Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
File: xDwiL60sJ8phLJjCc9TxZQbhsuU.mft (raw, json)
Hash identifier: o6lgmk9mal0Asw+Ur9Ms4uaFZ1+lJBa+Qsw6+R046Dk=
Subject key identifier: 63:B8:3A:E3:52:08:7E:7B:95:2C:F2:91:72:C2:0D:0B:97:64:37:5A
Authority key identifier: C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
Certificate issuer: /CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Certificate serial: 0195E00FBA0FB8801C9113CE156263E9758C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
Manifest number: 0D42
Signing time: Sat 29 Mar 2025 04:01:21 +0000
Manifest this update: Sat 29 Mar 2025 04:01:21 +0000
Manifest next update: Sun 30 Mar 2025 04:01:21 +0000
Files and hashes: 1: BxG4JwAN57vo6NBlUISw9RdW7m0.roa (hash: roJixiQowuB4avbvI55JLdOWJ/KjfR6U+Yu2VKUFfoA=)
2: xDwiL60sJ8phLJjCc9TxZQbhsuU.crl (hash: 7h9m1on1M80DGddXTyV8wCphNvhLuE5a7DxPGWdyAXw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:ba:0f:b8:80:1c:91:13:ce:15:62:63:e9:75:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Validity
Not Before: Mar 29 04:01:21 2025 GMT
Not After : Mar 30 04:01:21 2025 GMT
Subject: CN=63b83ae352087e7b952cf29172c20d0b9764375a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:87:a5:71:15:23:dc:7c:0d:49:c9:41:83:
b2:fd:ca:0c:65:c3:60:8c:f0:18:fc:b6:bb:93:ae:
17:cf:31:92:e1:63:c6:38:0e:0a:a5:4e:a6:86:d0:
2c:c3:bb:5f:5b:50:70:2d:d3:42:0f:a2:e1:ef:60:
e3:27:c1:68:3c:5f:d8:95:5f:58:ef:43:09:4b:36:
57:9e:2a:f7:fa:6e:42:bb:e6:b1:98:cd:fe:8c:67:
74:97:bf:25:8f:67:fe:95:99:28:12:7d:e2:7a:1e:
e1:ab:a1:12:06:74:e9:1e:87:82:9b:73:1e:9b:3a:
12:26:fc:69:24:6f:04:ab:07:ff:42:c2:8b:94:5c:
04:0f:33:fc:99:d0:2c:03:b2:e4:f8:7b:cc:ed:d0:
93:39:4a:1e:b5:29:71:65:8a:ce:00:be:04:c0:44:
65:25:cf:65:4a:ac:8d:b1:8f:8f:0e:a7:b9:97:8b:
24:b0:75:37:86:64:d8:3b:3b:07:ca:61:12:5f:36:
c3:47:ed:fe:ec:78:c6:15:9d:82:4c:64:32:20:16:
cc:aa:e7:06:5c:b9:e3:93:df:4c:93:ab:2d:94:ff:
fc:86:c9:e4:e0:b9:ab:a9:83:13:64:51:1f:0a:59:
36:72:a6:2e:32:52:6c:a4:61:e0:57:72:f4:f0:56:
97:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B8:3A:E3:52:08:7E:7B:95:2C:F2:91:72:C2:0D:0B:97:64:37:5A
X509v3 Authority Key Identifier:
keyid:C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:61:a2:b9:d3:c1:ae:92:b7:03:67:7e:c3:b7:85:f0:e9:b9:
e1:e0:2c:e8:87:5a:48:11:b9:f9:43:a4:27:ce:c6:73:40:46:
9c:8e:35:a7:fb:63:cc:c9:0b:73:93:49:3d:60:05:c6:be:94:
35:a7:08:0f:80:cf:84:48:c7:77:e6:3a:0a:5a:fc:10:f6:02:
a2:17:00:89:57:f2:5d:ba:d6:66:6a:c1:b0:77:69:ec:a4:59:
66:a1:a9:d5:7a:7e:06:59:04:54:a5:e2:f3:d6:9a:96:0e:ce:
74:6f:93:3e:67:69:24:a8:f8:cb:18:3d:bf:39:6c:ff:a0:db:
22:1f:0a:ba:fb:87:b1:96:97:f2:78:f2:55:ec:12:aa:d7:83:
10:80:5f:74:45:16:f0:67:ee:42:ab:18:5c:70:b6:3c:a5:29:
4d:cb:a3:b9:f9:9b:4a:5c:21:50:19:d8:25:00:65:f6:39:57:
91:76:9a:05:5e:22:65:16:12:ef:f3:1b:c7:50:91:04:48:1c:
e8:ff:91:a4:41:e4:59:fd:80:35:7f:96:64:50:d8:51:50:86:
1f:76:87:08:83:d0:10:a4:99:7f:ea:96:7a:0e:49:fc:e4:47:
f2:34:0e:ff:55:5d:b1:80:cc:00:3c:87:11:b3:cf:65:ad:71:
f5:8a:b0:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD7oPuIAckRPOFWJj6XWMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0M2MyMjJmYWQyYzI3Y2E2MTJjOThjMjczZDRmMTY1MDZl
MWIyZTUwHhcNMjUwMzI5MDQwMTIxWhcNMjUwMzMwMDQwMTIxWjAzMTEwLwYDVQQD
Eyg2M2I4M2FlMzUyMDg3ZTdiOTUyY2YyOTE3MmMyMGQwYjk3NjQzNzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7qHpXEVI9x8DUnJQYOy/coMZcNg
jPAY/La7k64XzzGS4WPGOA4KpU6mhtAsw7tfW1BwLdNCD6Lh72DjJ8FoPF/YlV9Y
70MJSzZXnir3+m5Cu+axmM3+jGd0l78lj2f+lZkoEn3ieh7hq6ESBnTpHoeCm3Me
mzoSJvxpJG8Eqwf/QsKLlFwEDzP8mdAsA7Lk+HvM7dCTOUoetSlxZYrOAL4EwERl
Jc9lSqyNsY+PDqe5l4sksHU3hmTYOzsHymESXzbDR+3+7HjGFZ2CTGQyIBbMqucG
XLnjk99Mk6stlP/8hsnk4LmrqYMTZFEfClk2cqYuMlJspGHgV3L08FaX0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGO4OuNSCH57lSzykXLCDQuXZDdaMB8GA1UdIwQY
MBaAFMQ8Ii+tLCfKYSyYwnPU8WUG4bLlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveER3aUw2MHNKOHBoTEpqQ2M5VHhaUWJoc3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82OGE3ZWEtZDUwYS00YTMwLTk1MTMt
ZTkwOWE3N2NkYTk4LzEveER3aUw2MHNKOHBoTEpqQ2M5VHhaUWJoc3VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82OGE3ZWEtZDUwYS00YTMwLTk1MTMtZTkwOWE3N2NkYTk4
LzEveER3aUw2MHNKOHBoTEpqQ2M5VHhaUWJoc3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGGiudPB
rpK3A2d+w7eF8Om54eAs6IdaSBG5+UOkJ87Gc0BGnI41p/tjzMkLc5NJPWAFxr6U
NacID4DPhEjHd+Y6Clr8EPYCohcAiVfyXbrWZmrBsHdp7KRZZqGp1Xp+BlkEVKXi
89aalg7OdG+TPmdpJKj4yxg9vzls/6DbIh8KuvuHsZaX8njyVewSqteDEIBfdEUW
8GfuQqsYXHC2PKUpTcujufmbSlwhUBnYJQBl9jlXkXaaBV4iZRYS7/Mbx1CRBEgc
6P+RpEHkWf2ANX+WZFDYUVCGH3aHCIPQEKSZf+qWeg5J/ORH8jQO/1VdsYDMADyH
EbPPZa1x9YqwFw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:43 2025 by rpki-client