Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.mft
File: XTnRW9L8yEdxumqimqVEKLIc72A.mft (raw, json)
Hash identifier: KErLSCP4hdO2oNOFTGQ/iJv4HJFzMPE/12cj8FP2xnY=
Subject key identifier: 58:EC:45:D0:94:A3:AE:45:9D:21:2A:77:07:C1:DD:A6:0E:C5:4A:73
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Certificate issuer: /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial: 0195EDB05024063B16A4C44EDDBD9E88BDFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.mft
Manifest number: 14F5
Signing time: Mon 31 Mar 2025 19:31:49 +0000
Manifest this update: Mon 31 Mar 2025 19:31:49 +0000
Manifest next update: Tue 01 Apr 2025 19:31:49 +0000
Files and hashes: 1: XTnRW9L8yEdxumqimqVEKLIc72A.crl (hash: cjgRn97Wcw8oDPzluaBkvlm1TRGZ0IotU7FCWtJNJWw=)
2: ePJeWVTAdZT_Wr3OYR6GjKSITgU.roa (hash: klWWeDelEbUTnfh8FrnhieoEbxuIBTXbZQXnpDFAChk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ed:b0:50:24:06:3b:16:a4:c4:4e:dd:bd:9e:88:bd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Validity
Not Before: Mar 31 19:31:49 2025 GMT
Not After : Apr 1 19:31:49 2025 GMT
Subject: CN=58ec45d094a3ae459d212a7707c1dda60ec54a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:9a:54:ad:35:49:c8:a8:a0:93:16:00:e4:
46:61:5b:d6:37:c0:04:54:c7:13:44:13:df:1b:60:
04:6e:61:96:1c:b8:1b:ca:33:84:5f:32:7b:97:4e:
06:28:98:92:1f:d0:64:81:52:09:a7:55:61:6c:91:
95:4f:67:f9:ac:1d:03:60:a6:82:8d:55:10:01:97:
89:ad:f4:15:56:09:71:8c:a4:84:ca:75:2c:ec:11:
ec:52:f0:b5:b9:bb:14:6a:2d:a3:b7:97:e5:4f:9b:
05:b4:88:52:ad:87:5d:f3:07:72:01:c7:f3:d5:da:
ca:f3:18:2b:05:c8:2a:61:6a:ea:18:14:cb:14:2f:
38:cd:bd:8a:22:00:6c:33:7d:66:eb:88:9f:de:09:
99:bb:8d:7f:eb:a1:0f:55:da:cd:ff:6a:18:39:e5:
14:14:f4:c4:1c:ce:28:a3:33:9c:0c:75:22:3a:f5:
e0:1b:1b:14:55:2a:c0:5a:2d:f1:fa:d4:cf:77:6e:
89:91:53:c0:c2:82:62:95:71:70:92:59:4b:d2:66:
f2:09:61:e3:34:97:c7:cf:d1:b7:af:29:cb:bf:b4:
31:29:da:0f:e6:79:40:2e:9e:9e:4e:f1:62:4d:6f:
7e:84:92:91:c7:98:56:27:a8:57:19:ba:f4:52:aa:
9b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EC:45:D0:94:A3:AE:45:9D:21:2A:77:07:C1:DD:A6:0E:C5:4A:73
X509v3 Authority Key Identifier:
keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:18:1f:7d:ff:1b:cb:3b:1c:04:83:ad:36:95:be:45:4e:d7:
25:85:ae:d8:87:b6:d1:97:a3:b5:4f:a6:06:d1:2f:b7:c2:ab:
15:75:d6:76:33:5c:81:ad:a7:29:a6:e9:1f:c1:dc:2b:11:39:
