60:28:ba:4d:b7:71:00:
14:bc:0d:b6:a3:82:ba:fd:5f:c8:f1:cb:16:eb:14:4f:66:49:
c2:ab:3c:d3:c0:91:b0:2a:19:77:c8:72:5a:e4:55:fc:79:20:
c7:b8:c2:5d:e4:c7:8c:b8:63:63:f3:98:57:1f:ad:03:b8:d0:
a1:80:7c:dd:7b:3e:49:92:f1:9d:02:a6:76:85:6c:ae:f9:18:
78:e9:70:1b:fa:97:f4:9f:19:15:6b:2a:1f:bc:3b:56:29:70:
4e:2f:41:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TpqzXhV09KkVCJZX91erMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZGU4ZTgxMzlmMmM4ZjYyZjg0ODJkMDFiMGFkYjg2YjJh
MWQxOTUwHhcNMjUwMTMxMTcwMDMyWhcNMjUwMjAxMTcwMDMyWjAzMTEwLwYDVQQD
EyhiMzdlZTYxMzRiZGY5NTNlMzY2YWQ1NDU3ZDBhNDBkNDZhNzk5MGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pB7EKcTIuOMLQJbQkorcCDt+Dvv
EmtZSTk0Ai1AhyobpznLA60bqmsrV6ffQOw1v5/xdgP/rKfsT4VT4B74iPLe/sgT
1w/hQGcVk/8ZYuOaodBhQogtDjVyTV7A4QK9otyZce+wY9Ie1Ej6opzIy/dSLG3y
8En8sH2IcaSFgLeY7JdkMJOBP14K+QNe3L3+SCwYn0wmubtUdQ0PuKfzT0TUdxj3
iDg3nNtU5JShHwmuOFUVdIMT9mb3z4bbv/h2bwTYCBuTGn9u/6QBLLD74E4+Zevz
OG+52N2iKAcCFyinJtUewjXYw++6NcyKKUvqzpoMvk9ZpVc/eDSDglRklQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLN+5hNL35U+NmrVRX0KQNRqeZDqMB8GA1UdIwQY
MBaAFFzejoE58sj2L4SC0BsK24ayodGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy81NjE4YTgtMGI2NC00MWU3LTliNzMt
MDM4OTE4ZWI3MjBmLzEvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy81NjE4YTgtMGI2NC00MWU3LTliNzMtMDM4OTE4ZWI3MjBm
LzEvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgh39W4VL
wv1ATj+IfnnN2WAWaVQsPaGfTNHFk8hJXcckQgyuSt2O0okuwx9C4wEC8QZTSj5o
rE+KU39tjkqBBMCBjVYZA7BX0DJ8k90I9WaLbrDrkQdqy7kIx23pnHlJyQ20UOtM
DNB0eqltMZmnJMRXKAw8bgoxcXOotrGmu63pib7vPCn1sZLXBANk2DmTUlenN37B
qBOhnl9gKLpNt3EAFLwNtqOCuv1fyPHLFusUT2ZJwqs808CRsCoZd8hyWuRV/Hkg
x7jCXeTHjLhjY/OYVx+tA7jQoYB83Xs+SZLxnQKmdoVsrvkYeOlwG/qX9J8ZFWsq
H7w7VilwTi9BoQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:24:07 2025 by rpki-client