Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/087d25-6db5-4285-ad76-ad7dec11bc5c/1/XPRYPgFOuFcBj-61ySzhdToJy6A.mft
File: XPRYPgFOuFcBj-61ySzhdToJy6A.mft (raw, json)
Hash identifier: wq3nvVUZVX4DAZFstQagtdImzEDXGOlXoumhQqQtI14=
Subject key identifier: 1B:95:BF:D6:3D:27:42:2C:24:F9:B3:FF:29:8D:CD:95:AE:8F:54:C6
Authority key identifier: 5C:F4:58:3E:01:4E:B8:57:01:8F:EE:B5:C9:2C:E1:75:3A:09:CB:A0
Certificate issuer: /CN=5cf4583e014eb857018feeb5c92ce1753a09cba0
Certificate serial: 0195E00FA3469F27645055D11DCAD3E27DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRYPgFOuFcBj-61ySzhdToJy6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/087d25-6db5-4285-ad76-ad7dec11bc5c/1/XPRYPgFOuFcBj-61ySzhdToJy6A.mft
Manifest number: 54
Signing time: Sat 29 Mar 2025 04:01:15 +0000
Manifest this update: Sat 29 Mar 2025 04:01:15 +0000
Manifest next update: Sun 30 Mar 2025 04:01:15 +0000
Files and hashes: 1: TXFkFxk0go0Y2-GlYi6JLFAQr8E.roa (hash: /I3Hs2InDf2N1C0cd7n3+qfO4ge9onR8lMBOsgpKwyE=)
2: XPRYPgFOuFcBj-61ySzhdToJy6A.crl (hash: FrW/hyKEcQlvCu7IWNYZPfb544jBNCAHoQqvf09Djm4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:a3:46:9f:27:64:50:55:d1:1d:ca:d3:e2:7d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4583e014eb857018feeb5c92ce1753a09cba0
Validity
Not Before: Mar 29 04:01:15 2025 GMT
Not After : Mar 30 04:01:15 2025 GMT
Subject: CN=1b95bfd63d27422c24f9b3ff298dcd95ae8f54c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:03:99:56:89:4e:0f:72:b8:14:85:32:62:
dd:34:83:e8:70:b7:6d:9d:db:b6:5f:ec:f7:ef:11:
5e:74:e5:b2:85:cb:60:cc:ff:3e:71:b0:00:82:a9:
af:25:05:88:4f:e3:05:c4:19:22:e2:d3:76:06:cf:
a8:ca:c0:cc:57:65:73:47:a2:ea:b3:0b:40:5b:58:
5c:87:f0:ce:e6:5b:22:ef:a6:b9:5c:7b:04:09:e8:
2f:0e:47:52:35:09:ce:35:28:4c:c8:af:79:fd:61:
0e:86:37:97:5b:3e:cd:1f:ea:1b:b6:3a:5a:2c:75:
bb:88:8f:02:bd:c9:e8:7f:72:4f:da:85:93:d3:d8:
11:3d:71:c0:f0:06:34:52:22:b4:e3:02:ed:5c:dd:
1d:d0:d9:5f:16:59:57:20:47:ed:ad:13:9e:c7:08:
94:b6:16:a7:28:bd:26:53:25:08:32:99:90:02:42:
56:1b:74:b8:67:8c:61:f1:95:78:a5:7e:87:bb:34:
fa:18:94:09:9a:9d:98:1f:37:fc:74:e4:e3:95:cc:
33:58:da:92:31:4e:75:35:b4:ec:64:79:de:f5:8b:
aa:57:d2:9a:75:f8:57:1f:e7:b1:bb:1f:93:95:0b:
5e:3e:f5:0a:d7:f3:e0:e9:d9:1b:2d:d9:ce:96:09:
49:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:95:BF:D6:3D:27:42:2C:24:F9:B3:FF:29:8D:CD:95:AE:8F:54:C6
X509v3 Authority Key Identifier:
