Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
File: XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft (raw, json)
Hash identifier: ggYDzL52Fj/6u3ap4s9cr7EZBiwMe6/saRHvkRVD814=
Subject key identifier: 49:F9:23:08:29:5F:1C:FF:27:BC:DD:A3:E8:9E:E8:07:B7:04:64:92
Authority key identifier: 5E:EC:D2:03:10:7A:6E:4C:09:62:ED:5A:C4:18:09:E8:C9:2F:D6:B7
Certificate issuer: /CN=5eecd203107a6e4c0962ed5ac41809e8c92fd6b7
Certificate serial: 019711671FEBBC39D544BBEF4B136ED9A40B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
Manifest number: 096C
Signing time: Tue 27 May 2025 11:01:00 +0000
Manifest this update: Tue 27 May 2025 11:01:00 +0000
Manifest next update: Wed 28 May 2025 11:01:00 +0000
Files and hashes: 1: XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl (hash: kIsPVkx+HSPhUN4d1DaVvjSTGFyO/u8WJhjGM0XDEp0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:67:1f:eb:bc:39:d5:44:bb:ef:4b:13:6e:d9:a4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eecd203107a6e4c0962ed5ac41809e8c92fd6b7
Validity
Not Before: May 27 11:01:00 2025 GMT
Not After : May 28 11:01:00 2025 GMT
Subject: CN=49f92308295f1cff27bcdda3e89ee807b7046492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:0f:ad:32:12:17:95:9e:ad:7d:64:e9:06:
38:1c:44:70:05:8e:c8:7e:7c:79:70:69:15:07:e8:
96:ce:91:68:12:5e:38:05:50:9c:aa:0c:14:9d:bb:
06:be:3d:bf:c3:af:d3:c5:d5:2b:09:7f:ca:92:ab:
2a:5f:43:6b:67:b7:ec:8e:23:7f:0b:ee:c4:31:3a:
1e:50:4c:b7:e2:45:fa:60:84:d4:c5:6a:25:69:20:
f6:0f:92:cd:e8:74:d2:4b:1d:8f:9a:7b:0a:f1:0e:
10:3b:21:29:06:0c:b3:ce:0a:cc:6d:ff:9d:eb:a9:
ae:b5:88:e6:11:f9:89:a4:f1:30:3d:da:79:f0:b1:
b9:d3:ac:bf:69:02:1f:4d:35:90:5d:62:06:05:08:
ce:ae:83:30:e8:f4:60:ef:13:9c:de:c7:d6:d0:eb:
33:e9:5f:6d:60:30:e2:ea:a9:4f:8d:ec:16:dd:57:
77:46:53:a2:4b:f6:4d:72:74:48:57:22:0b:15:3a:
6e:f4:3f:e2:a1:50:14:cf:53:32:23:de:e4:b7:2b:
bd:37:da:0b:f4:87:5e:b8:1e:80:24:18:ab:ea:c7:
0a:ed:c5:b3:0d:25:bb:21:b1:ff:c7:24:a4:b6:a6:
be:41:f7:42:fa:e8:49:a5:96:2d:01:c8:28:96:2d:
2d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F9:23:08:29:5F:1C:FF:27:BC:DD:A3:E8:9E:E8:07:B7:04:64:92
X509v3 Authority Key Identifier:
keyid:5E:EC:D2:03:10:7A:6E:4C:09:62:ED:5A:C4:18:09:E8:C9:2F:D6:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f0:ca:ae:34:59:6b:1d:d4:ff:c2:0f:fe:b4:d2:dc:bc:0f:
f6:47:93:ad:ea:41:52:94:a6:e2:5b:92:81:57:50:ec:12:21:
