Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
File: XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json)
Hash identifier: iMbpFB8F19KWCECG1aXuSg6emOHS/15RW3Ayigx2r4E=
Subject key identifier: 1E:DB:CF:00:F8:A4:F7:E6:E4:CE:CC:EF:DE:EA:E2:0A:66:32:37:90
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial: 0194BC3C7B322994D8899DC5C5F3B5DE4E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: B4B8AwhPN8nqkqsJIWnt25RI8P4.roa (hash: tKZvSD+J2/9HuzhNNVSD82woMs4APG13o6f6vUOg094=)
2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: 6gBLdf+5EpBexV/I7syvGZktwqkcOcL8Yn0iq3Ovr50=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7b:32:29:94:d8:89:9d:c5:c5:f3:b5:de:4e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=1edbcf00f8a4f7e6e4ceccefdeeae20a66323790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:61:74:77:81:dc:24:e5:f6:05:0e:1a:2e:
ab:29:71:3f:b4:0f:17:76:e7:23:95:f6:4f:70:f1:
81:54:e9:94:94:e1:b7:74:60:93:51:2e:ae:ab:f3:
91:58:a4:a7:48:50:0b:c2:c8:ae:c5:24:b0:3c:ad:
65:f9:65:c0:e6:86:ec:d6:64:9b:2c:fb:ea:d2:e0:
ef:87:f5:52:99:d5:e7:d0:f2:97:b5:d5:a3:7a:53:
ba:ea:cf:0e:c3:0f:d6:b6:72:68:af:df:d0:3d:86:
55:9e:bf:64:3e:ae:0a:1f:f0:30:b2:6f:b3:a5:ed:
f8:1e:f3:22:c2:23:10:5b:2b:75:e9:17:2f:d4:e8:
72:cc:b7:bf:d1:09:e3:9f:fb:a4:2b:a3:3e:66:2c:
a8:8f:9d:e5:33:7e:df:60:68:64:2a:f8:81:bd:cf:
a5:c4:14:b1:f0:28:ed:51:15:0d:2c:8a:c7:98:6d:
5e:43:04:64:3b:e6:c1:d2:8d:e1:ec:ba:06:da:de:
1e:89:1f:9e:f2:12:01:d6:19:82:9c:2a:aa:7c:db:
f3:8c:79:a5:f0:01:bf:3a:b0:8f:aa:33:8f:78:f2:
f3:89:b9:c0:9f:b0:fe:93:77:0d:a7:9f:6c:53:53:
fd:a6:0b:21:96:81:8b:9e:b0:59:6a:0c:d4:dd:0d:
5b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DB:CF:00:F8:A4:F7:E6:E4:CE:CC:EF:DE:EA:E2:0A:66:32:37:90
X509v3 Authority Key Identifier:
keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ac:9a:dd:27:d6:87:6e:a3:44:4d:07:b6:58:f7:44:cf:85:
3b:8e:03:2b:30:73:d2:2c:5c:93:56:28:83:d6:56:a4:4a:61:
ca:da:56:5f:74:a1:b6:da:52:18:d8:63:8f:4e:60:72:bd:aa:
14:8b:65:5f:ef:5a:0a:2b:05:94:d9:41:6e:ee:92:b0:62:e7:
4b:93:cc:0c:55:4a:79:a4:56:9d:7d:3e:34:92:b4:d3:5e:c9:
bc:2d:60:7f:69:47:62:a3:d5:b1:88:18:a8:a8:0e:19:81:bf:
90:62:1c:a7:62:9a:0e:a0:75:9a:ee:b5:5a:43:91:cf:1b:79:
89:c7:e5:ff:d4:28:d6:e0:82:83:1e:bc:68:0b:d6:db:cc:b7:
ce:ee:75:05:28:76:7f:a5:f1:f7:b2:88:ba:8f:74:75:94:dd:
f5:ba:1c:b4:17:4f:59:48:b9:76:06:64:44:9e:ca:e8:b1:c7:
9f:0a:60:f4:99:1a:5c:37:71:9f:f4:2a:98:2f:df:6e:c3:cc:
fc:cc:57:f7:8b:87:cf:1f:92:9b:5b:e1:3a:98:7f:4e:d7:f3:
ff:c1:29:f5:d1:7a:8d:cd:bc:06:06:1d:df:b6:99:78:99:3c:
80:9d:8c:ee:b6:c6:6b:f0:ec:a2:8e:b6:8e:62:27:ed:48:58:
a0:c6:95:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PHsyKZTYiZ3FxfO13k4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYjQyYWI4ZGU5OGJlMWM3NzFmMGE5ODY4NTgyZmNmOTVk
YzRhYzYwHhcNMjUwMTMxMTIwMTA3WhcNMjUwMjAxMTIwMTA3WjAzMTEwLwYDVQQD
EygxZWRiY2YwMGY4YTRmN2U2ZTRjZWNjZWZkZWVhZTIwYTY2MzIzNzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZthdHeB3CTl9gUOGi6rKXE/tA8X
ducjlfZPcPGBVOmUlOG3dGCTUS6uq/ORWKSnSFALwsiuxSSwPK1l+WXA5obs1mSb
LPvq0uDvh/VSmdXn0PKXtdWjelO66s8Oww/WtnJor9/QPYZVnr9kPq4KH/Awsm+z
pe34HvMiwiMQWyt16Rcv1OhyzLe/0Qnjn/ukK6M+Ziyoj53lM37fYGhkKviBvc+l
xBSx8CjtURUNLIrHmG1eQwRkO+bB0o3h7LoG2t4eiR+e8hIB1hmCnCqqfNvzjHml
8AG/OrCPqjOPePLzibnAn7D+k3cNp59sU1P9pgshloGLnrBZagzU3Q1bBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7bzwD4pPfm5M7M797q4gpmMjeQMB8GA1UdIwQY
MBaAFF60KrjemL4cdx8KmGhYL8+V3ErGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hODRlN2UtYzYxNi00YWIxLWE0OTQt
NzczYzBiM2M4OTM1LzEvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9hODRlN2UtYzYxNi00YWIxLWE0OTQtNzczYzBiM2M4OTM1
LzEvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKya3SfW
h26jRE0Htlj3RM+FO44DKzBz0ixck1Yog9ZWpEphytpWX3ShttpSGNhjj05gcr2q
FItlX+9aCisFlNlBbu6SsGLnS5PMDFVKeaRWnX0+NJK0017JvC1gf2lHYqPVsYgY
qKgOGYG/kGIcp2KaDqB1mu61WkORzxt5icfl/9Qo1uCCgx68aAvW28y3zu51BSh2
f6Xx97KIuo90dZTd9boctBdPWUi5dgZkRJ7K6LHHnwpg9JkaXDdxn/QqmC/fbsPM
/MxX94uHzx+Sm1vhOph/Ttfz/8Ep9dF6jc28BgYd37aZeJk8gJ2M7rbGa/Dsoo62
jmIn7UhYoMaV5w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:45:03 2025 by rpki-client