Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: GGmTXfJmmgkhSKKNlKcEw5Qe1qgV7ibL5ZWKGl+L338=
Subject key identifier: 37:B5:E0:11:3C:87:78:CB:C8:B3:08:E1:0D:95:BD:BD:DD:65:5E:6C
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 0195DFD95C49A8D3140A65ABFFED8DC02DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 14BF
Signing time: Sat 29 Mar 2025 03:01:58 +0000
Manifest this update: Sat 29 Mar 2025 03:01:58 +0000
Manifest next update: Sun 30 Mar 2025 03:01:58 +0000
Files and hashes: 1: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: n/NXVHbMVKxpB3jZjzy3vwQ2Sx9ddJ67OC2H6hviJd0=)
2: yYnh0oj8K2dQK2z9LDZZ65DQYSs.roa (hash: 3QTD+1CKKlfqfljPMdL2fAmfzGSrBj/hSNwxcC4oGqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:5c:49:a8:d3:14:0a:65:ab:ff:ed:8d:c0:2d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Mar 29 03:01:58 2025 GMT
Not After : Mar 30 03:01:58 2025 GMT
Subject: CN=37b5e0113c8778cbc8b308e10d95bdbddd655e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:f0:6a:7d:e4:1c:14:74:04:be:3a:44:d0:
b1:71:32:f3:f0:9b:21:ef:11:96:95:74:4c:14:fa:
8b:07:2b:90:f3:31:bb:7c:89:5b:2b:33:9c:b8:a1:
a5:25:92:d4:66:ca:24:ea:df:b2:ce:b6:6e:05:14:
f0:b5:e7:72:f4:85:4c:e3:bf:ae:04:cb:d5:69:fd:
92:e8:4f:62:4d:ae:6b:bb:8b:49:e5:4e:20:cf:cc:
83:e0:19:53:27:14:b9:e0:07:e6:27:5a:b7:c2:4d:
dd:8e:c6:ff:19:ba:7d:be:db:c8:5f:5b:00:4e:27:
69:7c:73:63:1c:19:7a:b3:ef:91:0c:b6:0b:9e:fb:
86:1e:05:9b:bc:dc:4d:1e:be:d1:8f:b9:0a:53:3d:
30:2a:0d:b2:96:9e:b4:60:8c:15:63:bd:25:01:70:
eb:9d:74:4d:6d:0a:9f:f8:60:e3:32:a3:58:c8:49:
0d:2d:7d:56:60:7c:2d:e5:cc:42:6f:86:a5:5d:a6:
dd:d3:c5:81:75:1f:52:0f:a1:a8:30:15:f9:39:1a:
48:fd:50:70:18:ee:34:53:2e:81:ce:a8:4a:e3:cb:
34:13:41:cf:f3:87:c5:c7:e7:0e:ff:50:fc:47:5b:
11:51:a1:4f:7d:ae:13:cf:a4:69:da:71:19:0e:c3:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B5:E0:11:3C:87:78:CB:C8:B3:08:E1:0D:95:BD:BD:DD:65:5E:6C
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bf:64:64:69:73:a1:8f:33:54:e9:54:e2:cd:42:85:8c:2d:
ca:20:3d:d1:aa:20:c1:ef:4e:95:85:51:7b:ee:5e:63:30:66:
9e:e2:43:ad:fe:53:cb:9e:4b:19:de:28:bb:26:c0:f5:bf:4a:
17:90:0d:0e:37:31:be:43:2c:20:c6:74:e9:e5:b7:b3:33:7d:
76:5d:c6:7a:76:ec:02:57:59:03:bd:8e:bd:68:a2:4e:1d:2a:
6f:65:df:6e:91:5d:42:ac:13:a6:ed:5f:c7:b3:cb:09:14:3a:
d3:0b:f3:94:66:04:07:63:02:2c:74:cb:26:77:fe:e4:63:66:
5c:f0:63:d0:39:55:89:07:d7:fe:7f:2d:a0:ed:61:6c:bd:8b:
1f:01:b7:4f:9f:c4:29:f9:40:9a:16:c2:0a:ff:6c:e5:17:15:
15:28:8c:71:89:26:92:21:ad:14:c1:5e:03:71:7a:f6:da:d8:
6c:34:be:03:c8:17:3e:02:99:95:d7:89:c1:25:39:a5:1e:9b:
07:8c:d8:fb:b7:cf:d8:be:da:ea:24:c8:b5:74:f0:90:c7:35:
03:5c:cb:ce:08:ac:24:af:35:cc:43:d6:39:8a:b1:f1:c2:bc:
aa:72:56:db:e0:c9:24:55:79:14:46:f5:d0:cd:b0:a7:c3:61:
98:2b:0d:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2VxJqNMUCmWr/+2NwC3wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMTI5YjA0NjBjZjllZTA1MDBlZTg4MGEyY2ZhMWE1MjRl
NGRmMDAwHhcNMjUwMzI5MDMwMTU4WhcNMjUwMzMwMDMwMTU4WjAzMTEwLwYDVQQD
EygzN2I1ZTAxMTNjODc3OGNiYzhiMzA4ZTEwZDk1YmRiZGRkNjU1ZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpjwan3kHBR0BL46RNCxcTLz8Jsh
7xGWlXRMFPqLByuQ8zG7fIlbKzOcuKGlJZLUZsok6t+yzrZuBRTwtedy9IVM47+u
BMvVaf2S6E9iTa5ru4tJ5U4gz8yD4BlTJxS54AfmJ1q3wk3djsb/Gbp9vtvIX1sA
TidpfHNjHBl6s++RDLYLnvuGHgWbvNxNHr7Rj7kKUz0wKg2ylp60YIwVY70lAXDr
nXRNbQqf+GDjMqNYyEkNLX1WYHwt5cxCb4alXabd08WBdR9SD6GoMBX5ORpI/VBw
GO40Uy6BzqhK48s0E0HP84fFx+cO/1D8R1sRUaFPfa4Tz6Rp2nEZDsPA+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDe14BE8h3jLyLMI4Q2Vvb3dZV5sMB8GA1UdIwQY
MBaAFF0SmwRgz57gUA7ogKLPoaUk5N8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEt
YTg3N2RkNTFiYzQ5LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEtYTg3N2RkNTFiYzQ5
LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWL9kZGlz
oY8zVOlU4s1ChYwtyiA90aogwe9OlYVRe+5eYzBmnuJDrf5Ty55LGd4ouybA9b9K
F5ANDjcxvkMsIMZ06eW3szN9dl3GenbsAldZA72OvWiiTh0qb2XfbpFdQqwTpu1f
x7PLCRQ60wvzlGYEB2MCLHTLJnf+5GNmXPBj0DlViQfX/n8toO1hbL2LHwG3T5/E
KflAmhbCCv9s5RcVFSiMcYkmkiGtFMFeA3F69trYbDS+A8gXPgKZldeJwSU5pR6b
B4zY+7fP2L7a6iTItXTwkMc1A1zLzgisJK81zEPWOYqx8cK8qnJW2+DJJFV5FEb1
0M2wp8NhmCsNUw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 02:09:46 2025 by rpki-client