Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
File: XOsOvYeLd9QvLKndCPcMMjxdA9s.mft (raw, json)
Hash identifier: srxvvAyRxa0lUKYOI8FFZ/QkV3L7udkTIu1nLNimaE8=
Subject key identifier: 69:24:84:D0:AD:CF:41:D0:95:BC:47:AC:BF:33:36:D1:64:D1:91:A1
Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Certificate serial: 0194BBCDAF3C0D7CE5768748143C2FB7AC90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
Manifest number: 0D48
Signing time: Fri 31 Jan 2025 10:00:06 +0000
Manifest this update: Fri 31 Jan 2025 10:00:06 +0000
Manifest next update: Sat 01 Feb 2025 10:00:06 +0000
Files and hashes: 1: RACkLgbLLbmOoJBt91BZdfyl6A0.roa (hash: MZ4vzxaGNc7jn7F682fp+i7yjq4zVlNk1kc4N8fk1T0=)
2: XOsOvYeLd9QvLKndCPcMMjxdA9s.crl (hash: uJimTFV10SiT+kuuXSm9OdFh3NAELxFxYG6WrRtcAc4=)
3: atQq239lyy1_USnx5HxIvR_xCQ0.roa (hash: 2VBlcsxe+dkdGVdmp9n4L26XGB1hz2kRzV8Tog1oGdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:af:3c:0d:7c:e5:76:87:48:14:3c:2f:b7:ac:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Validity
Not Before: Jan 31 10:00:06 2025 GMT
Not After : Feb 1 10:00:06 2025 GMT
Subject: CN=692484d0adcf41d095bc47acbf3336d164d191a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:02:ed:b5:89:98:d7:9d:0e:2a:79:92:e2:ee:
17:31:b5:49:a5:df:7d:e5:6d:1b:ea:96:fe:86:79:
f9:0f:eb:8e:88:9c:9f:bf:a9:49:c3:4c:74:d4:1c:
1f:d0:ec:98:94:79:d1:e2:2f:0a:8e:d6:b0:a4:6c:
d3:cb:ce:5f:d3:e4:17:52:5e:e1:81:c6:99:12:d4:
e3:6c:95:02:34:3f:08:13:28:4b:7a:76:4b:7c:2d:
32:d9:df:a6:92:ae:e3:18:f9:c4:a3:e3:bc:ff:de:
93:e3:d9:5e:93:eb:d6:96:cd:52:3c:76:1c:27:9d:
cc:c9:04:11:9f:3a:dc:c2:59:8c:d6:3e:c0:db:23:
88:7d:63:4a:ab:a5:68:b6:0a:55:f1:07:d4:f4:f2:
93:b2:ff:2c:00:fa:84:42:00:6b:fa:84:0c:81:62:
46:7b:2d:30:f7:f8:2e:14:8d:f5:b4:41:59:60:e9:
f6:da:e8:4b:12:44:bd:30:bd:a7:a5:86:25:56:3e:
c2:93:69:d7:f8:94:46:df:3d:32:84:ac:0a:8b:97:
46:e1:c3:50:d5:bd:b1:e7:b7:66:d2:d7:43:17:29:
1f:94:4e:50:fa:4e:fb:a6:f3:9d:33:e6:4d:de:f6:
96:2c:d0:69:ae:ad:f5:c4:7f:7f:a1:af:98:fb:b3:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:24:84:D0:AD:CF:41:D0:95:BC:47:AC:BF:33:36:D1:64:D1:91:A1
X509v3 Authority Key Identifier:
keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cb:82:3d:a9:ae:4c:05:e6:68:ea:2e:bc:08:35:1c:06:30:
