Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
File: xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft (raw, json)
Hash identifier: jabyAMvy95hRfKreXTYG6awFfBclfOjKujRraKDH0xI=
Subject key identifier: AD:B9:9C:A0:A6:83:46:0D:69:EB:7A:8B:E2:6C:CB:EA:06:52:39:17
Authority key identifier: C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
Certificate issuer: /CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Certificate serial: 0194BD852D87D21CF9CE99927E72E22428D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
Manifest number: 05C9
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: ZYhttRWwRR-QF8jloAZFKuhooqE.roa (hash: eO0V42mhSgtEZOqn/NTkR+4pbvAmlZ4nSZ0JyynFqN4=)
2: xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl (hash: BrSZjV49it/2yAeIqSlPf3SwLIMIGDYnI/AwoY8iAF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2d:87:d2:1c:f9:ce:99:92:7e:72:e2:24:28:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=adb99ca0a683460d69eb7a8be26ccbea06523917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:68:59:f2:0c:84:d2:c1:2b:96:0d:74:88:
a2:e3:5e:c6:8e:5b:46:65:6d:3a:f6:4b:9d:1d:c0:
62:de:5b:b5:87:e7:bf:9f:2a:cd:47:99:9d:9b:cd:
ba:ce:37:a7:71:8c:ec:db:d4:04:3c:5a:b3:e5:e2:
b3:53:80:2e:05:98:1a:f9:0d:bc:ec:d6:1f:de:dc:
42:45:d7:f1:22:6c:cf:cd:13:4f:e9:48:10:85:ca:
84:b7:30:b8:70:5c:c9:90:4f:d2:86:53:5b:8f:99:
b8:2b:62:7f:ef:a7:d5:ef:cd:7a:f0:70:28:f2:ab:
28:34:75:31:25:b8:87:55:c8:4f:13:0b:2a:fb:79:
44:a5:4e:7e:7e:2d:58:8c:98:14:c2:ab:fe:0b:28:
4f:55:21:d9:bd:e4:9e:72:45:b9:0c:3a:fb:9a:d0:
97:d3:40:a7:b5:0d:67:11:cb:03:78:4e:da:bd:fa:
0e:01:98:39:b9:c8:81:e3:6e:9b:53:20:74:88:02:
cc:7a:d1:ad:32:db:20:1d:11:db:a6:d8:40:92:ea:
0a:63:98:c5:a5:6e:55:32:0f:25:17:38:da:f0:41:
9b:c9:ce:3b:a3:66:1e:86:4b:d0:4e:5c:eb:d7:37:
21:eb:21:03:e0:7c:31:2a:00:b2:a9:ce:ff:9f:05:
5b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B9:9C:A0:A6:83:46:0D:69:EB:7A:8B:E2:6C:CB:EA:06:52:39:17
X509v3 Authority Key Identifier:
keyid:C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d4:5f:f0:78:97:64:71:f4:0e:02:73:51:30:fb:55:e7:31:
0f:a8:a7:02:a0:54:89:55:5a:a7:2f:25:7e:1c:15:20:99:99:
02:e8:ec:e6:c2:e0:7a:0c:34:7b:c8:a7:39:36:6a:6e:d9:db:
6e:7a:bc:01:70:ec:fb:02:e0:4a:c3:e3:a2:68:d8:f8:bd:5f:
9f:f9:e2:5e:2b:c1:52:2a:92:95:36:77:3d:30:8c:8b:04:dd:
5b:c0:9f:c0:ab:ba:ef:b2:ce:18:7e:ba:77:6f:03:e7:45:c6:
8f:3f:cf:82:eb:bd:1e:18:be:e6:e9:61:e4:48:9d:fa:31:32:
15:76:34:de:ac:86:b3:fa:3d:19:09:95:00:4f:ba:a1:c4:33:
cd:31:74:ed:12:d5:88:7c:c7:73:71:76:32:ed:fe:fe:d8:7a:
90:67:6c:6e:43:6d:7d:d1:26:97:ac:f3:88:ff:86:86:f1:46:
d0:e7:78:4c:eb:30:23:f5:1f:e0:23:78:81:95:d3:98:00:35:
fe:35:6c:57:e3:72:ab:b1:a9:3d:1b:68:57:8e:72:77:1a:43:
ae:a1:0e:86:00:9e:be:3d:2f:df:dc:aa:c7:fe:84:1c:d7:57:
1e:82:97:42:9f:c6:de:e4:5c:05:c6:23:8d:30:6c:2b:c3:6d:
fb:59:c4:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hS2H0hz5zpmSfnLiJCjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0M2M3NDAyMmNiYmYwYjNjZmZmNjAzMWQ2ZDJkZTAzNjlj
OTllNGUwHhcNMjUwMTMxMTgwMDA5WhcNMjUwMjAxMTgwMDA5WjAzMTEwLwYDVQQD
EyhhZGI5OWNhMGE2ODM0NjBkNjllYjdhOGJlMjZjY2JlYTA2NTIzOTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAdoWfIMhNLBK5YNdIii417GjltG
ZW069kudHcBi3lu1h+e/nyrNR5mdm826zjencYzs29QEPFqz5eKzU4AuBZga+Q28
7NYf3txCRdfxImzPzRNP6UgQhcqEtzC4cFzJkE/ShlNbj5m4K2J/76fV78168HAo
8qsoNHUxJbiHVchPEwsq+3lEpU5+fi1YjJgUwqv+CyhPVSHZveSeckW5DDr7mtCX
00CntQ1nEcsDeE7avfoOAZg5uciB426bUyB0iALMetGtMtsgHRHbpthAkuoKY5jF
pW5VMg8lFzja8EGbyc47o2YehkvQTlzr1zch6yED4HwxKgCyqc7/nwVblQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK25nKCmg0YNaet6i+Jsy+oGUjkXMB8GA1UdIwQY
MBaAFMQ8dAIsu/Czz/9gMdbS3gNpyZ5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveER4MEFpeTc4TFBQXzJBeDF0TGVBMm5Kbms0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lZDVkM2EtYjg2OS00Y2RhLTlkMzIt
MjUwZTU1YjlkNGE5LzEveER4MEFpeTc4TFBQXzJBeDF0TGVBMm5Kbms0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9lZDVkM2EtYjg2OS00Y2RhLTlkMzItMjUwZTU1YjlkNGE5
LzEveER4MEFpeTc4TFBQXzJBeDF0TGVBMm5Kbms0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItRf8HiX
ZHH0DgJzUTD7VecxD6inAqBUiVVapy8lfhwVIJmZAujs5sLgegw0e8inOTZqbtnb
bnq8AXDs+wLgSsPjomjY+L1fn/niXivBUiqSlTZ3PTCMiwTdW8CfwKu677LOGH66
d28D50XGjz/Pguu9Hhi+5ulh5Eid+jEyFXY03qyGs/o9GQmVAE+6ocQzzTF07RLV
iHzHc3F2Mu3+/th6kGdsbkNtfdEml6zziP+GhvFG0Od4TOswI/Uf4CN4gZXTmAA1
/jVsV+Nyq7GpPRtoV45ydxpDrqEOhgCevj0v39yqx/6EHNdXHoKXQp/G3uRcBcYj
jTBsK8Nt+1nEyQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:20 2025 by rpki-client