Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
File: xcidUmDLNP27s7wlv0rbr0zcaKA.mft (raw, json)
Hash identifier: zI6W7Zh2soc6+vczDgXJO/fL1UPS3b5Uwsnb9cTAmIs=
Subject key identifier: 1C:0F:14:8D:43:C4:EE:B9:79:0F:E2:D9:F1:AC:13:CE:4A:D3:DE:AD
Authority key identifier: C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0
Certificate issuer: /CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
Certificate serial: 0194BBCDD68F335C99A68C2B57C8EAB4685F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
Manifest number: 03E6
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: xcidUmDLNP27s7wlv0rbr0zcaKA.crl (hash: wovqePiWjzy+sTq0hxH4CUXbCvwFJ/jmBsnVEVAyViY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d6:8f:33:5c:99:a6:8c:2b:57:c8:ea:b4:68:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=1c0f148d43c4eeb9790fe2d9f1ac13ce4ad3dead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:e5:b1:da:54:3f:bb:0d:68:04:05:4d:88:
01:03:bc:41:38:c2:45:f6:dc:10:07:71:e4:0f:b1:
21:e3:f6:98:f6:09:4b:c6:e7:db:81:22:49:f5:07:
5b:d1:b8:eb:e6:25:3d:e5:b7:a0:14:3e:41:d1:c1:
0c:81:53:e3:09:e4:1e:87:6f:07:1b:22:92:4b:0e:
54:67:86:08:c3:fd:ec:aa:3d:a0:22:26:85:32:e3:
7f:78:42:aa:47:28:f1:30:c2:a4:05:64:11:df:c6:
1e:8e:7b:33:04:a2:d8:1f:9e:64:5e:4c:b3:2b:cc:
02:ee:c2:9d:53:0d:85:64:b8:64:1f:f5:94:e3:f7:
e4:ca:3f:33:e7:55:4c:52:62:ac:a1:05:35:eb:50:
56:b2:f0:92:c1:25:61:64:2b:e9:cd:b3:7f:d2:8a:
4e:e4:01:64:41:aa:9b:34:20:0f:a1:4f:bc:15:e0:
71:12:f7:7a:cd:c8:a9:b9:9e:37:4e:cb:dd:b4:9f:
0b:3f:06:44:74:c6:ea:7d:67:2a:1c:71:31:9b:db:
8a:f1:2f:81:64:a1:08:92:0e:98:d3:b6:d0:a5:f6:
09:d9:61:dd:0d:21:88:12:a3:4c:b5:1b:70:52:b6:
e3:06:be:e1:c3:6e:01:e1:ff:52:c3:4d:bf:29:a2:
e3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0F:14:8D:43:C4:EE:B9:79:0F:E2:D9:F1:AC:13:CE:4A:D3:DE:AD
X509v3 Authority Key Identifier:
keyid:C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:07:2e:9a:cf:cd:1b:53:8b:0d:1a:06:cc:22:65:23:84:33:
f3:68:33:c5:ef:3a:52:e7:b5:d1:cb:e9:d6:de:50:ea:04:ba:
bc:08:72:3d:12:52:1e:66:db:93:48:65:a3:13:91:6a:f5:44:
d9:c6:6f:4c:e2:3d:1f:d1:7b:3a:3a:93:b1:97:72:8e:b4:3a:
15:24:43:d6:ca:58:48:fa:a1:dc:64:d7:9a:4f:c8:8b:a9:d4:
0e:75:28:30:fb:28:9d:3b:63:94:ae:d8:43:96:dd:5e:cb:be:
77:75:62:53:d1:44:04:36:56:86:d6:7b:27:72:39:b2:d1:31:
34:b8:02:e1:88:e8:eb:80:84:e3:fa:d0:2d:81:df:86:6d:19:
18:09:67:27:e1:e4:6b:9d:ab:88:9f:ab:42:16:8c:b9:f9:bc:
b8:51:9d:e3:b7:16:bb:ee:a0:40:2e:fc:04:cb:2c:41:c5:97:
5c:57:c1:e8:36:de:e0:14:a8:cd:8d:20:ee:5b:66:55:67:09:
9a:3b:9f:ca:22:28:c8:c1:86:68:dd:9d:95:a6:50:b1:15:c4:
a2:de:a8:77:29:bc:bd:1c:4a:dc:f7:11:c4:70:00:f5:ba:b2:
b9:b4:54:4a:28:29:cb:dc:07:31:ae:9e:ae:ad:5a:5e:ec:8f:
7b:4e:6c:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdaPM1yZpowrV8jqtGhfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1Yzg5ZDUyNjBjYjM0ZmRiYmIzYmMyNWJmNGFkYmFmNGNk
YzY4YTAwHhcNMjUwMTMxMTAwMDE2WhcNMjUwMjAxMTAwMDE2WjAzMTEwLwYDVQQD
EygxYzBmMTQ4ZDQzYzRlZWI5NzkwZmUyZDlmMWFjMTNjZTRhZDNkZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1HlsdpUP7sNaAQFTYgBA7xBOMJF
9twQB3HkD7Eh4/aY9glLxufbgSJJ9Qdb0bjr5iU95begFD5B0cEMgVPjCeQeh28H
GyKSSw5UZ4YIw/3sqj2gIiaFMuN/eEKqRyjxMMKkBWQR38YejnszBKLYH55kXkyz
K8wC7sKdUw2FZLhkH/WU4/fkyj8z51VMUmKsoQU161BWsvCSwSVhZCvpzbN/0opO
5AFkQaqbNCAPoU+8FeBxEvd6zcipuZ43TsvdtJ8LPwZEdMbqfWcqHHExm9uK8S+B
ZKEIkg6Y07bQpfYJ2WHdDSGIEqNMtRtwUrbjBr7hw24B4f9Sw02/KaLjtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwPFI1DxO65eQ/i2fGsE85K096tMB8GA1UdIwQY
MBaAFMXInVJgyzT9u7O8Jb9K269M3GigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGNpZFVtRExOUDI3czd3bHYwcmJyMHpjYUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82MjNiMTQtNGU2ZS00YzMxLTk2YmUt
OGViY2QwOWIyYmNhLzEveGNpZFVtRExOUDI3czd3bHYwcmJyMHpjYUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82MjNiMTQtNGU2ZS00YzMxLTk2YmUtOGViY2QwOWIyYmNh
LzEveGNpZFVtRExOUDI3czd3bHYwcmJyMHpjYUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAcums/N
G1OLDRoGzCJlI4Qz82gzxe86Uue10cvp1t5Q6gS6vAhyPRJSHmbbk0hloxORavVE
2cZvTOI9H9F7OjqTsZdyjrQ6FSRD1spYSPqh3GTXmk/Ii6nUDnUoMPsonTtjlK7Y
Q5bdXsu+d3ViU9FEBDZWhtZ7J3I5stExNLgC4Yjo64CE4/rQLYHfhm0ZGAlnJ+Hk
a52riJ+rQhaMufm8uFGd47cWu+6gQC78BMssQcWXXFfB6Dbe4BSozY0g7ltmVWcJ
mjufyiIoyMGGaN2dlaZQsRXEot6odym8vRxK3PcRxHAA9bqyubRUSigpy9wHMa6e
rq1aXuyPe05sEg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:57 2025 by rpki-client