Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
File: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft (raw, json)
Hash identifier: ow5NtQ2uBpVyCldp3tCebRussVWGuyviEM45uGv4ckk=
Subject key identifier: 86:C0:F7:B1:4A:52:E8:E3:A1:C2:66:57:7F:C4:4A:ED:31:39:3E:DA
Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f
Certificate serial: 0194BBCE74BA58ABF07F72241AC69ACF93F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
Manifest number: 3B
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: GUbgPZS8b1mJVA-CDXEfke3rKwU.roa (hash: DGiTGvvsu+oEkX+7jMPXSS7hmVWxoFzlEXAOHRpDGto=)
2: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl (hash: 63t0GZKcB2wn7zaJBLSwjc5t3YvrbOd2AcZvZOkyRL4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:74:ba:58:ab:f0:7f:72:24:1a:c6:9a:cf:93:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=86c0f7b14a52e8e3a1c266577fc44aed31393eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:d7:6f:be:3a:bd:b2:24:2a:75:b9:6c:a1:
08:dd:53:17:d2:4a:de:a2:8d:13:be:c0:b9:6d:04:
16:52:57:75:63:b1:f1:ff:f6:d4:d7:f2:91:a6:fc:
07:14:73:aa:79:4b:d5:f6:3e:30:8c:cf:f2:b4:8f:
f1:b7:1a:3d:df:c3:2b:a6:3e:c0:e0:d4:7d:5c:58:
de:f4:56:e9:36:52:e7:8c:5b:fc:1e:50:a3:92:44:
a8:3f:18:1e:9f:f4:59:bf:c8:e9:84:9a:82:16:04:
3f:82:6a:54:41:83:58:95:71:ea:bf:f7:ec:b9:62:
f4:b0:a0:84:f9:f9:a9:8b:57:d3:55:3e:51:d4:fd:
2a:8d:6a:6b:af:1a:04:25:48:3c:bc:aa:81:66:6e:
35:cf:49:6f:9a:a9:b4:49:c3:f8:a2:d5:ad:40:a9:
74:5d:b7:98:ca:d4:c3:96:2e:ed:69:8b:d1:14:85:
d5:51:77:fa:a9:91:7b:ac:8d:7f:db:51:24:0f:fd:
ce:b4:fd:f2:3c:b6:5d:4f:d9:fa:b7:9b:98:6f:ae:
3c:56:75:63:02:15:aa:48:d9:3f:e4:d0:78:52:b5:
ad:1d:d1:07:e7:1d:d5:8d:cc:6b:22:8e:97:2f:f0:
68:38:c2:23:74:96:18:b8:60:3a:9e:57:61:cf:59:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C0:F7:B1:4A:52:E8:E3:A1:C2:66:57:7F:C4:4A:ED:31:39:3E:DA
X509v3 Authority Key Identifier:
keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7b:31:3c:d0:ca:e3:17:0a:96:b6:0c:cd:c8:51:22:ae:83:
58:63:fc:49:53:58:fc:42:7e:d9:53:a2:5d:02:89:b7:2b:18:
79:89:e2:55:b5:f0:3f:c4:85:0e:6f:1f:3f:1a:d2:4f:4f:04:
46:df:e7:b6:4f:f3:35:53:b5:74:99:3b:9e:fe:73:73:f5:37:
e9:21:53:06:39:10:41:83:c8:8b:7e:8e:1e:af:e4:02:a8:bc:
58:aa:61:34:65:e3:85:6e:26:cc:78:1a:06:5e:5c:cf:03:33:
28:65:44:08:06:8c:58:ee:a1:8c:a5:a9:3c:ef:f6:4c:51:bd:
2a:3b:49:61:db:31:8e:94:05:92:f6:6a:de:22:3d:16:09:02:
c9:f7:35:a3:e1:b3:c3:5c:44:ed:da:8e:2b:e2:00:67:66:4e:
90:35:04:a8:10:fd:70:33:93:21:d5:5c:bf:a7:3e:63:d3:a1:
05:a6:8b:aa:0a:b6:39:0e:45:3c:59:a7:e5:ec:3c:41:e2:13:
8e:4a:41:51:4d:cf:24:14:80:e0:43:e3:24:b6:4e:db:44:eb:
74:90:a6:a5:02:35:8d:33:ce:c2:6e:7c:3b:f8:04:15:64:7b:
23:ac:cf:d7:49:c8:69:91:30:a0:9e:cc:d0:95:4e:8f:fb:c2:
4c:33:21:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znS6WKvwf3IkGsaaz5PzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1M2YwYWRhZWFmYjQwYzc3MjQ1OWU5MzkzNTRmNmJlNDUz
ZjE1OGYwHhcNMjUwMTMxMTAwMDU3WhcNMjUwMjAxMTAwMDU3WjAzMTEwLwYDVQQD
Eyg4NmMwZjdiMTRhNTJlOGUzYTFjMjY2NTc3ZmM0NGFlZDMxMzkzZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgvXb746vbIkKnW5bKEI3VMX0kre
oo0TvsC5bQQWUld1Y7Hx//bU1/KRpvwHFHOqeUvV9j4wjM/ytI/xtxo938Mrpj7A
4NR9XFje9FbpNlLnjFv8HlCjkkSoPxgen/RZv8jphJqCFgQ/gmpUQYNYlXHqv/fs
uWL0sKCE+fmpi1fTVT5R1P0qjWprrxoEJUg8vKqBZm41z0lvmqm0ScP4otWtQKl0
XbeYytTDli7taYvRFIXVUXf6qZF7rI1/21EkD/3OtP3yPLZdT9n6t5uYb648VnVj
AhWqSNk/5NB4UrWtHdEH5x3VjcxrIo6XL/BoOMIjdJYYuGA6nldhz1mIYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbA97FKUujjocJmV3/ESu0xOT7aMB8GA1UdIwQY
MBaAFMU/Ctrq+0DHckWek5NU9r5FPxWPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFQ4SzJ1cjdRTWR5Ulo2VGsxVDJ2a1VfRlk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zODA0YzItMGU0NC00YmUzLTkwMzct
NDYxN2NhMzc2MDgzLzEveFQ4SzJ1cjdRTWR5Ulo2VGsxVDJ2a1VfRlk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zODA0YzItMGU0NC00YmUzLTkwMzctNDYxN2NhMzc2MDgz
LzEveFQ4SzJ1cjdRTWR5Ulo2VGsxVDJ2a1VfRlk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHsxPNDK
4xcKlrYMzchRIq6DWGP8SVNY/EJ+2VOiXQKJtysYeYniVbXwP8SFDm8fPxrST08E
Rt/ntk/zNVO1dJk7nv5zc/U36SFTBjkQQYPIi36OHq/kAqi8WKphNGXjhW4mzHga
Bl5czwMzKGVECAaMWO6hjKWpPO/2TFG9KjtJYdsxjpQFkvZq3iI9FgkCyfc1o+Gz
w1xE7dqOK+IAZ2ZOkDUEqBD9cDOTIdVcv6c+Y9OhBaaLqgq2OQ5FPFmn5ew8QeIT
jkpBUU3PJBSA4EPjJLZO20TrdJCmpQI1jTPOwm58O/gEFWR7I6zP10nIaZEwoJ7M
0JVOj/vCTDMh4w==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:55:08 2025 by rpki-client