Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
File: aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft (raw, json)
Hash identifier: 716i8GilyXo9n4Wcs3B4E/vAv9koc0Dyr4ZU5YTMOW8=
Subject key identifier: 21:80:E5:3D:F7:E3:C4:91:0F:56:78:DE:9F:BC:1C:A4:06:2B:C1:71
Authority key identifier: 69:87:D0:04:7F:B1:D8:91:2C:63:F9:11:30:5A:71:4F:43:8B:1E:71
Certificate issuer: /CN=6987d0047fb1d8912c63f911305a714f438b1e71
Certificate serial: 0194BBCE9B3F250203A1850F5DB714DB0CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl (hash: alG12/xPlMGg5+MJOZSY1CG9yHzPoxB4j89+FGiUQjw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9b:3f:25:02:03:a1:85:0f:5d:b7:14:db:0c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6987d0047fb1d8912c63f911305a714f438b1e71
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=2180e53df7e3c4910f5678de9fbc1ca4062bc171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:8a:ad:a8:c7:69:f2:d9:f2:97:8f:11:17:
59:36:f2:1e:17:f6:a2:df:8d:cc:c4:5a:4f:a4:06:
93:d0:54:52:6a:9e:16:7b:48:ae:d2:4c:16:79:cc:
6c:3e:85:d1:4f:66:4c:d2:1d:1a:6e:1c:80:cb:2a:
b8:4d:9f:2c:e8:16:cc:75:6b:11:87:4e:73:0a:df:
a7:e9:e1:42:fd:a3:eb:af:c9:da:82:b2:16:b0:62:
fc:a1:8b:7b:85:85:5b:7e:27:06:c7:26:5e:9e:04:
81:54:30:b0:5e:43:a3:4a:1f:99:e3:bb:07:0c:6f:
dc:7a:99:ed:dc:19:38:62:b5:43:2a:99:23:55:da:
34:88:6e:aa:9a:23:fc:75:6b:b2:39:a5:53:5c:f9:
4b:87:aa:e7:b4:98:fb:f9:ae:85:1a:05:6a:b9:7d:
3a:fc:0c:94:fa:f5:44:11:cd:c7:89:c8:98:2b:e1:
ca:9f:81:57:2d:bd:c2:db:de:42:db:76:2c:26:ef:
c9:38:bb:ca:df:86:8f:6c:57:09:70:12:c4:89:8c:
fe:1b:8c:59:cd:83:ab:85:e8:0c:9e:8e:34:5f:fd:
06:0f:d7:4d:d9:09:d2:9f:42:ae:0d:89:af:18:3f:
f4:97:35:a7:91:c4:25:42:28:4b:0b:15:e3:44:85:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:80:E5:3D:F7:E3:C4:91:0F:56:78:DE:9F:BC:1C:A4:06:2B:C1:71
X509v3 Authority Key Identifier:
keyid:69:87:D0:04:7F:B1:D8:91:2C:63:F9:11:30:5A:71:4F:43:8B:1E:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfQBH-x2JEsY_kRMFpxT0OLHnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d83454-d359-4e9e-841c-42914be0aa04/1/aYfQBH-x2JEsY_kRMFpxT0OLHnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:5f:93:69:ec:9b:bd:90:45:1e:4c:6a:be:0a:ca:f1:e1:31:
d0:78:63:29:98:20:b8:81:cc:9b:5c:b0:57:3a:6f:4c:d2:78:
41:da:ef:97:b5:50:81:14:85:68:18:f6:ff:fb:78:fc:5c:18:
86:c6:95:2e:3f:fe:bb:fa:0f:94:a1:34:53:bb:e3:be:0f:0c:
08:64:4b:1a:1a:cb:b2:b1:b5:50:fe:90:cb:01:3e:27:e3:83:
78:a0:fb:8b:50:21:1a:1b:4d:12:88:0e:cd:e8:c4:87:e6:4a:
c8:2c:a3:5c:85:93:d5:33:d0:15:44:3c:fc:bb:ea:06:68:f0:
42:ed:e3:be:dd:c5:6a:d1:16:0b:2c:f1:94:7b:5a:db:07:64:
bd:78:63:56:7a:7a:26:15:fd:54:a0:c7:48:7b:ed:69:11:12:
51:fb:10:b4:18:69:f8:e5:23:d7:5e:b1:03:66:36:50:e9:12:
52:95:d6:a6:e0:ef:d0:e2:3a:4b:33:88:71:0f:7b:e1:93:dc:
24:ea:76:8a:89:b9:42:9c:84:be:b6:63:ff:bb:55:e1:ea:7d:
47:b2:24:6c:58:5b:4a:98:fe:ed:fe:d5:7d:cd:4c:70:98:54:
b0:6c:c5:59:1e:80:13:2c:8a:a0:00:05:98:60:10:45:97:dc:
90:6a:82:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zps/JQIDoYUPXbcU2wz/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ODdkMDA0N2ZiMWQ4OTEyYzYzZjkxMTMwNWE3MTRmNDM4
YjFlNzEwHhcNMjUwMTMxMTAwMTA2WhcNMjUwMjAxMTAwMTA2WjAzMTEwLwYDVQQD
EygyMTgwZTUzZGY3ZTNjNDkxMGY1Njc4ZGU5ZmJjMWNhNDA2MmJjMTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzyKrajHafLZ8pePERdZNvIeF/ai
343MxFpPpAaT0FRSap4We0iu0kwWecxsPoXRT2ZM0h0abhyAyyq4TZ8s6BbMdWsR
h05zCt+n6eFC/aPrr8nagrIWsGL8oYt7hYVbficGxyZengSBVDCwXkOjSh+Z47sH
DG/cepnt3Bk4YrVDKpkjVdo0iG6qmiP8dWuyOaVTXPlLh6rntJj7+a6FGgVquX06
/AyU+vVEEc3HiciYK+HKn4FXLb3C295C23YsJu/JOLvK34aPbFcJcBLEiYz+G4xZ
zYOrhegMno40X/0GD9dN2QnSn0KuDYmvGD/0lzWnkcQlQihLCxXjRIU0lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGA5T3348SRD1Z43p+8HKQGK8FxMB8GA1UdIwQY
MBaAFGmH0AR/sdiRLGP5ETBacU9Dix5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVlmUUJILXgySkVzWV9rUk1GcHhUME9MSG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9kODM0NTQtZDM1OS00ZTllLTg0MWMt
NDI5MTRiZTBhYTA0LzEvYVlmUUJILXgySkVzWV9rUk1GcHhUME9MSG5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9kODM0NTQtZDM1OS00ZTllLTg0MWMtNDI5MTRiZTBhYTA0
LzEvYVlmUUJILXgySkVzWV9rUk1GcHhUME9MSG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtV+Taeyb
vZBFHkxqvgrK8eEx0HhjKZgguIHMm1ywVzpvTNJ4Qdrvl7VQgRSFaBj2//t4/FwY
hsaVLj/+u/oPlKE0U7vjvg8MCGRLGhrLsrG1UP6QywE+J+ODeKD7i1AhGhtNEogO
zejEh+ZKyCyjXIWT1TPQFUQ8/LvqBmjwQu3jvt3FatEWCyzxlHta2wdkvXhjVnp6
JhX9VKDHSHvtaRESUfsQtBhp+OUj116xA2Y2UOkSUpXWpuDv0OI6SzOIcQ974ZPc
JOp2iom5QpyEvrZj/7tV4ep9R7IkbFhbSpj+7f7Vfc1McJhUsGzFWR6AEyyKoAAF
mGAQRZfckGqCbg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:05 2025 by rpki-client