Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
File: AwkPrDzELxmXRVoS5kMGRjfGncM.mft (raw, json)
Hash identifier: A9xdHRkU8xdxMYT6AXlg4Olz9+fyAlwrXuNDINw3EaE=
Subject key identifier: FB:21:15:93:CD:04:6F:F6:B8:7C:FF:A9:F3:5D:62:4C:87:69:E7:86
Authority key identifier: 03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
Certificate issuer: /CN=03090fac3cc42f1997455a12e643064637c69dc3
Certificate serial: 0194BD176881814C4A98872DF0624E6218B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
Manifest number: 0966
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: AwkPrDzELxmXRVoS5kMGRjfGncM.crl (hash: CL4oHWLQrtzkOcljoempwK3uCACfAimtYu03AcdUR54=)
2: IXB7KzKujGJB9qHSV-0muRiEa80.roa (hash: BqHzdDeRfi2F8mGR+zPLtSwSdgCJjnyKcweTv1mlvB4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:68:81:81:4c:4a:98:87:2d:f0:62:4e:62:18:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03090fac3cc42f1997455a12e643064637c69dc3
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=fb211593cd046ff6b87cffa9f35d624c8769e786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:69:26:df:cc:da:44:35:b0:1e:43:41:98:
43:8a:10:34:63:84:ae:f1:bc:04:df:4c:a7:17:e4:
52:d0:60:08:44:29:25:81:8a:0a:81:99:f2:b6:96:
d1:76:2a:1c:eb:02:20:7a:d1:cd:75:25:f7:7e:49:
51:da:f4:be:95:6b:56:86:bb:7f:c6:e7:c1:f1:9e:
f7:b8:dc:50:69:3f:91:84:bb:cd:73:07:90:85:95:
5f:28:fa:3e:27:ce:41:9b:7d:a5:01:18:56:86:49:
24:1e:4d:82:d5:2c:00:b2:dc:28:b1:fb:9e:65:4a:
9f:71:7b:15:b5:86:cb:2a:d8:35:20:a7:5e:9c:22:
8b:16:20:5c:13:f5:9f:2a:1f:ec:8f:9c:e4:1d:f9:
72:d7:9c:93:6a:d4:9d:6d:18:bd:78:8e:5c:b0:62:
76:64:ec:ca:bc:7f:0a:17:e1:2c:ce:92:24:4c:e1:
06:ff:21:ea:30:6a:18:65:b5:49:ad:da:3b:a0:fd:
34:f6:ec:de:8b:ce:da:bb:1a:59:b5:3e:58:8b:58:
90:52:26:83:21:2d:93:d5:fb:a9:f1:9c:7a:4e:de:
2c:20:62:de:b5:73:7f:80:96:a6:e1:b1:f7:27:22:
20:d2:48:be:8a:7a:91:d4:53:3b:bd:77:c5:f4:d6:
64:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:21:15:93:CD:04:6F:F6:B8:7C:FF:A9:F3:5D:62:4C:87:69:E7:86
X509v3 Authority Key Identifier:
keyid:03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a0:68:92:5a:56:7a:8c:a2:08:0f:e4:60:f8:65:d3:f5:72:
fc:5a:87:4f:81:c0:7a:6b:61:fd:14:38:fe:49:a8:7c:d9:a2:
83:85:82:4a:78:04:ba:08:4f:da:d9:7c:ab:4d:45:bd:85:35:
05:81:bf:5e:5b:25:9e:4f:a6:d2:bd:57:b1:13:a9:e0:be:b5:
96:d9:34:3c:a8:ae:70:ed:b2:c9:53:5f:4f:5f:6c:05:ec:6d:
88:7b:a4:b9:27:28:32:94:38:c6:41:d5:6e:29:39:71:28:aa:
b2:95:c4:a0:0a:6f:2e:e0:cf:85:5f:31:40:a5:a9:c7:89:2a:
81:11:a1:9d:a4:7f:85:a3:97:c7:c1:46:89:4a:9c:43:e3:db:
71:13:80:fe:ab:61:8c:5a:e0:59:fe:4b:01:88:d6:5e:32:48:
b0:42:d3:ae:f5:9c:53:49:02:77:59:0a:87:ba:43:46:f8:f2:
06:86:23:8e:3e:c4:2b:b2:e2:15:93:37:42:bb:25:fd:81:dc:
71:dd:5f:c4:54:66:5a:96:c9:68:90:c9:8f:a7:5f:76:6a:ee:
d8:03:fa:45:fb:9b:2a:d6:b8:e0:5f:17:b2:e1:57:a9:1f:b5:
50:6b:be:cf:05:4b:23:ee:06:30:7d:45:35:93:1e:0c:80:0d:
0b:d8:85:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2iBgUxKmIct8GJOYhiwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMDkwZmFjM2NjNDJmMTk5NzQ1NWExMmU2NDMwNjQ2Mzdj
NjlkYzMwHhcNMjUwMTMxMTYwMDE1WhcNMjUwMjAxMTYwMDE1WjAzMTEwLwYDVQQD
EyhmYjIxMTU5M2NkMDQ2ZmY2Yjg3Y2ZmYTlmMzVkNjI0Yzg3NjllNzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx69pJt/M2kQ1sB5DQZhDihA0Y4Su
8bwE30ynF+RS0GAIRCklgYoKgZnytpbRdioc6wIgetHNdSX3fklR2vS+lWtWhrt/
xufB8Z73uNxQaT+RhLvNcweQhZVfKPo+J85Bm32lARhWhkkkHk2C1SwAstwosfue
ZUqfcXsVtYbLKtg1IKdenCKLFiBcE/WfKh/sj5zkHfly15yTatSdbRi9eI5csGJ2
ZOzKvH8KF+EszpIkTOEG/yHqMGoYZbVJrdo7oP009uzei87auxpZtT5Yi1iQUiaD
IS2T1fup8Zx6Tt4sIGLetXN/gJam4bH3JyIg0ki+inqR1FM7vXfF9NZknQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPshFZPNBG/2uHz/qfNdYkyHaeeGMB8GA1UdIwQY
MBaAFAMJD6w8xC8Zl0VaEuZDBkY3xp3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXdrUHJEekVMeG1YUlZvUzVrTUdSamZHbmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81YzI4NjgtM2EyNy00ZGY0LThmMDAt
ZmRkMjNiNDNjNTJlLzEvQXdrUHJEekVMeG1YUlZvUzVrTUdSamZHbmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC81YzI4NjgtM2EyNy00ZGY0LThmMDAtZmRkMjNiNDNjNTJl
LzEvQXdrUHJEekVMeG1YUlZvUzVrTUdSamZHbmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6BoklpW
eoyiCA/kYPhl0/Vy/FqHT4HAemth/RQ4/kmofNmig4WCSngEughP2tl8q01FvYU1
BYG/Xlslnk+m0r1XsROp4L61ltk0PKiucO2yyVNfT19sBextiHukuScoMpQ4xkHV
bik5cSiqspXEoApvLuDPhV8xQKWpx4kqgRGhnaR/haOXx8FGiUqcQ+PbcROA/qth
jFrgWf5LAYjWXjJIsELTrvWcU0kCd1kKh7pDRvjyBoYjjj7EK7LiFZM3Qrsl/YHc
cd1fxFRmWpbJaJDJj6dfdmru2AP6RfubKta44F8XsuFXqR+1UGu+zwVLI+4GMH1F
NZMeDIANC9iF3A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:40 2025 by rpki-client