f9:b3:9a:d9:aa:53:01:02:a0:62:05:15:b0:26:22:d0:95:05:
d4:0f:10:0b:4d:99:25:a2:86:de:a2:83:8f:ba:fb:34:02:b6:
2d:2f:95:bb:d1:b0:15:6a:3f:c8:28:24:7c:e2:b6:d0:07:aa:
2f:42:a9:7d:ab:67:d6:1e:4e:53:fb:21:0c:f1:c9:c0:1a:00:
a2:24:c8:b9:c0:1c:dd:6f:a3:c9:1e:85:99:1b:a1:a2:5c:8e:
d8:02:df:a2:f9:3e:02:da:5a:0f:51:37:83:98:40:a5:5f:bd:
c1:a7:75:90:28:4e:dd:5a:73:cf:b2:44:b6:e0:fb:d4:56:bf:
01:95:4e:3c:a7:a8:2c:fe:68:23:e8:23:23:d6:93:e3:59:0f:
17:7b:cd:ca:cf:cf:46:42:3d:c3:15:ef:b3:61:32:55:f4:b3:
94:41:b2:29:44:12:d8:5e:21:a4:1d:d5:ae:a3:4f:c8:a4:63:
bf:e9:ba:22:d3:bb:86:5f:86:cc:4c:2f:0a:a5:0f:4e:8d:24:
1d:c3:fc:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXtsFAkBjsWpMRO3b2eiL37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzlkMTViZDJmY2M4NDc3MWJhNmFhMjlhYTU0NDI4YjIx
Y2VmNjAwHhcNMjUwMzMxMTkzMTQ5WhcNMjUwNDAxMTkzMTQ5WjAzMTEwLwYDVQQD
Eyg1OGVjNDVkMDk0YTNhZTQ1OWQyMTJhNzcwN2MxZGRhNjBlYzU0YTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpiaVK01SciooJMWAORGYVvWN8AE
VMcTRBPfG2AEbmGWHLgbyjOEXzJ7l04GKJiSH9BkgVIJp1VhbJGVT2f5rB0DYKaC
jVUQAZeJrfQVVglxjKSEynUs7BHsUvC1ubsUai2jt5flT5sFtIhSrYdd8wdyAcfz
1drK8xgrBcgqYWrqGBTLFC84zb2KIgBsM31m64if3gmZu41/66EPVdrN/2oYOeUU
FPTEHM4oozOcDHUiOvXgGxsUVSrAWi3x+tTPd26JkVPAwoJilXFwkllL0mbyCWHj
NJfHz9G3rynLv7QxKdoP5nlALp6eTvFiTW9+hJKRx5hWJ6hXGbr0Uqqb1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjsRdCUo65FnSEqdwfB3aYOxUpzMB8GA1UdIwQY
MBaAFF050VvS/MhHcbpqopqlRCiyHO9gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRuUlc5TDh5RWR4dW1xaW1xVkVLTEljNzJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jODA5MmUtOWY4Yy00NzE4LWI3NzAt
YzI5YjQ0ZGU1M2E4LzEvWFRuUlc5TDh5RWR4dW1xaW1xVkVLTEljNzJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jODA5MmUtOWY4Yy00NzE4LWI3NzAtYzI5YjQ0ZGU1M2E4
LzEvWFRuUlc5TDh5RWR4dW1xaW1xVkVLTEljNzJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhgfff8b
yzscBIOtNpW+RU7XJYWu2Ie20ZejtU+mBtEvt8KrFXXWdjNcga2nKabpH8HcKxE5
+bOa2apTAQKgYgUVsCYi0JUF1A8QC02ZJaKG3qKDj7r7NAK2LS+Vu9GwFWo/yCgk
fOK20AeqL0Kpfatn1h5OU/shDPHJwBoAoiTIucAc3W+jyR6FmRuholyO2ALfovk+
AtpaD1E3g5hApV+9wad1kChO3Vpzz7JEtuD71Fa/AZVOPKeoLP5oI+gjI9aT41kP
F3vNys/PRkI9wxXvs2EyVfSzlEGyKUQS2F4hpB3VrqNPyKRjv+m6ItO7hl+GzEwv
CqUPTo0kHcP8qw==
-----END CERTIFICATE-----
Generated at Tue Apr 1 23:51:38 2025 by rpki-client on console.sobornost.net