Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.mft
File: xJqjIm6vrB530j6PzvGJADhAA8c.mft (raw, json)
Hash identifier: Xlc2jGXZnChkVzSkWxW7nWfHfOnGtit0bf6AjK93frw=
Subject key identifier: 7F:6A:9D:EF:95:90:C2:B4:21:95:FA:91:4D:BE:E5:B5:B0:08:80:FF
Authority key identifier: C4:9A:A3:22:6E:AF:AC:1E:77:D2:3E:8F:CE:F1:89:00:38:40:03:C7
Certificate issuer: /CN=c49aa3226eafac1e77d23e8fcef18900384003c7
Certificate serial: 01963C53F81C8BFB77E36320926F4220F9A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJqjIm6vrB530j6PzvGJADhAA8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.mft
Manifest number: 1109
Signing time: Wed 16 Apr 2025 02:00:58 +0000
Manifest this update: Wed 16 Apr 2025 02:00:58 +0000
Manifest next update: Thu 17 Apr 2025 02:00:58 +0000
Files and hashes: 1: PRgXoAwZkCkiYJg9TctLDNDPN1c.roa (hash: PJQ6eErOeYZwguFeHefcnTCZY+UDhTIu8HobmUpRc20=)
2: xJqjIm6vrB530j6PzvGJADhAA8c.crl (hash: RQQcYVDGy/D2uKyaYWKwoH/cIwhXMVQ8PByvJX987L8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:53:f8:1c:8b:fb:77:e3:63:20:92:6f:42:20:f9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49aa3226eafac1e77d23e8fcef18900384003c7
Validity
Not Before: Apr 16 02:00:58 2025 GMT
Not After : Apr 17 02:00:58 2025 GMT
Subject: CN=7f6a9def9590c2b42195fa914dbee5b5b00880ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:19:b3:d0:2e:bb:f6:e5:30:16:c1:0d:46:46:
e1:f1:da:3b:90:da:09:97:df:84:c6:af:d4:e3:cd:
d4:a7:83:e0:04:01:8e:40:2b:a9:d7:2c:51:bb:c4:
af:a0:aa:6d:7c:a0:fd:18:78:40:bb:70:13:de:53:
d1:55:4b:3d:b6:d3:a6:34:13:4a:ed:87:ea:c3:3e:
7b:19:10:2c:17:a2:9b:bc:54:5b:2a:e2:df:2d:01:
1c:9c:b6:69:66:ec:41:5c:ac:b4:93:c2:7d:3b:91:
5c:d3:73:e0:c5:2e:44:00:cc:06:2d:cb:0e:64:8f:
61:1e:f4:b6:5b:4b:95:da:c8:13:bf:bd:50:a2:24:
36:52:a0:e3:d9:b8:4a:21:b1:b5:1b:f5:b9:42:f2:
1a:75:20:d5:7e:17:02:e1:95:b1:7b:44:a7:b6:57:
af:b1:e9:c5:57:b0:de:f8:4e:aa:83:3c:d2:72:04:
e7:e1:52:d1:fe:98:17:23:bf:e2:cd:de:d4:b9:ea:
58:f3:1a:1b:49:b9:2e:38:b7:fd:99:d6:55:36:b2:
a8:19:99:8f:1f:42:2b:36:0b:ca:b9:e6:7b:c5:cc:
22:f3:9a:35:0b:67:9e:44:48:65:f2:b2:27:ad:a9:
38:e4:0d:16:cc:33:a8:dd:b7:a9:46:a5:71:9f:98:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6A:9D:EF:95:90:C2:B4:21:95:FA:91:4D:BE:E5:B5:B0:08:80:FF
X509v3 Authority Key Identifier:
keyid:C4:9A:A3:22:6E:AF:AC:1E:77:D2:3E:8F:CE:F1:89:00:38:40:03:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJqjIm6vrB530j6PzvGJADhAA8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:fc:18:95:fe:bf:0b:b9:f3:04:ac:ba:7a:95:51:40:f0:e1:
29:5a:37:6f:b8:16:10:86:53:fb:4a:32:fe:ad:97:77:65:f2:
3a:37:f0:3c:11:31:3e:7b:e6:56:27:37:29:51:d4:8f:24:3a:
1b:75:be:7e:07:76:6b:f0:00:96:ed:64:52:de:7d:62:60:8e:
ea:85:af:ca:e4:9a:8a:32:a0:db:ba:6b:fa:c1:30:29:13:ea:
bf:30:a0:b0:15:dc:86:53:bc:c0:fb:43:2a:4f:03:cf:53:e1:
a1:54:15:de:0a:d1:3a:ea:1c:fc:9b:7e:2e:79:cf:4a:5a:3b:
87:0e:c8:e6:f8:ec:ca:2c:6d:25:b6:2b:a8:68:1f:97:69:d4:
92:d9:15:cc:c7:ba:fe:e5:db:49:30:5f:b2:30:58:8f:8b:6a:
ac:aa:ed:22:58:00:68:da:ee:af:df:96:56:2c:7d:f3:4d:4a:
a9:6c:dd:11:9a:21:45:0b:3e:a7:4a:8f:5a:bf:47:2b:e3:11:
46:22:7c:c9:3b:b1:19:c9:f1:7f:8d:e5:9a:3e:cf:12:23:6b:
43:bf:73:4f:f6:88:1b:7a:27:e6:68:dd:de:4b:08:1a:61:26:
83:20:0d:69:8b:a7:d4:bf:c2:5c:80:ed:27:24:1c:b5:27:a8:
e5:d9:52:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY8U/gci/t342Mgkm9CIPmlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWFhMzIyNmVhZmFjMWU3N2QyM2U4ZmNlZjE4OTAwMzg0
MDAzYzcwHhcNMjUwNDE2MDIwMDU4WhcNMjUwNDE3MDIwMDU4WjAzMTEwLwYDVQQD
Eyg3ZjZhOWRlZjk1OTBjMmI0MjE5NWZhOTE0ZGJlZTViNWIwMDg4MGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Rmz0C679uUwFsENRkbh8do7kNoJ
l9+Exq/U483Up4PgBAGOQCup1yxRu8SvoKptfKD9GHhAu3AT3lPRVUs9ttOmNBNK
7Yfqwz57GRAsF6KbvFRbKuLfLQEcnLZpZuxBXKy0k8J9O5Fc03PgxS5EAMwGLcsO
ZI9hHvS2W0uV2sgTv71QoiQ2UqDj2bhKIbG1G/W5QvIadSDVfhcC4ZWxe0Sntlev
senFV7De+E6qgzzScgTn4VLR/pgXI7/izd7UuepY8xobSbkuOLf9mdZVNrKoGZmP
H0IrNgvKueZ7xcwi85o1C2eeREhl8rInrak45A0WzDOo3bepRqVxn5gg/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9qne+VkMK0IZX6kU2+5bWwCID/MB8GA1UdIwQY
MBaAFMSaoyJur6wed9I+j87xiQA4QAPHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpxakltNnZyQjUzMGo2UHp2R0pBRGhBQThjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wOGQwMTgtZTcwOS00N2ZjLTliOWUt
YThmY2FjODZiNjRlLzEveEpxakltNnZyQjUzMGo2UHp2R0pBRGhBQThjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wOGQwMTgtZTcwOS00N2ZjLTliOWUtYThmY2FjODZiNjRl
LzEveEpxakltNnZyQjUzMGo2UHp2R0pBRGhBQThjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvwYlf6/
C7nzBKy6epVRQPDhKVo3b7gWEIZT+0oy/q2Xd2XyOjfwPBExPnvmVic3KVHUjyQ6
G3W+fgd2a/AAlu1kUt59YmCO6oWvyuSaijKg27pr+sEwKRPqvzCgsBXchlO8wPtD
Kk8Dz1PhoVQV3grROuoc/Jt+LnnPSlo7hw7I5vjsyixtJbYrqGgfl2nUktkVzMe6
/uXbSTBfsjBYj4tqrKrtIlgAaNrur9+WVix9801KqWzdEZohRQs+p0qPWr9HK+MR
RiJ8yTuxGcnxf43lmj7PEiNrQ79zT/aIG3on5mjd3ksIGmEmgyANaYun1L/CXIDt
JyQctSeo5dlSMQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:39:35 2025 by rpki-client