90:34:e4:53:69:2e:39:0a:25:7f:0d:93:32:36:76:f4:e8:7a:
d3:77:9c:8f:ac:62:53:ef:8a:96:38:e8:c2:1e:73:5b:e2:36:
a2:6e:d4:2e:67:a6:84:ea:f6:5c:3b:e8:2d:8f:f3:0a:56:ec:
40:2a:a1:6d:17:73:fa:81:70:ae:5d:0d:56:a3:fb:9d:60:3f:
ec:43:e3:0e:35:04:48:c3:07:fd:d5:43:5f:28:83:a2:37:f0:
ac:fc:f2:1c:5f:c3:53:ca:36:d2:78:e7:71:f9:20:d6:ee:ee:
41:21:00:24:1b:10:1a:c7:a0:17:08:3e:f1:65:d3:d2:af:8f:
59:68:a5:47:e9:3f:8a:57:ab:7b:7b:0e:d6:58:b6:33:79:d6:
49:44:dc:06:d7:c8:67:ba:cc:58:73:31:54:d0:f5:fb:c0:91:
3c:d4:c3:2c:db:07:e7:3f:18:4f:73:c7:26:3b:54:db:e2:44:
57:f1:58:d4:ca:0a:43:33:46:81:e6:8c:7c:dc:2f:d2:4c:29:
4a:b4:d5:7b:25:17:73:80:0b:30:9f:e2:cc:6a:d0:66:35:62:
8f:be:8d:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZcRZx/rvDnVRLvvSxNu2aQLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZWNkMjAzMTA3YTZlNGMwOTYyZWQ1YWM0MTgwOWU4Yzky
ZmQ2YjcwHhcNMjUwNTI3MTEwMTAwWhcNMjUwNTI4MTEwMTAwWjAzMTEwLwYDVQQD
Eyg0OWY5MjMwODI5NWYxY2ZmMjdiY2RkYTNlODllZTgwN2I3MDQ2NDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVAPrTISF5WerX1k6QY4HERwBY7I
fnx5cGkVB+iWzpFoEl44BVCcqgwUnbsGvj2/w6/TxdUrCX/KkqsqX0NrZ7fsjiN/
C+7EMToeUEy34kX6YITUxWolaSD2D5LN6HTSSx2PmnsK8Q4QOyEpBgyzzgrMbf+d
66mutYjmEfmJpPEwPdp58LG506y/aQIfTTWQXWIGBQjOroMw6PRg7xOc3sfW0Osz
6V9tYDDi6qlPjewW3Vd3RlOiS/ZNcnRIVyILFTpu9D/ioVAUz1MyI97ktyu9N9oL
9IdeuB6AJBir6scK7cWzDSW7IbH/xySktqa+QfdC+uhJpZYtAcgoli0txQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEn5IwgpXxz/J7zdo+ie6Ae3BGSSMB8GA1UdIwQY
MBaAFF7s0gMQem5MCWLtWsQYCejJL9a3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHV6U0F4QjZia3dKWXUxYXhCZ0o2TWt2MXJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC81MzEwYjUtYjY3MS00MTZmLWJhZDIt
NTE3Yjk1YjE2MjVjLzEvWHV6U0F4QjZia3dKWXUxYXhCZ0o2TWt2MXJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC81MzEwYjUtYjY3MS00MTZmLWJhZDItNTE3Yjk1YjE2MjVj
LzEvWHV6U0F4QjZia3dKWXUxYXhCZ0o2TWt2MXJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/DKrjRZ
ax3U/8IP/rTS3LwP9keTrepBUpSm4luSgVdQ7BIhkDTkU2kuOQolfw2TMjZ29Oh6
03ecj6xiU++Kljjowh5zW+I2om7ULmemhOr2XDvoLY/zClbsQCqhbRdz+oFwrl0N
VqP7nWA/7EPjDjUESMMH/dVDXyiDojfwrPzyHF/DU8o20njncfkg1u7uQSEAJBsQ
GsegFwg+8WXT0q+PWWilR+k/ilere3sO1li2M3nWSUTcBtfIZ7rMWHMxVND1+8CR
PNTDLNsH5z8YT3PHJjtU2+JEV/FY1MoKQzNGgeaMfNwv0kwpSrTVeyUXc4ALMJ/i
zGrQZjVij76NGg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:19:27 2025 by rpki-client