Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: iU3BQwo4Ir3J+AAcXjdBIOfDwF3c4HE0cTEtkDzMw2U=
Subject key identifier: F4:03:08:C3:CE:D2:03:F8:99:02:07:D5:1F:EA:BA:76:7D:53:18:D0
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 0194BCE0E0523D07E995D7883651477E32D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 03B1
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: 08FzlOsJRE0j/fR/uDuaq2usVUrfhmTTplMWx+Hq8Go=)
2: u-lGXvBrrOtS45APR_Waw4axrTc.roa (hash: W3bOvfQ0kiPnMkAC0M/+bR7qhmdbihjJm/WhE44sz9U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e0:52:3d:07:e9:95:d7:88:36:51:47:7e:32:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=f40308c3ced203f8990207d51feaba767d5318d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:23:74:46:3b:92:f7:f9:40:c1:5f:4c:35:
f0:a6:94:70:a8:da:d2:72:53:d9:96:69:c4:9a:c8:
10:78:19:10:a3:02:99:bf:22:ad:27:6e:c0:d3:1d:
65:e8:55:ca:00:21:c8:bb:a7:8c:86:a7:04:26:4f:
6b:22:48:c6:6b:66:55:f1:e9:c9:f7:00:25:6c:dd:
de:c0:21:78:5e:a2:2d:06:41:d5:d0:b1:6c:7c:2d:
fb:1d:d9:1e:53:8e:79:dd:7a:cd:81:c6:d3:b1:05:
d1:c6:08:41:9e:7f:0c:9c:11:44:9e:01:01:f8:65:
12:c8:0d:da:f9:50:ef:6f:42:92:7a:99:08:d2:9d:
d7:bf:e3:61:91:a8:6a:0e:38:a2:87:fc:e4:06:b0:
81:58:52:d0:1f:6c:74:b4:ac:95:1c:8c:e4:c2:c5:
96:e0:eb:a3:71:53:c3:6a:5e:82:0b:cb:df:ac:81:
33:25:d7:d7:20:1c:d1:59:91:75:98:b3:b4:a8:13:
af:86:9f:61:7c:c3:8d:d7:ff:02:b9:75:ba:de:20:
11:82:9c:d5:9f:1c:65:de:7b:d3:a4:e6:f3:e6:2b:
ff:d3:73:21:23:72:c8:39:92:2b:8d:52:91:86:4e:
79:90:0f:2a:2c:9f:29:48:d1:b9:e9:ac:c7:b4:bc:
c3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:03:08:C3:CE:D2:03:F8:99:02:07:D5:1F:EA:BA:76:7D:53:18:D0
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0d:33:21:91:5a:4a:98:4c:75:7c:1a:2d:44:b6:60:d3:e1:
62:d9:5d:30:f9:72:9a:a1:83:69:59:7a:4d:5e:8d:ef:a6:ba:
bd:4e:1c:31:12:02:70:e8:ec:7c:58:e1:68:c7:79:21:41:05:
8f:13:f0:ae:b0:3e:a0:e0:d8:77:4b:bc:47:b1:99:11:2d:aa:
a9:f8:db:fd:29:21:56:f5:89:1d:f1:28:55:2c:30:3d:e5:98:
fb:72:50:f3:ae:c8:7b:38:bc:8b:d6:66:74:be:42:fd:77:8c:
01:6d:e9:75:38:aa:10:d1:e8:f3:35:6f:42:1e:5b:dd:11:5c:
58:3a:dd:04:c3:5c:17:37:cd:48:be:6d:f2:66:b8:00:32:3a:
3f:a9:5d:de:8c:94:39:8c:1b:1c:77:ce:92:d3:ea:5d:e0:93:
5f:a2:c0:5d:fe:d0:6b:db:41:d5:2f:4d:ea:3e:e8:dc:8e:23:
a9:fd:fe:f8:f3:f6:b5:74:ba:36:c8:dc:ab:8f:99:70:8f:46:
48:2d:39:98:b8:8a:36:1e:4b:bb:2b:e1:96:87:a2:cf:12:ce:
dc:47:ad:21:b7:20:85:9b:ec:ef:f2:fe:39:78:4c:90:91:26:
7e:1b:a3:ed:98:71:91:91:06:c9:8c:3e:9d:ec:fb:96:1e:8a:
a3:17:01:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OBSPQfpldeINlFHfjLXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYTM4NmU5NzY1NmQ2NDhhYjUzODFiMjk2NjY0MTQwODFi
MDAwODQwHhcNMjUwMTMxMTUwMDQxWhcNMjUwMjAxMTUwMDQxWjAzMTEwLwYDVQQD
EyhmNDAzMDhjM2NlZDIwM2Y4OTkwMjA3ZDUxZmVhYmE3NjdkNTMxOGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVsjdEY7kvf5QMFfTDXwppRwqNrS
clPZlmnEmsgQeBkQowKZvyKtJ27A0x1l6FXKACHIu6eMhqcEJk9rIkjGa2ZV8enJ
9wAlbN3ewCF4XqItBkHV0LFsfC37HdkeU4553XrNgcbTsQXRxghBnn8MnBFEngEB
+GUSyA3a+VDvb0KSepkI0p3Xv+NhkahqDjiih/zkBrCBWFLQH2x0tKyVHIzkwsWW
4OujcVPDal6CC8vfrIEzJdfXIBzRWZF1mLO0qBOvhp9hfMON1/8CuXW63iARgpzV
nxxl3nvTpObz5iv/03MhI3LIOZIrjVKRhk55kA8qLJ8pSNG56azHtLzDYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQDCMPO0gP4mQIH1R/qunZ9UxjQMB8GA1UdIwQY
MBaAFF+jhul2VtZIq1OBspZmQUCBsACEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgt
OTUwY2UzOWE5NzdjLzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgtOTUwY2UzOWE5Nzdj
LzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaw0zIZFa
SphMdXwaLUS2YNPhYtldMPlymqGDaVl6TV6N76a6vU4cMRICcOjsfFjhaMd5IUEF
jxPwrrA+oODYd0u8R7GZES2qqfjb/SkhVvWJHfEoVSwwPeWY+3JQ867Iezi8i9Zm
dL5C/XeMAW3pdTiqENHo8zVvQh5b3RFcWDrdBMNcFzfNSL5t8ma4ADI6P6ld3oyU
OYwbHHfOktPqXeCTX6LAXf7Qa9tB1S9N6j7o3I4jqf3++PP2tXS6Nsjcq4+ZcI9G
SC05mLiKNh5LuyvhloeizxLO3EetIbcghZvs7/L+OXhMkJEmfhuj7ZhxkZEGyYw+
nez7lh6KoxcBAQ==
-----END CERTIFICATE-----
Generated at Thu May 1 12:38:28 2025 by rpki-client