Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
File: XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft (raw, json)
Hash identifier: HzN/vhg2dGRFXlHTvG60QCTYIUrk649en6/ncg+uLK8=
Subject key identifier: FB:0B:45:F4:4C:4D:80:E4:42:2F:24:70:6B:D3:12:DC:40:0C:D0:69
Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
Certificate issuer: /CN=5d656b2013e851516b942fa90706c72090dcddef
Certificate serial: 0194BC72E367408C24E4D2127F903D21178D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl (hash: MkFM09uMNry+Li3z/wqi7yGxSdhgw4nXPFxDMjK0xGc=)
2: eE4dt64YbIc12mVCfO2vYEZbsAA.roa (hash: P8IHkCQWXy483d0oeppd6qsQK9bS8c+YRPET1f6MD4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e3:67:40:8c:24:e4:d2:12:7f:90:3d:21:17:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=fb0b45f44c4d80e4422f24706bd312dc400cd069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:79:9f:2c:fa:b7:29:e8:20:1c:44:49:2c:
7b:4e:d3:60:68:da:80:f4:51:c4:cb:93:25:d7:af:
f0:bf:b2:08:c0:70:68:9f:f4:76:d0:fe:4f:d7:df:
2f:f6:b0:c8:a3:18:4c:83:85:94:8a:39:68:58:a1:
7e:78:4e:64:bc:ad:83:d0:0b:d6:67:c5:c8:4f:16:
87:68:ee:f0:b8:bd:99:dd:cc:61:5b:8d:09:79:42:
ce:7c:f7:08:94:03:70:77:8f:b2:4d:85:2a:da:ba:
25:8e:01:42:07:69:47:ae:26:02:cc:c7:1b:7b:02:
c1:f3:60:7b:05:05:cd:5d:e4:3a:36:88:31:86:22:
1c:76:bd:ca:01:50:9c:66:10:1d:ab:27:d6:81:44:
fa:46:a3:19:34:f0:c9:88:23:88:27:71:f4:ac:8d:
8b:15:38:6d:28:47:1e:65:72:48:39:99:68:66:06:
d4:8c:a0:c0:79:26:6f:75:28:6c:5d:6c:bf:11:01:
f9:86:15:a6:d9:33:1a:78:c8:9e:3b:a1:b9:ec:c6:
54:da:f1:14:b3:e0:90:0f:09:5f:3f:1f:68:5c:2d:
ba:e4:76:28:6a:0f:79:e9:e9:ac:a5:25:26:76:56:
e8:fc:c0:73:c7:d2:11:2f:1d:96:80:37:9d:74:c0:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0B:45:F4:4C:4D:80:E4:42:2F:24:70:6B:D3:12:DC:40:0C:D0:69
X509v3 Authority Key Identifier:
keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:17:1a:d5:90:a5:fd:b1:0c:e6:83:db:a0:e3:a9:0a:aa:96:
74:db:a7:fe:10:1f:cb:b9:62:57:9c:84:b5:9e:3f:53:93:09:
e1:29:1e:33:5a:a1:8a:68:fa:9e:9e:c7:27:8e:75:cd:ec:84:
a1:b5:31:58:86:e9:ab:6e:07:f9:26:80:de:7f:6f:89:eb:47:
3d:71:0f:26:88:82:a2:4e:14:2e:25:5a:fc:87:84:10:eb:1b:
bc:f4:f6:00:44:2b:0b:ef:9e:88:95:3e:51:9e:47:2d:fa:71:
5f:03:21:a1:cc:ee:a7:f9:a3:2e:ea:34:f4:65:68:da:db:d5:
ca:1b:67:5d:e7:96:52:f4:7f:07:c6:9c:72:08:c0:d4:b9:73:
47:4e:41:90:33:7e:27:49:dd:f9:34:20:32:48:a6:f3:84:76:
80:7b:8f:13:ef:c1:74:8f:56:53:fd:9e:45:be:44:cd:09:fc:
2d:fc:11:e1:e6:e8:3b:93:4e:ad:a2:92:12:90:84:e3:c2:54:
af:0e:a8:4e:63:98:5b:27:32:5e:b2:35:6a:40:74:e9:59:f1:
73:32:22:de:b0:49:1a:af:7f:3b:8a:94:bc:f3:82:99:b4:f3:
b9:a8:2c:ce:4f:74:ef:fb:e8:50:6c:df:0e:ad:33:82:a7:46:
de:34:fb:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cuNnQIwk5NISf5A9IReNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNjU2YjIwMTNlODUxNTE2Yjk0MmZhOTA3MDZjNzIwOTBk
Y2RkZWYwHhcNMjUwMTMxMTMwMDMzWhcNMjUwMjAxMTMwMDMzWjAzMTEwLwYDVQQD
EyhmYjBiNDVmNDRjNGQ4MGU0NDIyZjI0NzA2YmQzMTJkYzQwMGNkMDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO15nyz6tynoIBxESSx7TtNgaNqA
9FHEy5Ml16/wv7IIwHBon/R20P5P198v9rDIoxhMg4WUijloWKF+eE5kvK2D0AvW
Z8XITxaHaO7wuL2Z3cxhW40JeULOfPcIlANwd4+yTYUq2roljgFCB2lHriYCzMcb
ewLB82B7BQXNXeQ6NogxhiIcdr3KAVCcZhAdqyfWgUT6RqMZNPDJiCOIJ3H0rI2L
FThtKEceZXJIOZloZgbUjKDAeSZvdShsXWy/EQH5hhWm2TMaeMieO6G57MZU2vEU
s+CQDwlfPx9oXC265HYoag956emspSUmdlbo/MBzx9IRLx2WgDeddMBH+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsLRfRMTYDkQi8kcGvTEtxADNBpMB8GA1UdIwQY
MBaAFF1layAT6FFRa5QvqQcGxyCQ3N3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDIt
NDdhOWY5NmNhNTg2LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDItNDdhOWY5NmNhNTg2
LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtxca1ZCl
/bEM5oPboOOpCqqWdNun/hAfy7liV5yEtZ4/U5MJ4SkeM1qhimj6np7HJ451zeyE
obUxWIbpq24H+SaA3n9vietHPXEPJoiCok4ULiVa/IeEEOsbvPT2AEQrC++eiJU+
UZ5HLfpxXwMhoczup/mjLuo09GVo2tvVyhtnXeeWUvR/B8accgjA1LlzR05BkDN+
J0nd+TQgMkim84R2gHuPE+/BdI9WU/2eRb5EzQn8LfwR4eboO5NOraKSEpCE48JU
rw6oTmOYWycyXrI1akB06VnxczIi3rBJGq9/O4qUvPOCmbTzuagszk907/voUGzf
Dq0zgqdG3jT7gg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:38 2025 by rpki-client