keyid:5C:F4:58:3E:01:4E:B8:57:01:8F:EE:B5:C9:2C:E1:75:3A:09:CB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRYPgFOuFcBj-61ySzhdToJy6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/087d25-6db5-4285-ad76-ad7dec11bc5c/1/XPRYPgFOuFcBj-61ySzhdToJy6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/087d25-6db5-4285-ad76-ad7dec11bc5c/1/XPRYPgFOuFcBj-61ySzhdToJy6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7f:a4:2b:81:c2:47:b1:0b:80:cf:b2:13:43:0b:86:34:94:
d5:63:a5:1b:2c:2b:11:cf:bc:1e:8c:22:b1:32:63:f2:09:90:
6d:31:9c:c8:74:99:d2:c4:8a:98:4c:3a:58:c5:95:c7:dc:8c:
83:14:26:ce:6d:4f:ab:bb:63:0f:c4:02:aa:2b:5c:4e:c7:63:
be:34:66:ba:b1:5b:4b:37:53:0a:48:87:21:2d:e0:37:a1:43:
f9:5f:e8:0f:bb:d6:0f:3f:cd:7f:79:aa:83:8e:cb:6e:ac:9a:
62:e1:84:19:d0:79:b0:df:9a:d9:68:6b:dc:da:62:ca:3d:df:
57:b5:9a:09:3d:bc:a9:8d:ca:9c:e3:30:a6:b5:45:67:6f:64:
19:05:b1:a6:cf:cd:ab:df:26:4a:a0:1b:c3:4c:7d:59:1d:50:
dd:9c:0f:9a:0c:2b:87:c2:35:af:59:4f:fc:9e:95:cd:fc:d2:
53:10:8f:e8:cf:64:13:e8:76:c1:b7:32:35:4a:14:26:af:4f:
1c:c0:66:b8:c1:94:3a:fa:97:c8:50:87:e4:83:8a:97:e8:6c:
48:59:2a:0e:92:f1:92:45:41:63:82:22:8c:65:3b:52:34:c2:
1f:31:70:de:0d:93:3a:8b:cf:4b:ad:fa:9a:84:77:b6:7e:71:
e0:df:aa:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD6NGnydkUFXRHcrT4n3eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjQ1ODNlMDE0ZWI4NTcwMThmZWViNWM5MmNlMTc1M2Ew
OWNiYTAwHhcNMjUwMzI5MDQwMTE1WhcNMjUwMzMwMDQwMTE1WjAzMTEwLwYDVQQD
EygxYjk1YmZkNjNkMjc0MjJjMjRmOWIzZmYyOThkY2Q5NWFlOGY1NGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UQDmVaJTg9yuBSFMmLdNIPocLdt
ndu2X+z37xFedOWyhctgzP8+cbAAgqmvJQWIT+MFxBki4tN2Bs+oysDMV2VzR6Lq
swtAW1hch/DO5lsi76a5XHsECegvDkdSNQnONShMyK95/WEOhjeXWz7NH+obtjpa
LHW7iI8Cvcnof3JP2oWT09gRPXHA8AY0UiK04wLtXN0d0NlfFllXIEftrROexwiU
thanKL0mUyUIMpmQAkJWG3S4Z4xh8ZV4pX6HuzT6GJQJmp2YHzf8dOTjlcwzWNqS
MU51NbTsZHne9YuqV9KadfhXH+exux+TlQtePvUK1/Pg6dkbLdnOlglJ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuVv9Y9J0IsJPmz/ymNzZWuj1TGMB8GA1UdIwQY
MBaAFFz0WD4BTrhXAY/utcks4XU6CcugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBSWVBnRk91RmNCai02MXlTemhkVG9KeTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wODdkMjUtNmRiNS00Mjg1LWFkNzYt
YWQ3ZGVjMTFiYzVjLzEvWFBSWVBnRk91RmNCai02MXlTemhkVG9KeTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wODdkMjUtNmRiNS00Mjg1LWFkNzYtYWQ3ZGVjMTFiYzVj
LzEvWFBSWVBnRk91RmNCai02MXlTemhkVG9KeTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhH+kK4HC
R7ELgM+yE0MLhjSU1WOlGywrEc+8HowisTJj8gmQbTGcyHSZ0sSKmEw6WMWVx9yM
gxQmzm1Pq7tjD8QCqitcTsdjvjRmurFbSzdTCkiHIS3gN6FD+V/oD7vWDz/Nf3mq
g47LbqyaYuGEGdB5sN+a2Whr3Npiyj3fV7WaCT28qY3KnOMwprVFZ29kGQWxps/N
q98mSqAbw0x9WR1Q3ZwPmgwrh8I1r1lP/J6VzfzSUxCP6M9kE+h2wbcyNUoUJq9P
HMBmuMGUOvqXyFCH5IOKl+hsSFkqDpLxkkVBY4IijGU7UjTCHzFw3g2TOovPS636
moR3tn5x4N+qiA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:35 2025 by rpki-client