Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
File: XiMd-Hvf4ien5eQZNANwurMB4nk.mft (raw, json)
Hash identifier: zhaC1YjFLRGBfISJuSjhWJFqc0UjfJOuOWwW7RT+L7g=
Subject key identifier: 2A:F0:FE:68:2C:44:16:D6:37:FA:D0:52:A9:F2:B9:1F:98:9C:77:19
Authority key identifier: 5E:23:1D:F8:7B:DF:E2:27:A7:E5:E4:19:34:03:70:BA:B3:01:E2:79
Certificate issuer: /CN=5e231df87bdfe227a7e5e419340370bab301e279
Certificate serial: 0194BBCE70FA5C69D849860980CFDC5E3CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
Manifest number: 0A2C
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: XiMd-Hvf4ien5eQZNANwurMB4nk.crl (hash: 4CqtTGCwEGGnInhYY24D7rbB++ja8L4BFlw5Qb5p/i0=)
2: w5D1yX-tZICiSwFR7jL3CytqOn4.roa (hash: 2NNJMvsHwacMFGzvYSwe5becAnCEvkEVPVyFOuRSFjk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:70:fa:5c:69:d8:49:86:09:80:cf:dc:5e:3c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e231df87bdfe227a7e5e419340370bab301e279
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=2af0fe682c4416d637fad052a9f2b91f989c7719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:e7:af:fb:28:13:e1:f3:6e:e8:e7:e1:b2:
b7:c6:ca:10:31:bc:75:68:42:a1:75:04:ba:6b:d2:
45:0b:7c:a4:ab:20:68:31:55:d6:c0:a9:91:16:3c:
fe:e5:6d:49:c6:bf:c9:44:b8:6e:e5:06:af:2b:9c:
db:f9:5e:c1:b0:ec:f8:57:85:cb:d9:87:86:ca:ee:
bf:aa:92:d8:51:2e:37:08:88:5c:a6:cd:57:1e:36:
96:a0:43:1c:75:8c:1b:01:da:f5:62:c7:ee:04:af:
7f:a5:aa:e5:c8:08:19:0b:3d:4e:85:6d:53:b4:57:
af:59:21:88:fe:f5:40:2e:aa:08:82:fd:00:df:bb:
0c:b6:04:9d:7c:e6:c2:59:87:c0:b4:96:33:ff:f5:
64:a9:b8:46:1a:c9:b6:2e:b1:88:27:7d:07:79:e6:
7c:f1:a4:6f:eb:bd:fa:97:e3:03:2f:41:8f:e7:93:
c9:ba:1c:16:ca:b2:fc:f8:5c:9a:0e:d7:cd:23:3c:
08:8e:0d:a5:1c:d4:46:5b:87:b6:76:a0:ac:ad:d6:
f6:f0:17:97:f3:69:8c:80:c9:7c:88:cd:4c:df:3c:
92:01:e2:99:4c:1b:2c:75:6d:48:da:21:9b:c8:4b:
71:4c:9e:9d:ee:87:2c:a0:07:a3:ca:94:f1:da:74:
38:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F0:FE:68:2C:44:16:D6:37:FA:D0:52:A9:F2:B9:1F:98:9C:77:19
X509v3 Authority Key Identifier:
keyid:5E:23:1D:F8:7B:DF:E2:27:A7:E5:E4:19:34:03:70:BA:B3:01:E2:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:6e:a8:90:20:b1:ec:67:d3:ff:d1:ba:e3:4c:39:b2:73:b2:
4b:dd:83:77:2c:46:ec:a8:d9:c8:f1:4e:76:0f:76:ef:a0:c6:
b3:3f:3a:9e:f5:d1:d1:89:40:26:91:21:66:1f:19:1d:d1:21:
4c:34:97:bb:f5:d1:03:0a:95:af:90:0c:a7:52:23:cb:c8:b3:
02:d5:e8:0a:f6:03:6f:82:50:45:a2:bc:22:6d:2e:f4:a3:7f:
65:91:10:db:bd:e5:c9:e2:e9:29:3b:30:bf:c0:93:38:10:4b:
14:6a:b8:23:c8:70:1e:9e:f4:11:af:a9:c4:f2:98:bc:db:16:
ea:93:3a:28:5b:bf:c1:34:80:bd:61:4f:de:3f:a3:f7:e7:78:
e9:58:81:1e:cd:52:9d:54:cd:fe:1e:b6:82:19:96:27:a5:21:
44:6e:d7:01:85:a4:97:54:b0:ef:2d:4d:b6:5d:63:b7:27:79:
76:f7:85:b0:8f:4e:3a:22:52:85:8a:b6:2a:2b:46:0c:58:65:
23:bb:e0:64:44:a8:cc:1c:c5:1d:bb:bc:eb:c1:8f:08:9f:55:
71:72:db:9b:e0:a2:7d:61:31:28:4d:ac:eb:22:4f:07:d4:14:
d3:2c:33:97:ce:21:f8:f2:84:ed:9b:70:54:9a:c8:04:a7:f4:
85:ef:68:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znD6XGnYSYYJgM/cXjy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjMxZGY4N2JkZmUyMjdhN2U1ZTQxOTM0MDM3MGJhYjMw
MWUyNzkwHhcNMjUwMTMxMTAwMDU2WhcNMjUwMjAxMTAwMDU2WjAzMTEwLwYDVQQD
EygyYWYwZmU2ODJjNDQxNmQ2MzdmYWQwNTJhOWYyYjkxZjk4OWM3NzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuPnr/soE+Hzbujn4bK3xsoQMbx1
aEKhdQS6a9JFC3ykqyBoMVXWwKmRFjz+5W1Jxr/JRLhu5QavK5zb+V7BsOz4V4XL
2YeGyu6/qpLYUS43CIhcps1XHjaWoEMcdYwbAdr1YsfuBK9/parlyAgZCz1OhW1T
tFevWSGI/vVALqoIgv0A37sMtgSdfObCWYfAtJYz//VkqbhGGsm2LrGIJ30HeeZ8
8aRv6736l+MDL0GP55PJuhwWyrL8+FyaDtfNIzwIjg2lHNRGW4e2dqCsrdb28BeX
82mMgMl8iM1M3zySAeKZTBssdW1I2iGbyEtxTJ6d7ocsoAejypTx2nQ4WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrw/mgsRBbWN/rQUqnyuR+YnHcZMB8GA1UdIwQY
MBaAFF4jHfh73+Inp+XkGTQDcLqzAeJ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGlNZC1IdmY0aWVuNWVRWk5BTnd1ck1CNG5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mNThlOGEtNjIyNy00ZDA3LWFjNTkt
NzZlZDVjYjBlMDIyLzEvWGlNZC1IdmY0aWVuNWVRWk5BTnd1ck1CNG5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mNThlOGEtNjIyNy00ZDA3LWFjNTktNzZlZDVjYjBlMDIy
LzEvWGlNZC1IdmY0aWVuNWVRWk5BTnd1ck1CNG5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2m6okCCx
7GfT/9G640w5snOyS92DdyxG7KjZyPFOdg9276DGsz86nvXR0YlAJpEhZh8ZHdEh
TDSXu/XRAwqVr5AMp1Ijy8izAtXoCvYDb4JQRaK8Im0u9KN/ZZEQ273lyeLpKTsw
v8CTOBBLFGq4I8hwHp70Ea+pxPKYvNsW6pM6KFu/wTSAvWFP3j+j9+d46ViBHs1S
nVTN/h62ghmWJ6UhRG7XAYWkl1Sw7y1Ntl1jtyd5dveFsI9OOiJShYq2KitGDFhl
I7vgZESozBzFHbu868GPCJ9VcXLbm+CifWExKE2s6yJPB9QU0ywzl84h+PKE7Ztw
VJrIBKf0he9o2Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:33 2025 by rpki-client