Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
File: ag1malTV4bw1XA1yUDpFj8Do4Gw.mft (raw, json)
Hash identifier: WHHFRC911UN7D1f9hQ9MhNfk9MQrnLrfy8vCHTDVMGI=
Subject key identifier: 51:C8:AB:8F:EB:48:89:4A:57:9D:87:CE:9E:B1:78:68:99:F7:90:59
Authority key identifier: 6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
Certificate issuer: /CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Certificate serial: 0194BD17CD655AA0558B2B7E85635FD11F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: Zbu9lV-TXRr1mjPabkdbQi-tc2k.roa (hash: L0pLG2iq3DWnmdVA1LNHGmiPWiH4T8eZ9Q5L7k/ukzQ=)
2: ag1malTV4bw1XA1yUDpFj8Do4Gw.crl (hash: R1Hi+0LMLwaikrrxOrIOyEY9M2nnZTC9vMxMK2DclWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cd:65:5a:a0:55:8b:2b:7e:85:63:5f:d1:1f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=51c8ab8feb48894a579d87ce9eb1786899f79059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:c2:c3:df:d7:10:b9:51:d0:62:09:50:fa:
41:75:d9:fc:36:d4:6b:49:f6:64:cf:78:8c:b7:13:
eb:be:f3:3d:89:f8:8b:fc:29:68:f2:64:9b:53:f3:
57:31:a7:f1:26:8e:74:e6:22:f5:34:7a:6e:53:2e:
0f:a7:fc:87:69:f9:c8:b3:3a:d0:44:c1:4e:ee:37:
59:d0:e1:ed:53:cf:8b:f4:2d:f1:2f:06:c0:21:f5:
79:42:c9:ba:d6:f2:15:ac:00:58:c9:ac:ad:b8:f9:
df:19:b0:f8:72:03:f7:bc:9e:b8:a2:bc:be:83:7b:
fe:64:95:bd:7f:d5:0a:15:70:95:9b:b1:41:90:25:
af:6b:d1:fc:74:2a:4b:12:25:88:d3:68:d7:27:47:
44:7b:bb:28:19:42:3c:dc:5d:83:51:86:99:3d:19:
67:cc:73:71:47:e9:57:cf:e0:95:5a:42:ca:ab:4a:
b8:fa:02:fc:7c:99:43:16:56:a6:88:c4:ff:f8:13:
a7:79:53:3b:bb:d7:e8:ce:20:84:a0:6f:e4:79:32:
cd:e9:91:b4:c9:fb:71:d0:d3:c2:86:fc:78:f5:e3:
fa:86:f2:77:02:ce:7b:0e:2c:42:ae:b4:3c:4f:8a:
f1:22:12:2b:d6:3d:5f:81:ef:f4:f2:4b:b1:c9:98:
d7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C8:AB:8F:EB:48:89:4A:57:9D:87:CE:9E:B1:78:68:99:F7:90:59
X509v3 Authority Key Identifier:
keyid:6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0e:42:97:e8:6b:b2:9f:9a:f6:50:38:a0:a8:84:6f:99:a5:
78:a1:b5:99:cd:08:9f:81:87:9c:02:71:8e:b4:05:00:68:96:
01:70:b2:31:96:4e:cf:ba:d6:db:d4:a7:b3:12:1c:cb:4b:00:
a0:fa:08:9a:2b:a1:75:5c:e6:8f:ab:26:02:8a:a5:6f:5a:b3:
2e:3f:79:5c:97:75:57:9a:8e:58:eb:1b:be:24:32:21:22:d6:
8c:2d:30:ac:cb:67:c8:e5:c1:29:d4:7b:d9:63:b9:d5:b8:f1:
72:48:cb:96:2c:7b:64:19:0e:f5:70:23:cd:41:90:2c:65:16:
00:e0:f8:90:a0:4d:b1:a1:f1:09:5d:c7:5f:95:61:0b:bc:73:
4a:bb:f9:75:95:e6:ab:91:ec:19:a8:2b:9d:ad:41:aa:0b:05:
2e:3e:b5:5b:ee:3a:bb:bb:23:e3:83:59:a3:96:81:c0:6c:44:
37:a4:63:b1:e7:80:4a:14:9a:c5:a9:e2:2c:12:78:c6:34:a6:
20:b8:cc:5a:c2:82:5a:58:1a:7a:a0:d1:ba:f4:c4:c8:5c:6f:
36:4c:3f:b3:d1:13:ad:fc:2f:e9:b5:60:ec:69:fd:18:9f:79:
5b:f6:33:0e:4f:79:94:fd:b6:04:81:e3:07:f0:85:a0:f9:97:
c3:0e:9d:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F81lWqBViyt+hWNf0R8rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMGQ2NjZhNTRkNWUxYmMzNTVjMGQ3MjUwM2E0NThmYzBl
OGUwNmMwHhcNMjUwMTMxMTYwMDQxWhcNMjUwMjAxMTYwMDQxWjAzMTEwLwYDVQQD
Eyg1MWM4YWI4ZmViNDg4OTRhNTc5ZDg3Y2U5ZWIxNzg2ODk5Zjc5MDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqbCw9/XELlR0GIJUPpBddn8NtRr
SfZkz3iMtxPrvvM9ifiL/Clo8mSbU/NXMafxJo505iL1NHpuUy4Pp/yHafnIszrQ
RMFO7jdZ0OHtU8+L9C3xLwbAIfV5Qsm61vIVrABYyaytuPnfGbD4cgP3vJ64ory+
g3v+ZJW9f9UKFXCVm7FBkCWva9H8dCpLEiWI02jXJ0dEe7soGUI83F2DUYaZPRln
zHNxR+lXz+CVWkLKq0q4+gL8fJlDFlamiMT/+BOneVM7u9foziCEoG/keTLN6ZG0
yftx0NPChvx49eP6hvJ3As57DixCrrQ8T4rxIhIr1j1fge/08kuxyZjXqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHIq4/rSIlKV52Hzp6xeGiZ95BZMB8GA1UdIwQY
MBaAFGoNZmpU1eG8NVwNclA6RY/A6OBsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWcxbWFsVFY0YncxWEExeVVEcEZqOERvNEd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hZTg0MmItNGNjNy00ZTA3LTk4Mjct
YTgyYWQ1NGRlZmJjLzEvYWcxbWFsVFY0YncxWEExeVVEcEZqOERvNEd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hZTg0MmItNGNjNy00ZTA3LTk4MjctYTgyYWQ1NGRlZmJj
LzEvYWcxbWFsVFY0YncxWEExeVVEcEZqOERvNEd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmA5Cl+hr
sp+a9lA4oKiEb5mleKG1mc0In4GHnAJxjrQFAGiWAXCyMZZOz7rW29SnsxIcy0sA
oPoImiuhdVzmj6smAoqlb1qzLj95XJd1V5qOWOsbviQyISLWjC0wrMtnyOXBKdR7
2WO51bjxckjLlix7ZBkO9XAjzUGQLGUWAOD4kKBNsaHxCV3HX5VhC7xzSrv5dZXm
q5HsGagrna1BqgsFLj61W+46u7sj44NZo5aBwGxEN6RjseeAShSaxaniLBJ4xjSm
ILjMWsKCWlgaeqDRuvTEyFxvNkw/s9ETrfwv6bVg7Gn9GJ95W/YzDk95lP22BIHj
B/CFoPmXww6dUg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:56 2025 by rpki-client