Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/456de2-99ed-47ae-aa5e-0b1dc736d9dd/1/xeGbJUl_YB90e-awtclcAgX6qcU.mft
File: xeGbJUl_YB90e-awtclcAgX6qcU.mft (raw, json)
Hash identifier: WOnVqw9cnBxDlR3pjl3NClist7A1QlipnOPhVmOUrMQ=
Subject key identifier: F9:CF:4D:E5:CE:B5:B2:E2:DF:F6:AA:DB:3B:C5:EA:04:62:91:A9:41
Authority key identifier: C5:E1:9B:25:49:7F:60:1F:74:7B:E6:B0:B5:C9:5C:02:05:FA:A9:C5
Certificate issuer: /CN=c5e19b25497f601f747be6b0b5c95c0205faa9c5
Certificate serial: 01939154245370FBB31E0D10AE1499A54FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeGbJUl_YB90e-awtclcAgX6qcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/456de2-99ed-47ae-aa5e-0b1dc736d9dd/1/xeGbJUl_YB90e-awtclcAgX6qcU.mft
Manifest number: 02C7
Signing time: Wed 04 Dec 2024 11:00:30 +0000
Manifest this update: Wed 04 Dec 2024 11:00:30 +0000
Manifest next update: Thu 05 Dec 2024 11:00:30 +0000
Files and hashes: 1: R0S13_V-urKtQXjdxg1aUDYBxyE.roa (hash: TnIBr21nA4i68sEgTiNI0QWAUs2A1u4IcnkFjH6sJOw=)
2: xeGbJUl_YB90e-awtclcAgX6qcU.crl (hash: JSZeKy2qXD/Wq74yTo03zZ5miHan0mLdm0mPSuqj5g8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:91:54:24:53:70:fb:b3:1e:0d:10:ae:14:99:a5:4f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e19b25497f601f747be6b0b5c95c0205faa9c5
Validity
Not Before: Dec 4 11:00:30 2024 GMT
Not After : Dec 5 11:00:30 2024 GMT
Subject: CN=f9cf4de5ceb5b2e2dff6aadb3bc5ea046291a941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:5d:97:6d:f4:ab:20:c7:50:f4:db:32:dd:
03:d2:87:b5:09:27:7d:95:79:99:24:fb:c2:54:fc:
26:cc:c8:ab:f3:92:f0:3a:af:35:5a:a7:34:69:a9:
a6:40:26:39:41:8a:6c:59:46:96:11:f1:8d:88:66:
79:70:ca:9e:37:e0:f7:a6:11:67:f2:8f:db:90:60:
d0:3d:69:50:97:0f:59:b9:21:b4:97:cb:7f:97:07:
1a:47:1b:8b:f8:f6:eb:90:ff:48:34:3f:79:a1:31:
65:54:2f:01:8a:b1:33:62:b9:f5:54:d5:83:9d:a0:
0f:2e:a2:fd:5c:0d:ee:4f:93:e9:df:27:f9:20:16:
1b:48:1a:97:a4:aa:c7:01:02:cc:3b:12:9b:ea:f4:
37:41:49:ab:5e:36:83:a4:85:5b:36:12:c7:f8:b1:
69:77:4d:05:8c:65:76:e0:7a:69:03:80:9c:cc:ab:
5f:25:27:ca:cc:62:9a:45:ad:d6:22:b1:03:92:bc:
fa:5d:53:4e:2f:cb:4c:b9:81:04:03:b0:28:b3:aa:
19:d7:17:0b:48:07:a6:f5:d8:3e:85:f2:f4:d9:38:
9e:1e:cc:e0:ac:0a:e6:65:f5:8f:ab:28:5a:84:08:
e1:2d:0a:4d:a7:8e:85:48:00:1e:4e:2a:d1:10:59:
10:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CF:4D:E5:CE:B5:B2:E2:DF:F6:AA:DB:3B:C5:EA:04:62:91:A9:41
X509v3 Authority Key Identifier:
