Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
File: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft (raw, json)
Hash identifier: Bjn99XyduPcoZg0N22fxLg2Sz0nWzNYnp7WHcBchYss=
Subject key identifier: 83:A7:00:9B:73:A7:72:BA:57:9D:AF:1D:FB:EE:31:C0:8C:7E:8E:0D
Authority key identifier: C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64
Certificate issuer: /CN=c618f03f9874370653aa3a026f6707c2e0e74764
Certificate serial: 0194BCAA2A71C22A9B46533C7AB82010863E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
Manifest number: 050F
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl (hash: IJQoz+WxH4b06LHSP9jk3sSGzrNHmoNWqjur/kMAmcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2a:71:c2:2a:9b:46:53:3c:7a:b8:20:10:86:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c618f03f9874370653aa3a026f6707c2e0e74764
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=83a7009b73a772ba579daf1dfbee31c08c7e8e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:d8:9e:a0:33:ba:85:81:e4:30:3d:cc:0e:
91:0f:19:ba:5d:b4:39:2c:53:d1:4a:e4:5d:8e:d0:
14:46:17:72:ea:bb:8c:3e:40:0e:3c:a3:80:84:19:
4e:2a:d5:ab:c4:e7:49:5c:fa:4d:d2:73:01:69:1d:
31:f5:4b:57:7c:31:ea:cc:96:34:a5:66:b9:f3:f8:
86:95:12:28:b6:f1:85:09:48:c4:59:17:a5:8e:93:
8f:b9:78:08:c1:f3:74:d2:26:72:49:3b:94:36:bc:
5a:22:b9:44:60:c9:ce:f3:dc:1b:00:87:20:89:7b:
ba:39:ee:5e:54:6f:80:58:45:66:45:74:70:e7:7a:
ae:12:de:70:90:69:b4:d7:33:01:25:c7:7b:1f:1a:
09:e7:55:7b:43:cd:d7:c9:8d:f5:58:c1:ae:e2:9a:
69:97:4d:f3:b8:c9:7a:de:11:fa:a4:e3:6a:6f:08:
52:46:b1:7b:63:06:a7:c0:be:da:33:73:f3:7a:e4:
04:c4:76:2b:e7:5c:35:4b:2c:b7:bd:51:af:e6:3d:
75:b7:38:0d:d4:de:a1:d3:fa:3a:b2:cc:b9:cf:f0:
56:ee:22:4b:ff:3b:27:ec:12:8a:e1:33:c9:0a:e8:
c7:f5:48:79:66:77:2d:31:79:62:5c:ea:78:19:22:
10:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A7:00:9B:73:A7:72:BA:57:9D:AF:1D:FB:EE:31:C0:8C:7E:8E:0D
X509v3 Authority Key Identifier:
keyid:C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:19:4e:23:7f:1e:00:62:ee:a6:5f:19:d3:4b:1d:21:7d:c2:
68:d8:81:b3:2d:fc:2e:cb:86:76:af:19:1e:13:28:f9:49:f7:
44:33:df:84:82:df:85:7b:4a:3a:ef:2e:62:f2:35:00:a3:38:
d3:80:e0:35:f1:e5:2e:10:b9:b5:5c:aa:cc:6b:38:c1:c9:3a:
1a:c6:98:e9:e6:6c:3d:17:7a:45:b7:d8:56:8a:bb:dd:9d:7f:
be:66:04:70:a6:97:c1:09:ca:d0:b8:70:32:01:d6:ce:12:64:
b2:60:72:c3:13:e5:b3:4f:4a:ce:4f:30:cd:72:72:2b:99:5b:
da:43:0d:d8:cd:fe:1d:dd:e0:fe:fb:4d:80:6b:a9:71:4a:b9:
fc:84:ab:92:82:99:b2:4a:e5:cb:ec:14:ba:29:b1:e5:5f:ed:
ed:5a:fa:f5:6e:d0:55:61:b4:54:d2:f5:1f:7d:65:7c:8b:e4:
b7:52:a8:ee:c2:31:f7:a2:e4:db:ee:00:07:f8:8f:95:78:ae:
71:45:a8:13:db:1b:b2:c4:da:28:bc:71:a1:42:23:91:34:4b:
19:5f:c9:5d:96:e2:b2:33:17:81:4c:55:d5:a6:b0:e8:f6:8b:
b9:da:4f:d6:de:18:77:e9:04:6f:f1:a1:bf:cc:4d:67:17:53:
c3:36:d2:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qipxwiqbRlM8erggEIY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MThmMDNmOTg3NDM3MDY1M2FhM2EwMjZmNjcwN2MyZTBl
NzQ3NjQwHhcNMjUwMTMxMTQwMDU2WhcNMjUwMjAxMTQwMDU2WjAzMTEwLwYDVQQD
Eyg4M2E3MDA5YjczYTc3MmJhNTc5ZGFmMWRmYmVlMzFjMDhjN2U4ZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC7YnqAzuoWB5DA9zA6RDxm6XbQ5
LFPRSuRdjtAURhdy6ruMPkAOPKOAhBlOKtWrxOdJXPpN0nMBaR0x9UtXfDHqzJY0
pWa58/iGlRIotvGFCUjEWReljpOPuXgIwfN00iZySTuUNrxaIrlEYMnO89wbAIcg
iXu6Oe5eVG+AWEVmRXRw53quEt5wkGm01zMBJcd7HxoJ51V7Q83XyY31WMGu4ppp
l03zuMl63hH6pONqbwhSRrF7YwanwL7aM3PzeuQExHYr51w1Syy3vVGv5j11tzgN
1N6h0/o6ssy5z/BW7iJL/zsn7BKK4TPJCujH9Uh5ZnctMXliXOp4GSIQVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOnAJtzp3K6V52vHfvuMcCMfo4NMB8GA1UdIwQY
MBaAFMYY8D+YdDcGU6o6Am9nB8Lg50dkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhqd1A1aDBOd1pUcWpvQ2IyY0h3dURuUjJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xNmZkZWUtZDM5Ny00MWZkLTg4OGYt
NTFkZTQ5NjRhOTEzLzEveGhqd1A1aDBOd1pUcWpvQ2IyY0h3dURuUjJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8xNmZkZWUtZDM5Ny00MWZkLTg4OGYtNTFkZTQ5NjRhOTEz
LzEveGhqd1A1aDBOd1pUcWpvQ2IyY0h3dURuUjJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBlOI38e
AGLupl8Z00sdIX3CaNiBsy38LsuGdq8ZHhMo+Un3RDPfhILfhXtKOu8uYvI1AKM4
04DgNfHlLhC5tVyqzGs4wck6GsaY6eZsPRd6RbfYVoq73Z1/vmYEcKaXwQnK0Lhw
MgHWzhJksmBywxPls09Kzk8wzXJyK5lb2kMN2M3+Hd3g/vtNgGupcUq5/ISrkoKZ
skrly+wUuimx5V/t7Vr69W7QVWG0VNL1H31lfIvkt1Ko7sIx96Lk2+4AB/iPlXiu
cUWoE9sbssTaKLxxoUIjkTRLGV/JXZbisjMXgUxV1aaw6PaLudpP1t4Yd+kEb/Gh
v8xNZxdTwzbSfQ==
-----END CERTIFICATE-----
Generated at Thu May 1 11:24:34 2025 by rpki-client