Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
File: xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json)
Hash identifier: Wy1Lp8pZutVDV8BrineL7xjeRpzMwBpFVSdcb6gf8SA=
Subject key identifier: FF:08:95:0F:C2:EC:85:CB:2B:C1:EB:06:1A:D4:1D:E9:8F:95:57:59
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Certificate issuer: /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial: 0194BC04BD2A884B2AA97718F7F09D0FBBBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
Manifest number: 0A42
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: x9osegNwUKFrT1H1VZTt-kaY4bg.roa (hash: ZX93NU3lUgtZDAGcH0Q1U8yUfw/JO3m/vmWuhpphGKg=)
2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: fjrZNqfbQHJ7+ewM6OXEKkwxDOg1xbyCiCfQuau5uUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bd:2a:88:4b:2a:a9:77:18:f7:f0:9d:0f:bb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=ff08950fc2ec85cb2bc1eb061ad41de98f955759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:94:00:b6:ec:27:21:fa:88:1e:61:68:bf:
4c:8d:d7:d7:e8:01:26:1a:ef:1d:cb:e8:b6:c1:60:
fd:7b:42:e0:7d:9e:e2:50:70:06:79:da:9f:70:ce:
ec:c1:ca:be:b3:0d:88:72:59:3e:43:cc:99:97:8d:
f7:6b:6c:30:a9:30:93:27:77:fa:73:23:0a:bd:a8:
f4:25:80:2c:57:6e:78:5e:19:26:b6:01:b8:70:1b:
f2:c6:a9:ed:a2:15:fd:53:d8:74:f9:29:4e:62:94:
47:78:14:55:ae:52:4c:52:3a:6c:f5:10:0d:67:c0:
78:31:92:99:6e:0f:56:16:81:fb:99:77:78:25:25:
1c:74:8a:bf:f0:e2:b4:b9:ee:84:90:a8:9b:ed:fa:
38:32:da:7b:47:36:a3:21:96:30:fc:b5:e3:ce:5c:
4a:a2:53:ad:1b:c1:5f:b7:9e:42:ed:54:84:be:40:
04:35:d9:15:6b:21:c7:d4:e9:39:fe:6d:d9:82:d1:
ba:d8:4a:e0:fd:b6:9c:d6:12:27:b4:4b:bb:c5:d5:
c9:13:1b:9a:36:e3:82:fa:c5:d0:e2:94:e4:7c:42:
02:a0:c6:4f:5f:bb:1e:16:cb:67:22:59:c8:55:b0:
87:79:51:13:c9:45:33:f6:a9:ee:a6:d0:75:b1:d9:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:08:95:0F:C2:EC:85:CB:2B:C1:EB:06:1A:D4:1D:E9:8F:95:57:59
X509v3 Authority Key Identifier:
keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:26:51:fe:51:dc:95:46:57:b8:bd:4f:1c:3a:ad:d0:a7:c0:
2f:f7:60:69:1b:9e:0f:92:2b:cf:21:ab:d1:dc:e8:e5:57:0f:
91:c3:0f:ca:97:ca:5c:f1:e5:d3:5b:38:83:f6:96:39:0f:9a:
43:d7:f7:0f:d3:65:27:cc:b1:00:32:e4:7d:d8:46:e3:84:17:
38:0c:73:b6:25:16:ff:16:04:45:92:2a:04:56:ed:0b:11:83:
0a:31:92:09:36:26:64:64:6e:fd:27:1a:53:7f:8c:80:76:db:
c7:7e:4d:73:4c:c4:60:20:82:dc:1f:c0:9e:84:5c:e4:9f:87:
94:71:c0:30:f4:22:e0:3b:a0:6f:29:ee:46:7a:15:02:1e:78:
c0:44:18:7b:96:86:c3:12:07:b6:a9:4c:b5:1e:ab:ad:06:03:
a3:b3:43:89:33:10:c7:42:b0:f9:18:af:aa:e8:d9:24:95:22:
81:a7:e7:d9:bd:a4:a8:95:e8:97:9d:78:f3:f7:c2:0d:fb:a0:
12:bf:f0:09:b8:99:c9:69:fa:0f:56:99:6c:25:93:86:95:b5:
45:2f:4d:e9:7f:8d:e1:b4:99:3a:20:7f:b8:38:7c:80:0c:87:
70:54:ab:dd:ce:e3:33:66:43:77:ef:f9:9f:d9:a4:5a:96:3b:
d3:28:a8:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BL0qiEsqqXcY9/CdD7u9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1Y2RjZTMyYWRjNjJhZmI3N2U0MzE4NmNmN2MyYzA3MWU0
MmI3YmIwHhcNMjUwMTMxMTEwMDE0WhcNMjUwMjAxMTEwMDE0WjAzMTEwLwYDVQQD
EyhmZjA4OTUwZmMyZWM4NWNiMmJjMWViMDYxYWQ0MWRlOThmOTU1NzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwWUALbsJyH6iB5haL9MjdfX6AEm
Gu8dy+i2wWD9e0LgfZ7iUHAGedqfcM7swcq+sw2Iclk+Q8yZl433a2wwqTCTJ3f6
cyMKvaj0JYAsV254XhkmtgG4cBvyxqntohX9U9h0+SlOYpRHeBRVrlJMUjps9RAN
Z8B4MZKZbg9WFoH7mXd4JSUcdIq/8OK0ue6EkKib7fo4Mtp7RzajIZYw/LXjzlxK
olOtG8Fft55C7VSEvkAENdkVayHH1Ok5/m3ZgtG62Erg/bac1hIntEu7xdXJExua
NuOC+sXQ4pTkfEICoMZPX7seFstnIlnIVbCHeVETyUUz9qnuptB1sdn2fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8IlQ/C7IXLK8HrBhrUHemPlVdZMB8GA1UdIwQY
MBaAFMXNzjKtxir7d+Qxhs98LAceQre7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGMzT01xM0dLdnQzNURHR3ozd3NCeDVDdDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yMTk0NWQtMjg5OS00ZDlkLWFhNDUt
YjBhMjhiYjM1YjIwLzEveGMzT01xM0dLdnQzNURHR3ozd3NCeDVDdDdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8yMTk0NWQtMjg5OS00ZDlkLWFhNDUtYjBhMjhiYjM1YjIw
LzEveGMzT01xM0dLdnQzNURHR3ozd3NCeDVDdDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiZR/lHc
lUZXuL1PHDqt0KfAL/dgaRueD5IrzyGr0dzo5VcPkcMPypfKXPHl01s4g/aWOQ+a
Q9f3D9NlJ8yxADLkfdhG44QXOAxztiUW/xYERZIqBFbtCxGDCjGSCTYmZGRu/Sca
U3+MgHbbx35Nc0zEYCCC3B/AnoRc5J+HlHHAMPQi4DugbynuRnoVAh54wEQYe5aG
wxIHtqlMtR6rrQYDo7NDiTMQx0Kw+RivqujZJJUigafn2b2kqJXol5148/fCDfug
Er/wCbiZyWn6D1aZbCWThpW1RS9N6X+N4bSZOiB/uDh8gAyHcFSr3c7jM2ZDd+/5
n9mkWpY70yiofA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:23 2025 by rpki-client