keyid:C5:E1:9B:25:49:7F:60:1F:74:7B:E6:B0:B5:C9:5C:02:05:FA:A9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeGbJUl_YB90e-awtclcAgX6qcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/456de2-99ed-47ae-aa5e-0b1dc736d9dd/1/xeGbJUl_YB90e-awtclcAgX6qcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/456de2-99ed-47ae-aa5e-0b1dc736d9dd/1/xeGbJUl_YB90e-awtclcAgX6qcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c5:f0:01:74:fb:e3:62:16:d4:99:44:27:1d:78:ec:9d:ae:
d8:c7:7a:43:eb:ef:bf:62:3b:93:2a:ac:c5:56:6a:17:73:72:
13:3c:ff:b0:ab:bf:6f:cb:1b:f0:8c:26:4b:6f:16:78:32:6c:
e8:1c:b6:43:cd:e8:bb:e4:24:b8:42:3f:f4:39:e3:30:75:6a:
53:6a:75:8c:dc:23:f1:eb:8f:4a:80:1f:8d:51:ad:df:23:0d:
07:44:4a:80:48:e3:38:83:32:50:c0:ef:48:76:98:92:59:d4:
e4:04:5e:d7:54:c4:c7:ca:57:8a:43:31:e7:36:ac:4b:e4:8e:
27:25:46:da:2e:b2:79:65:bf:00:a7:12:6d:69:87:ea:a7:70:
a5:87:4c:35:e5:d5:e9:29:0e:bd:91:39:21:fe:b5:6b:c6:c7:
41:d8:c1:86:35:41:18:de:96:93:70:e2:c5:5f:56:93:15:fa:
68:4b:25:98:80:b0:44:2a:ee:04:a0:09:7c:7a:17:cc:19:2b:
10:e7:69:3c:7f:ac:8e:af:b1:20:1c:52:3a:d6:da:a2:0b:0e:
fa:83:11:56:12:94:2a:1d:45:7b:0a:1c:83:fb:6a:80:7a:78:
56:0d:73:14:87:b2:c8:d1:3b:24:98:55:5e:b4:9f:08:fe:1c:
09:c0:71:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZORVCRTcPuzHg0QrhSZpU+5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZTE5YjI1NDk3ZjYwMWY3NDdiZTZiMGI1Yzk1YzAyMDVm
YWE5YzUwHhcNMjQxMjA0MTEwMDMwWhcNMjQxMjA1MTEwMDMwWjAzMTEwLwYDVQQD
EyhmOWNmNGRlNWNlYjViMmUyZGZmNmFhZGIzYmM1ZWEwNDYyOTFhOTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFNdl230qyDHUPTbMt0D0oe1CSd9
lXmZJPvCVPwmzMir85LwOq81Wqc0aammQCY5QYpsWUaWEfGNiGZ5cMqeN+D3phFn
8o/bkGDQPWlQlw9ZuSG0l8t/lwcaRxuL+PbrkP9IND95oTFlVC8BirEzYrn1VNWD
naAPLqL9XA3uT5Pp3yf5IBYbSBqXpKrHAQLMOxKb6vQ3QUmrXjaDpIVbNhLH+LFp
d00FjGV24HppA4CczKtfJSfKzGKaRa3WIrEDkrz6XVNOL8tMuYEEA7Aos6oZ1xcL
SAem9dg+hfL02TieHszgrArmZfWPqyhahAjhLQpNp46FSAAeTirREFkQfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnPTeXOtbLi3/aq2zvF6gRikalBMB8GA1UdIwQY
MBaAFMXhmyVJf2AfdHvmsLXJXAIF+qnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGVHYkpVbF9ZQjkwZS1hd3RjbGNBZ1g2cWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80NTZkZTItOTllZC00N2FlLWFhNWUt
MGIxZGM3MzZkOWRkLzEveGVHYkpVbF9ZQjkwZS1hd3RjbGNBZ1g2cWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC80NTZkZTItOTllZC00N2FlLWFhNWUtMGIxZGM3MzZkOWRk
LzEveGVHYkpVbF9ZQjkwZS1hd3RjbGNBZ1g2cWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMXwAXT7
42IW1JlEJx147J2u2Md6Q+vvv2I7kyqsxVZqF3NyEzz/sKu/b8sb8IwmS28WeDJs
6By2Q83ou+QkuEI/9DnjMHVqU2p1jNwj8euPSoAfjVGt3yMNB0RKgEjjOIMyUMDv
SHaYklnU5ARe11TEx8pXikMx5zasS+SOJyVG2i6yeWW/AKcSbWmH6qdwpYdMNeXV
6SkOvZE5If61a8bHQdjBhjVBGN6Wk3DixV9WkxX6aEslmICwRCruBKAJfHoXzBkr
EOdpPH+sjq+xIBxSOtbaogsO+oMRVhKUKh1Fewocg/tqgHp4Vg1zFIeyyNE7JJhV
XrSfCP4cCcBx5g==
-----END CERTIFICATE-----
Generated at Sat Apr 12 19:09:39 2025 by rpki-client