Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier: i/QCs8MKXB1UrEPNx5duTPldm3SJXWKN9hqaFpee0Io=
Subject key identifier: 4C:76:FD:53:0F:AC:69:87:DE:2A:F7:75:4E:F9:B2:B1:F5:D6:0D:41
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 0194BCAA272E0EABB29CBD556B585F7F82F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: 5XDYqOGZ0RBBKO0tNQVtQfCS9Wg.roa (hash: 8v0kYzcJWu+TAkPVdBOzyNTyiBLW9zT8UuMidU5kl/I=)
2: g9JYtF8ph5GLoyu-Nq2vbYm-D1I.roa (hash: Cvh5BPuE+knEynT2OCQwuxH59fgMDl8/lGUoeYUQxFY=)
3: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: EgotC6Bg+FYjwR9DOF8tTnqNOopI7DCyPlKJ0DHchWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:27:2e:0e:ab:b2:9c:bd:55:6b:58:5f:7f:82:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=4c76fd530fac6987de2af7754ef9b2b1f5d60d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9f:7f:fa:c1:41:8d:10:46:23:be:52:bf:87:
e8:44:ba:10:77:ef:78:e6:52:ae:13:f6:72:91:e4:
1b:10:f0:c4:23:39:14:d4:1b:ec:c4:93:87:33:dd:
ff:1c:e4:22:b6:cd:66:e9:bd:2a:7f:41:e3:bb:03:
af:5d:5c:97:cc:3a:36:9d:65:a1:ee:f8:fc:2c:bc:
eb:62:2c:b3:7a:16:d7:74:ce:60:11:83:68:63:95:
14:c2:a4:b0:95:5a:66:8d:a0:4e:82:6b:45:ef:58:
b9:b5:30:07:84:f2:ad:27:ff:21:3a:43:65:0b:92:
95:e5:81:4e:12:85:8a:62:7f:0a:64:f1:7d:8c:4b:
e1:6c:80:02:4e:e0:30:95:e2:28:1f:d8:b9:0d:c9:
9f:04:3f:b2:fc:42:c2:56:d0:22:16:82:fc:30:1d:
ce:9c:40:6d:0e:36:c3:65:64:4a:cb:79:eb:78:73:
a7:26:b9:df:9e:aa:09:6b:af:38:d2:69:68:88:37:
59:69:d4:e9:24:3f:a3:95:39:8a:0d:6d:24:8e:c8:
84:75:3f:6e:b8:90:d2:7a:88:59:de:0a:e2:ab:1d:
bd:34:e5:91:a5:1c:6a:ac:df:ce:88:b8:6b:a5:47:
38:b0:61:07:07:08:c7:78:2b:18:f2:36:7f:36:0c:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:76:FD:53:0F:AC:69:87:DE:2A:F7:75:4E:F9:B2:B1:F5:D6:0D:41
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c2:2b:15:4b:7d:02:db:f8:d8:5d:0a:25:64:cc:2e:42:8e:
5b:d8:26:71:c7:59:4b:1c:11:37:bf:cc:73:43:c2:6e:35:5d:
74:8a:78:06:67:4d:51:93:81:b0:3d:a8:1a:03:f9:ac:7b:fc:
27:6c:8c:ae:06:9b:2a:06:79:0d:af:52:c2:2c:be:03:49:94:
65:38:86:77:f5:f7:5b:a3:e5:58:81:0e:78:ed:15:ed:c3:2d:
c3:99:0d:1d:38:fc:b3:8e:99:67:64:64:c9:72:c3:a0:4b:f4:
fb:16:da:3f:59:bf:0e:1b:89:a8:e3:2f:65:80:c9:da:d6:67:
9e:ce:0f:82:d9:09:5b:8c:24:0b:4b:db:d2:b2:dc:7b:de:35:
e3:26:81:9c:a6:91:24:e0:f4:56:be:b1:37:06:44:ae:a9:18:
52:90:dc:24:47:00:53:00:75:02:ce:ea:98:96:f3:c8:fe:ae:
a5:60:3d:f4:8a:e1:a8:69:ea:82:8f:91:74:a2:6e:2c:95:4e:
90:f5:74:cd:1c:ff:a6:50:b6:65:64:86:73:3c:0f:de:6f:34:
bc:f7:09:69:3c:14:f9:13:a4:7f:ed:2c:fd:07:a1:30:4f:97:
4a:aa:92:c6:50:cd:6f:23:44:9e:6e:cd:16:38:03:f4:d9:df:
1a:71:46:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qicuDquynL1Va1hff4L1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTFmYjViYmMyZmE4NTcxZTNkNWY4Y2FlNDE5NmE4ZDdl
OTZjMzUwHhcNMjUwMTMxMTQwMDU1WhcNMjUwMjAxMTQwMDU1WjAzMTEwLwYDVQQD
Eyg0Yzc2ZmQ1MzBmYWM2OTg3ZGUyYWY3NzU0ZWY5YjJiMWY1ZDYwZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6J9/+sFBjRBGI75Sv4foRLoQd+94
5lKuE/ZykeQbEPDEIzkU1BvsxJOHM93/HOQits1m6b0qf0HjuwOvXVyXzDo2nWWh
7vj8LLzrYiyzehbXdM5gEYNoY5UUwqSwlVpmjaBOgmtF71i5tTAHhPKtJ/8hOkNl
C5KV5YFOEoWKYn8KZPF9jEvhbIACTuAwleIoH9i5DcmfBD+y/ELCVtAiFoL8MB3O
nEBtDjbDZWRKy3nreHOnJrnfnqoJa6840mloiDdZadTpJD+jlTmKDW0kjsiEdT9u
uJDSeohZ3griqx29NOWRpRxqrN/OiLhrpUc4sGEHBwjHeCsY8jZ/NgxOxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEx2/VMPrGmH3ir3dU75srH11g1BMB8GA1UdIwQY
MBaAFMWh+1u8L6hXHj1fjK5BlqjX6Ww1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTct
ZDhhMGI0MWY0NmU4LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTctZDhhMGI0MWY0NmU4
LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMIrFUt9
Atv42F0KJWTMLkKOW9gmccdZSxwRN7/Mc0PCbjVddIp4BmdNUZOBsD2oGgP5rHv8
J2yMrgabKgZ5Da9Swiy+A0mUZTiGd/X3W6PlWIEOeO0V7cMtw5kNHTj8s46ZZ2Rk
yXLDoEv0+xbaP1m/DhuJqOMvZYDJ2tZnns4PgtkJW4wkC0vb0rLce9414yaBnKaR
JOD0Vr6xNwZErqkYUpDcJEcAUwB1As7qmJbzyP6upWA99IrhqGnqgo+RdKJuLJVO
kPV0zRz/plC2ZWSGczwP3m80vPcJaTwU+ROkf+0s/QehME+XSqqSxlDNbyNEnm7N
FjgD9NnfGnFG5w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:45 2025 by rpki-client