Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
File: aG1vVpUAwlBwthJPG4b2CVJnepM.mft (raw, json)
Hash identifier: yKBU0iB7zjmHjhW046+lf9LeKUa16FUaQTyKFeia2Us=
Subject key identifier: 3E:A1:BD:18:4C:65:75:10:F2:49:9E:9F:72:6F:A1:4E:77:06:B7:7C
Authority key identifier: 68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
Certificate issuer: /CN=686d6f569500c25070b6124f1b86f60952677a93
Certificate serial: 0194BBCE1E76FA6C12461F85BB0880089919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
Manifest number: 07CB
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: aG1vVpUAwlBwthJPG4b2CVJnepM.crl (hash: OUF7xklSyH42kYCLn40GAMtM3+sInHtu5Bi3fW9LTEo=)
2: fUaeEEckRfBNE0XG7eTK1gjPW_w.roa (hash: sw5+wxsLZVOQhkR/KheuEdoMzOUAkFrmAKd0BU+FbcE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1e:76:fa:6c:12:46:1f:85:bb:08:80:08:99:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686d6f569500c25070b6124f1b86f60952677a93
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=3ea1bd184c657510f2499e9f726fa14e7706b77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:86:41:84:d3:08:26:00:27:d2:05:ab:6f:
c9:2c:a3:0b:f5:86:d3:84:3c:25:9c:9a:67:c8:4e:
8c:fd:60:42:86:c4:8f:b1:f5:7d:93:cd:bd:05:e5:
a1:89:b2:38:a0:33:a4:40:fc:0e:fa:36:e9:8d:9d:
c8:fa:bb:1f:c3:65:9f:b5:67:05:ec:d3:7e:2c:7e:
ea:ee:67:9f:a1:90:31:5c:98:82:63:db:74:51:36:
17:ce:a6:19:7a:ee:23:69:19:eb:cb:59:5d:16:f9:
0a:14:62:27:39:91:13:31:55:33:9f:bb:9e:04:0e:
a6:aa:a9:e8:be:a5:98:65:21:ec:a8:61:ad:96:cf:
a7:9b:05:5f:7b:21:31:56:90:d7:02:2b:d8:a9:f3:
bd:4d:4b:15:d5:aa:0c:83:c8:2f:22:ba:29:6f:34:
fa:b6:c6:a0:86:8a:d0:24:ef:5e:4a:e4:c3:07:3c:
4e:60:91:3a:8f:11:9c:4e:87:df:a7:6e:7d:37:5c:
da:c5:f2:96:23:47:21:29:dd:a7:20:f0:76:e4:0d:
e3:9d:4b:05:80:4f:bf:75:17:13:db:4b:99:7d:01:
3a:03:df:58:1c:fc:96:c8:da:f3:9a:5e:f6:1d:92:
05:2c:84:c6:fa:ed:e9:72:7e:e6:4d:08:3d:a7:ab:
88:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A1:BD:18:4C:65:75:10:F2:49:9E:9F:72:6F:A1:4E:77:06:B7:7C
X509v3 Authority Key Identifier:
keyid:68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8b:1c:c4:ca:d4:cd:6b:0d:25:34:31:02:66:85:16:ed:c8:
57:80:43:fd:9f:a4:02:ad:9c:7d:ff:3b:d8:d0:27:9e:9c:f1:
9a:dd:81:43:36:7c:7c:07:10:0e:eb:88:8b:a6:2e:c1:3b:d9:
04:9d:2d:4f:cf:90:19:75:37:c9:61:f9:e0:72:31:27:a7:6b:
b5:e7:dc:34:24:0e:16:42:f7:5b:74:87:76:1c:4e:63:da:9c:
81:23:1c:20:79:4f:06:10:67:83:8c:93:ce:4e:97:bb:fc:34:
2b:34:21:91:42:8f:be:50:39:5e:dc:17:8f:17:8d:8b:a2:cf:
24:2f:e7:a0:cf:67:ce:be:e2:6a:e7:47:2b:5d:34:72:2c:da:
6b:03:32:4e:d3:8d:0b:50:0f:18:5e:4a:d4:86:e1:1c:41:44:
2c:26:38:13:f3:2f:28:f6:9d:0b:4a:9a:5a:91:ce:64:11:65:
58:5a:a4:2b:43:80:22:97:73:ff:1b:51:ea:07:bc:1d:bf:d5:
16:a2:15:a2:0b:a5:60:a0:93:89:10:41:a6:88:e6:a7:20:a7:
96:29:2d:ef:c4:c1:1c:7d:49:69:a6:0e:db:2a:94:f0:3d:be:
09:5d:43:21:13:8b:e9:a9:df:a2:9f:cd:ed:75:5f:e7:8f:31:
ca:83:04:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zh52+mwSRh+FuwiACJkZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NmQ2ZjU2OTUwMGMyNTA3MGI2MTI0ZjFiODZmNjA5NTI2
NzdhOTMwHhcNMjUwMTMxMTAwMDM0WhcNMjUwMjAxMTAwMDM0WjAzMTEwLwYDVQQD
EygzZWExYmQxODRjNjU3NTEwZjI0OTllOWY3MjZmYTE0ZTc3MDZiNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp36GQYTTCCYAJ9IFq2/JLKML9YbT
hDwlnJpnyE6M/WBChsSPsfV9k829BeWhibI4oDOkQPwO+jbpjZ3I+rsfw2WftWcF
7NN+LH7q7mefoZAxXJiCY9t0UTYXzqYZeu4jaRnry1ldFvkKFGInOZETMVUzn7ue
BA6mqqnovqWYZSHsqGGtls+nmwVfeyExVpDXAivYqfO9TUsV1aoMg8gvIropbzT6
tsaghorQJO9eSuTDBzxOYJE6jxGcToffp259N1zaxfKWI0chKd2nIPB25A3jnUsF
gE+/dRcT20uZfQE6A99YHPyWyNrzml72HZIFLITG+u3pcn7mTQg9p6uITQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6hvRhMZXUQ8kmen3JvoU53Brd8MB8GA1UdIwQY
MBaAFGhtb1aVAMJQcLYSTxuG9glSZ3qTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUcxdlZwVUF3bEJ3dGhKUEc0YjJDVkpuZXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8yZjUyNjktZDQzMy00N2VkLWJmMWIt
YWI2ZmM0ZTBmMWUwLzEvYUcxdlZwVUF3bEJ3dGhKUEc0YjJDVkpuZXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8yZjUyNjktZDQzMy00N2VkLWJmMWItYWI2ZmM0ZTBmMWUw
LzEvYUcxdlZwVUF3bEJ3dGhKUEc0YjJDVkpuZXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4scxMrU
zWsNJTQxAmaFFu3IV4BD/Z+kAq2cff872NAnnpzxmt2BQzZ8fAcQDuuIi6YuwTvZ
BJ0tT8+QGXU3yWH54HIxJ6drtefcNCQOFkL3W3SHdhxOY9qcgSMcIHlPBhBng4yT
zk6Xu/w0KzQhkUKPvlA5XtwXjxeNi6LPJC/noM9nzr7iaudHK100cizaawMyTtON
C1APGF5K1IbhHEFELCY4E/MvKPadC0qaWpHOZBFlWFqkK0OAIpdz/xtR6ge8Hb/V
FqIVogulYKCTiRBBpojmpyCnlikt78TBHH1JaaYO2yqU8D2+CV1DIROL6anfop/N
7XVf548xyoMECw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:46 2025 by rpki-client