52:06:10:80:f5:b3:8b:2e:bc:82:28:4b:c4:66:08:23:76:43:
eb:ea:0c:9e:2a:0c:83:a1:e4:bb:c9:48:29:8a:db:18:6b:93:
58:93:4c:f1:09:01:77:2e:2d:85:75:12:cb:f0:9e:f7:78:a4:
f2:71:34:4c:2f:18:ed:c1:4c:52:19:1e:d7:04:44:cb:2a:1a:
bc:ff:6c:a7:d2:80:76:79:88:cc:c1:24:8c:43:a4:bb:c7:74:
22:79:b1:a2:02:b5:1a:51:f3:e5:a9:df:3c:54:c8:67:61:d3:
a4:ab:20:60:2a:71:19:99:56:62:ea:0e:5b:a1:1c:35:25:0d:
a0:0f:e7:ea:bc:69:33:32:1b:3a:10:1c:e1:aa:bd:a0:1a:55:
70:b5:b5:d6:5c:c6:d1:31:da:f9:ee:10:e8:b1:9b:32:0f:98:
1f:6f:cf:f8:cc:62:5c:90:14:82:5f:be:1f:54:a9:dd:f4:2a:
1c:28:ab:ae:55:1b:ad:4c:c8:fa:a1:3e:fd:33:fc:2c:23:5b:
24:24:8f:9c:46:96:4b:01:fd:ed:99:b5:c3:f8:b8:23:64:94:
4f:b5:29:8a:4e:5e:f7:b7:b6:7d:46:96:f2:45:66:99:9e:69:
e6:c5:44:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7za88DXzldodIFDwvt6yQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZWIwZWJkODc4Yjc3ZDQyZjJjYTlkZDA4ZjcwYzMyM2M1
ZDAzZGIwHhcNMjUwMTMxMTAwMDA2WhcNMjUwMjAxMTAwMDA2WjAzMTEwLwYDVQQD
Eyg2OTI0ODRkMGFkY2Y0MWQwOTViYzQ3YWNiZjMzMzZkMTY0ZDE5MWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gLttYmY150OKnmS4u4XMbVJpd99
5W0b6pb+hnn5D+uOiJyfv6lJw0x01Bwf0OyYlHnR4i8KjtawpGzTy85f0+QXUl7h
gcaZEtTjbJUCND8IEyhLenZLfC0y2d+mkq7jGPnEo+O8/96T49lek+vWls1SPHYc
J53MyQQRnzrcwlmM1j7A2yOIfWNKq6VotgpV8QfU9PKTsv8sAPqEQgBr+oQMgWJG
ey0w9/guFI31tEFZYOn22uhLEkS9ML2npYYlVj7Ck2nX+JRG3z0yhKwKi5dG4cNQ
1b2x57dm0tdDFykflE5Q+k77pvOdM+ZN3vaWLNBprq31xH9/oa+Y+7PvdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkkhNCtz0HQlbxHrL8zNtFk0ZGhMB8GA1UdIwQY
MBaAFFzrDr2Hi3fULyyp3Qj3DDI8XQPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8zZTcyZWQtMWQ2NS00OTgyLWFkOWEt
OWMzNzQ3OGE1OTNmLzEvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8zZTcyZWQtMWQ2NS00OTgyLWFkOWEtOWMzNzQ3OGE1OTNm
LzEvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcuCPamu
TAXmaOouvAg1HAYwUgYQgPWziy68gihLxGYII3ZD6+oMnioMg6Hku8lIKYrbGGuT
WJNM8QkBdy4thXUSy/Ce93ik8nE0TC8Y7cFMUhke1wREyyoavP9sp9KAdnmIzMEk
jEOku8d0InmxogK1GlHz5anfPFTIZ2HTpKsgYCpxGZlWYuoOW6EcNSUNoA/n6rxp
MzIbOhAc4aq9oBpVcLW11lzG0THa+e4Q6LGbMg+YH2/P+MxiXJAUgl++H1Sp3fQq
HCirrlUbrUzI+qE+/TP8LCNbJCSPnEaWSwH97Zm1w/i4I2SUT7Upik5e97e2fUaW
8kVmmZ5p5sVEqQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:08 2025 by rpki-client