Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: GiSM6xH7yBzGupkXFbszkMVXaTvnUIal8USfOroyZCE=
Subject key identifier: 22:C2:C5:8B:BF:53:F6:AD:D7:C4:59:71:9C:28:99:13:6E:99:F3:43
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 0195E159CB1BD9458022435BC5F1E58F500C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 122D
Signing time: Sat 29 Mar 2025 10:01:52 +0000
Manifest this update: Sat 29 Mar 2025 10:01:52 +0000
Manifest next update: Sun 30 Mar 2025 10:01:52 +0000
Files and hashes: 1: 1vlRfCaSk19utZ6mYDSMBaT5_HI.roa (hash: z0pNCa/eOomRTa1MMJcTALbLmWhOD7sFEunzHzMt61o=)
2: LntVXyaPLaMdP8m3X0P9FcxlbBQ.roa (hash: pvtUE6SopupEP5UTq2Jd2balbdZ8Y9iC2nnRcYpnAOg=)
3: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: 1iZogHyYIzg6yOnpsCIki3WAZ/7YcfwVjRR/BgWxkQI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:cb:1b:d9:45:80:22:43:5b:c5:f1:e5:8f:50:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Mar 29 10:01:52 2025 GMT
Not After : Mar 30 10:01:52 2025 GMT
Subject: CN=22c2c58bbf53f6add7c459719c2899136e99f343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:42:b8:fb:08:07:34:cb:c4:51:fa:cf:44:
3e:ba:e3:13:87:b8:f4:e6:c5:1c:a5:91:7b:e0:b2:
72:49:58:58:15:09:c1:7d:7a:52:b5:97:fb:03:76:
b6:ab:f6:30:76:f1:e0:a2:e3:b4:26:e9:a4:51:af:
5e:10:a8:94:fe:51:b5:14:b2:12:51:51:0c:01:74:
66:6f:07:e4:55:42:e8:be:1e:08:4a:f3:1f:9a:2c:
9f:5d:2b:69:49:d4:a3:b2:ca:7e:3e:cb:89:36:8d:
c9:a5:8b:b4:c4:c5:47:6d:68:a7:51:e6:ea:4a:97:
fb:29:ac:60:02:48:96:24:0f:70:92:9c:fa:74:e5:
72:c4:a8:b5:9f:5c:1f:fc:f6:ab:e3:75:4b:7f:a9:
8b:0a:03:bc:72:af:70:c9:39:11:ad:ff:c8:22:fb:
a0:23:f8:dc:a9:c5:bf:f2:7c:05:1b:cf:ce:17:eb:
f7:46:86:b8:e9:c1:81:85:3a:90:3b:de:54:44:ba:
55:2a:3f:92:5d:ed:e4:16:d3:7d:22:8e:8a:63:e8:
dd:57:7f:2b:29:ca:c3:10:0a:84:fc:a1:9d:bb:49:
a7:3e:52:c2:18:03:40:96:18:5f:4c:bb:17:fb:5a:
53:17:13:76:cf:0e:6c:34:aa:dc:23:e5:6b:f1:1f:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C2:C5:8B:BF:53:F6:AD:D7:C4:59:71:9C:28:99:13:6E:99:F3:43
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c3:bd:b8:fd:c1:dc:a2:e8:b5:87:3a:25:15:8e:10:df:1e:
68:24:76:4a:2b:38:f8:52:1f:0e:e0:ad:3a:b0:15:d9:84:ff:
53:c7:33:9f:eb:97:8a:8f:f1:52:3a:41:dd:84:e6:0a:77:06:
00:95:0a:0c:49:8b:0b:07:03:f8:8f:4c:96:90:cb:94:5a:c8:
87:16:b7:8e:ff:ac:df:3b:08:8e:8e:e7:1a:6b:73:ac:dd:55:
cc:31:f6:5c:2b:60:c2:89:81:fe:58:34:3e:cc:e7:b1:0c:da:
85:a0:10:8a:00:f3:47:05:0a:1a:28:75:2b:cb:66:5e:e6:d3:
ef:10:4a:ec:ee:04:82:57:ea:f2:20:9d:d3:1e:2f:d9:1d:16:
b6:b2:33:03:72:a1:01:c7:2c:a4:e6:c8:04:4f:f3:96:cd:63:
bb:37:a2:da:c5:b5:cc:8e:72:c7:6d:e8:30:a6:95:4b:15:59:
79:1e:3a:05:23:33:cc:c4:42:a2:1c:69:9e:b6:46:f7:43:93:
44:61:07:dc:75:ef:e0:06:22:ab:55:cf:e0:14:e2:dc:e7:5f:
c8:2e:10:96:a1:98:03:3c:7c:84:79:49:94:12:a6:a7:ed:7c:
d9:f7:6e:28:92:86:e5:af:a5:d3:68:b0:9a:e7:5d:2c:57:45:
ff:68:ec:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWcsb2UWAIkNbxfHlj1AMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTY5NzE2ZDBhZTY0MDY4NzAzMTQwYWEzNzMwZTM3ODhm
ZGQ0YzYwHhcNMjUwMzI5MTAwMTUyWhcNMjUwMzMwMTAwMTUyWjAzMTEwLwYDVQQD
EygyMmMyYzU4YmJmNTNmNmFkZDdjNDU5NzE5YzI4OTkxMzZlOTlmMzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QJCuPsIBzTLxFH6z0Q+uuMTh7j0
5sUcpZF74LJySVhYFQnBfXpStZf7A3a2q/YwdvHgouO0JumkUa9eEKiU/lG1FLIS
UVEMAXRmbwfkVULovh4ISvMfmiyfXStpSdSjssp+PsuJNo3JpYu0xMVHbWinUebq
Spf7KaxgAkiWJA9wkpz6dOVyxKi1n1wf/Par43VLf6mLCgO8cq9wyTkRrf/IIvug
I/jcqcW/8nwFG8/OF+v3Roa46cGBhTqQO95URLpVKj+SXe3kFtN9Io6KY+jdV38r
KcrDEAqE/KGdu0mnPlLCGANAlhhfTLsX+1pTFxN2zw5sNKrcI+Vr8R8ntwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLCxYu/U/at18RZcZwomRNumfNDMB8GA1UdIwQY
MBaAFMYWlxbQrmQGhwMUCqNzDjeI/dTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2Yt
MDQyNDQ2YjcwZmIxLzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2YtMDQyNDQ2YjcwZmIx
LzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcO9uP3B
3KLotYc6JRWOEN8eaCR2Sis4+FIfDuCtOrAV2YT/U8czn+uXio/xUjpB3YTmCncG
AJUKDEmLCwcD+I9MlpDLlFrIhxa3jv+s3zsIjo7nGmtzrN1VzDH2XCtgwomB/lg0
PsznsQzahaAQigDzRwUKGih1K8tmXubT7xBK7O4Eglfq8iCd0x4v2R0WtrIzA3Kh
AccspObIBE/zls1juzei2sW1zI5yx23oMKaVSxVZeR46BSMzzMRCohxpnrZG90OT
RGEH3HXv4AYiq1XP4BTi3OdfyC4QlqGYAzx8hHlJlBKmp+182fduKJKG5a+l02iw
muddLFdF/2jssw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:31:23 2025 by rpki-client