Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
File: xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft (raw, json)
Hash identifier: LU/LeihO0hlYsj1l5ZFkWNgzejsez5m49oyaedSlDuI=
Subject key identifier: 83:E8:96:11:8B:D3:38:E4:0A:B2:1A:8A:97:58:D6:34:01:7D:83:CB
Authority key identifier: C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
Certificate issuer: /CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Certificate serial: 01962FAB06EE14FB81694076A85E841D9D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
Manifest number: 02D3
Signing time: Sun 13 Apr 2025 15:00:59 +0000
Manifest this update: Sun 13 Apr 2025 15:00:59 +0000
Manifest next update: Mon 14 Apr 2025 15:00:59 +0000
Files and hashes: 1: SGkYily7UQPusAexDOf3Pto8qlU.roa (hash: suweJqoDq78riZx1pHsROfmVS4S86mc1JzDxd3RsgQs=)
2: xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl (hash: /CrhCnCCJ3gEy7UwLQ2cnD+qZBYZ7Jn2MEALDJ5xlAk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:06:ee:14:fb:81:69:40:76:a8:5e:84:1d:9d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Validity
Not Before: Apr 13 15:00:59 2025 GMT
Not After : Apr 14 15:00:59 2025 GMT
Subject: CN=83e896118bd338e40ab21a8a9758d634017d83cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:9d:10:3c:47:bc:07:33:6f:13:54:dd:3b:
65:b6:eb:71:38:69:99:6e:76:07:45:51:6d:37:5e:
57:8f:f2:dc:e9:4d:cc:18:37:ef:9f:fb:38:43:b2:
76:b8:f5:45:8f:23:1b:18:1f:1b:6a:11:bf:5d:76:
ca:e2:5f:9d:28:49:32:9a:6e:ae:2b:a9:a5:d6:e0:
da:39:74:36:1c:5f:c2:bc:41:41:06:c8:fe:af:54:
9e:b9:c9:bb:23:ea:42:8f:95:ff:cc:ba:39:1e:98:
2a:e3:d2:c2:c2:5a:cc:1e:59:2e:89:4b:0a:d7:ad:
a4:f0:eb:b0:b5:56:c5:74:e3:05:98:04:f1:08:6a:
e0:cb:a5:25:fb:80:34:c0:53:a2:e3:84:38:3b:45:
66:eb:d1:2e:7b:5e:44:a8:14:d6:f1:6a:73:0b:33:
d1:c1:2c:fc:c8:9b:19:f0:34:e2:a6:9e:01:c0:58:
88:b3:91:13:38:66:26:99:7e:d5:dc:cd:8f:d7:2d:
69:f2:79:62:62:c8:7e:a2:dc:82:2b:aa:f5:31:84:
87:1b:0f:78:02:a6:99:1c:33:4f:41:ef:8d:45:fa:
6a:64:73:e1:9d:1c:47:2d:2e:e3:4f:98:ca:99:e3:
de:ea:71:4b:fd:70:f4:e4:43:68:97:19:e3:57:29:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E8:96:11:8B:D3:38:E4:0A:B2:1A:8A:97:58:D6:34:01:7D:83:CB
X509v3 Authority Key Identifier:
keyid:C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0d:6b:4b:ea:a5:83:cb:e5:4d:33:14:54:92:39:8d:f2:18:
3f:86:65:cb:c1:13:42:e8:95:c7:62:41:fd:75:1a:53:29:be:
43:6b:0a:40:e6:f1:09:9e:75:fa:4e:6b:39:b7:fa:11:e2:ad:
62:35:c3:49:7f:1f:86:b4:c3:d1:33:b1:ce:af:b2:db:0e:a9:
9f:78:b3:13:da:40:a8:a8:f6:d7:77:36:fc:dd:9c:10:c3:ef:
69:9b:b5:6c:78:04:96:78:d0:85:0c:c8:03:12:4e:49:91:a7:
69:d4:28:d2:87:5c:d0:e4:de:ec:0f:f8:c8:40:70:ca:53:86:
38:71:49:84:24:a6:17:79:58:23:d4:c2:1d:88:d1:be:3b:4f:
cb:80:b8:cf:9c:7d:af:b9:1a:98:4e:b9:80:fd:b2:53:76:6f:
c0:00:84:59:eb:5a:c4:92:43:1c:52:da:c6:4e:97:73:01:cb:
89:6c:f9:5b:c7:c5:75:21:5a:57:1f:61:14:47:cb:c4:b4:92:
75:37:9e:11:88:78:e6:ad:f9:71:3d:d9:86:39:f5:04:9b:cb:
a0:e4:2d:21:5c:e7:a4:60:b4:9c:bd:ac:1f:4d:ff:9b:d2:a8:
55:b0:1b:11:da:1f:ad:f6:63:49:41:4d:69:06:e1:02:ae:12:
cc:08:35:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqwbuFPuBaUB2qF6EHZ2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YTBmMzExMDk4NGNjZmJmNTI5OTgwYjZkNDE2ZGRkNGUx
YTg4MjUwHhcNMjUwNDEzMTUwMDU5WhcNMjUwNDE0MTUwMDU5WjAzMTEwLwYDVQQD
Eyg4M2U4OTYxMThiZDMzOGU0MGFiMjFhOGE5NzU4ZDYzNDAxN2Q4M2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVadEDxHvAczbxNU3TtltutxOGmZ
bnYHRVFtN15Xj/Lc6U3MGDfvn/s4Q7J2uPVFjyMbGB8bahG/XXbK4l+dKEkymm6u
K6ml1uDaOXQ2HF/CvEFBBsj+r1Seucm7I+pCj5X/zLo5Hpgq49LCwlrMHlkuiUsK
162k8OuwtVbFdOMFmATxCGrgy6Ul+4A0wFOi44Q4O0Vm69Eue15EqBTW8WpzCzPR
wSz8yJsZ8DTipp4BwFiIs5ETOGYmmX7V3M2P1y1p8nliYsh+otyCK6r1MYSHGw94
AqaZHDNPQe+NRfpqZHPhnRxHLS7jT5jKmePe6nFL/XD05ENolxnjVymbOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPolhGL0zjkCrIaipdY1jQBfYPLMB8GA1UdIwQY
MBaAFMSg8xEJhMz79SmYC21Bbd1OGoglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hNmM1ZjYtNjA0Zi00Mzk5LTk0NDMt
ZDEyYTkwYmY1MDJlLzEveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hNmM1ZjYtNjA0Zi00Mzk5LTk0NDMtZDEyYTkwYmY1MDJl
LzEveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiA1rS+ql
g8vlTTMUVJI5jfIYP4Zly8ETQuiVx2JB/XUaUym+Q2sKQObxCZ51+k5rObf6EeKt
YjXDSX8fhrTD0TOxzq+y2w6pn3izE9pAqKj213c2/N2cEMPvaZu1bHgElnjQhQzI
AxJOSZGnadQo0odc0OTe7A/4yEBwylOGOHFJhCSmF3lYI9TCHYjRvjtPy4C4z5x9
r7kamE65gP2yU3ZvwACEWetaxJJDHFLaxk6XcwHLiWz5W8fFdSFaVx9hFEfLxLSS
dTeeEYh45q35cT3Zhjn1BJvLoOQtIVznpGC0nL2sH03/m9KoVbAbEdofrfZjSUFN
aQbhAq4SzAg1Jg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net