Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
File: aVxTfSZW203Qw8Mv6YGzx3FEPls.mft (raw, json)
Hash identifier: mon/1lYNORavIpDTCK9jHp5FUdEHDxhp913YgR54+iU=
Subject key identifier: EE:44:6A:12:9F:6C:CF:27:97:28:CF:BC:5C:05:68:F2:CC:7E:6E:F1
Authority key identifier: 69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
Certificate issuer: /CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Certificate serial: 0194BD8588028E5EB5A71475E39A7E126854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
Manifest number: 0B47
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: Hk8OntQ5zqlTFn040DQPSldzYiE.roa (hash: KP+8WLsncYNj0fRydYrCKf8Ah12qAHLXgrBdfpvlTN0=)
2: aVxTfSZW203Qw8Mv6YGzx3FEPls.crl (hash: BsI5kpuzcqzKPxJqU38wBguuxFNY6Irx+tW/A08HAwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:88:02:8e:5e:b5:a7:14:75:e3:9a:7e:12:68:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=ee446a129f6ccf279728cfbc5c0568f2cc7e6ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:82:0e:09:45:5c:86:9d:3e:bd:17:7a:d0:
10:fc:e1:76:27:be:d2:a3:26:56:d7:7e:2b:ba:1c:
1b:eb:c3:cf:e7:29:42:45:d7:47:58:d9:91:b5:03:
ec:35:e0:cd:e3:54:ef:8d:6e:64:94:42:d9:af:e4:
f7:06:39:a3:30:b9:4f:e5:91:f4:33:be:4e:7c:bd:
4f:69:ef:a1:e5:db:aa:52:d4:21:52:21:bf:02:3a:
e2:f0:0f:e4:ce:fe:07:ea:79:e8:a8:b4:fa:e6:ca:
33:ec:8f:bb:2c:f1:12:0e:be:ac:03:5b:92:af:60:
a0:28:08:89:9e:9e:81:02:d6:e0:54:1d:1f:49:a5:
02:89:a0:e1:9d:87:e4:e9:0b:f7:8a:44:07:c8:04:
52:70:86:de:ed:46:d3:0b:49:73:cd:a4:f5:27:78:
cf:2b:15:4c:8f:48:03:a2:02:ef:1a:c2:74:62:f1:
b9:35:bd:b7:af:dd:81:3f:d8:6e:ea:02:70:b5:8b:
bc:c9:d1:c6:a2:d3:d9:32:1b:92:74:a5:12:12:b7:
1a:61:1f:d5:5c:44:16:d7:df:a9:f7:31:f4:36:8a:
c1:b9:fb:f7:2f:d3:b6:09:84:13:9f:64:c6:38:7b:
d6:da:47:5b:48:c7:87:ca:fb:ff:bf:04:26:dd:bc:
4f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:44:6A:12:9F:6C:CF:27:97:28:CF:BC:5C:05:68:F2:CC:7E:6E:F1
X509v3 Authority Key Identifier:
keyid:69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:78:3e:f5:b9:d3:e1:b0:27:da:1a:ab:f2:45:62:c0:5f:47:
7e:ec:f7:bf:7f:15:20:8f:13:9c:f5:d8:93:0a:ae:57:03:92:
98:46:d8:50:74:dd:fd:cc:04:f3:07:67:5e:db:38:a5:fc:ea:
63:c2:90:ff:ce:1d:c5:2d:97:1c:67:84:0c:c5:08:7b:bb:d6:
3f:eb:18:2f:a6:68:79:c4:b8:7a:6c:30:24:35:c4:71:e6:d3:
4d:cb:ac:72:06:c9:e3:54:53:07:68:27:d3:00:97:e1:00:2b:
36:1d:72:e3:73:9c:c0:79:e6:58:42:08:32:e7:24:d0:f9:f9:
70:03:cb:11:d9:cf:47:c2:50:9c:9a:ee:e8:64:fe:c4:7e:5d:
3e:0a:6f:da:3f:f0:9f:bc:50:d5:08:51:2a:f7:b8:10:cb:03:
bd:66:81:9e:f1:5b:49:65:9d:20:49:cd:98:19:ad:cd:35:9f:
3d:6e:34:7d:d1:8f:95:28:da:76:ec:26:8a:ac:72:7d:9c:24:
8a:fc:d4:57:24:6d:d7:41:d9:9b:f3:1e:a7:1c:cf:10:b9:a6:
ca:25:05:7c:40:bb:fb:6d:79:37:15:e0:f1:65:7f:d7:ee:6b:
e0:0c:4e:74:bf:d9:4f:5f:78:ea:41:6e:76:01:38:ce:d1:cb:
50:a5:3a:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hYgCjl61pxR145p+EmhUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NWM1MzdkMjY1NmRiNGRkMGMzYzMyZmU5ODFiM2M3NzE0
NDNlNWIwHhcNMjUwMTMxMTgwMDMyWhcNMjUwMjAxMTgwMDMyWjAzMTEwLwYDVQQD
EyhlZTQ0NmExMjlmNmNjZjI3OTcyOGNmYmM1YzA1NjhmMmNjN2U2ZWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG+CDglFXIadPr0XetAQ/OF2J77S
oyZW134ruhwb68PP5ylCRddHWNmRtQPsNeDN41TvjW5klELZr+T3BjmjMLlP5ZH0
M75OfL1Pae+h5duqUtQhUiG/Ajri8A/kzv4H6nnoqLT65soz7I+7LPESDr6sA1uS
r2CgKAiJnp6BAtbgVB0fSaUCiaDhnYfk6Qv3ikQHyARScIbe7UbTC0lzzaT1J3jP
KxVMj0gDogLvGsJ0YvG5Nb23r92BP9hu6gJwtYu8ydHGotPZMhuSdKUSErcaYR/V
XEQW19+p9zH0NorBufv3L9O2CYQTn2TGOHvW2kdbSMeHyvv/vwQm3bxPIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5EahKfbM8nlyjPvFwFaPLMfm7xMB8GA1UdIwQY
MBaAFGlcU30mVttN0MPDL+mBs8dxRD5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZ4VGZTWlcyMDNRdzhNdjZZR3p4M0ZFUGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hOTQ5NjYtMDNlNS00MmVhLWFjMjYt
YThiZWI1NjU3ZDc2LzEvYVZ4VGZTWlcyMDNRdzhNdjZZR3p4M0ZFUGxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hOTQ5NjYtMDNlNS00MmVhLWFjMjYtYThiZWI1NjU3ZDc2
LzEvYVZ4VGZTWlcyMDNRdzhNdjZZR3p4M0ZFUGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXg+9bnT
4bAn2hqr8kViwF9Hfuz3v38VII8TnPXYkwquVwOSmEbYUHTd/cwE8wdnXts4pfzq
Y8KQ/84dxS2XHGeEDMUIe7vWP+sYL6ZoecS4emwwJDXEcebTTcuscgbJ41RTB2gn
0wCX4QArNh1y43OcwHnmWEIIMuck0Pn5cAPLEdnPR8JQnJru6GT+xH5dPgpv2j/w
n7xQ1QhRKve4EMsDvWaBnvFbSWWdIEnNmBmtzTWfPW40fdGPlSjaduwmiqxyfZwk
ivzUVyRt10HZm/MepxzPELmmyiUFfEC7+215NxXg8WV/1+5r4AxOdL/ZT1946kFu
dgE4ztHLUKU64g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:34:03 2025 by rpki-client