Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
File: AOT2p3Not87P5nIgtDZXax4Aiuw.mft (raw, json)
Hash identifier: cdygMWd5nnr5p7DvBIKhqynx6fUdSxBVDsLLsDuZkf0=
Subject key identifier: 3F:A6:B4:E0:53:D3:12:AB:07:28:51:A1:89:E4:ED:39:50:AF:09:47
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 0194BD69ADBD6B09D7B3D5AB748201C3F12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
Manifest number: 1504
Signing time: Fri 31 Jan 2025 17:30:06 +0000
Manifest this update: Fri 31 Jan 2025 17:30:06 +0000
Manifest next update: Sat 01 Feb 2025 17:30:06 +0000
Files and hashes: 1: AOT2p3Not87P5nIgtDZXax4Aiuw.crl (hash: EJnGGy3L14y5DfKIZGZs2qbMbHW8op7wFTS3MDf9JGM=)
2: Svvhgo8X1drpMq_QokkBFa4W80w.roa (hash: eEM6GVW64ZPHTJr6mZ27nOJM8iax+cOishqtH69OQFE=)
3: USyW0O_6fcBP2bF0PoHV0RL6-Y8.roa (hash: rYcvR45gztdgTjrFLAUTrj+3T6dDm1wWFyZUivL/lkQ=)
4: UqESFWwPTzjbApEAfUlqEqe0RQE.roa (hash: s8ahaYu2umakIkOHunLEsrzEdAIsc7vrgdaPFAJX/B0=)
5: VkkvGMtenz96Ubj3KDzXyym1LzY.roa (hash: E/GDo41oktFV73vvuiDk3fNXk8LkaX2ghEwTcizgkaw=)
6: bzQXC_3tC4ejtbSCxswIK6nIi_w.roa (hash: xPi7nTVSB049qo06dwzf+AxrWBnTaDkRnuzsoV6FPD0=)
7: iOtLN7r96yySTK3kcDL3l6oeo1o.roa (hash: vm4HGwm7WNMGr8YMQyandHmQcldihIJruBvzRf883JY=)
8: kLCDMTUTRbJeJajr_KP2p663xqk.roa (hash: Cd9LBaXNUzFq1myVM5COYVtjKiIjTzwaQ7rIDyhpbzE=)
9: mS1g5aNaOIe32m5_FgfjTc6VbP4.roa (hash: DRqrjZnRKpeQWBmj82tLSsN99MhvkwnNbbxykbvBnVg=)
10: qGMz12JS23K_Tw6o9cxWFL0iB64.roa (hash: O4yH1IFRTg6hgdbe8PZ5aIHQUHT5uj1R27vMUjNfanE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:69:ad:bd:6b:09:d7:b3:d5:ab:74:82:01:c3:f1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Jan 31 17:30:06 2025 GMT
Not After : Feb 1 17:30:06 2025 GMT
Subject: CN=3fa6b4e053d312ab072851a189e4ed3950af0947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:e6:23:09:c9:c4:e2:67:84:4d:99:c8:ac:
ee:bc:f5:34:f1:6e:bc:bc:6a:9f:82:aa:81:e3:b2:
94:94:ab:f8:39:26:ce:5a:05:9e:5d:8a:4d:5f:a3:
38:1d:2c:2e:df:67:8a:30:00:5b:4b:1e:84:1a:c8:
4a:71:62:59:0d:c7:5c:93:91:b2:8e:a9:1b:fb:c5:
98:32:f8:92:bc:0a:be:17:06:2a:47:eb:bd:63:98:
55:3c:28:f7:95:3d:30:48:cb:3a:a3:4d:56:6a:57:
b4:2a:fc:1b:be:0c:51:2a:fc:c2:81:f7:ca:ae:ef:
19:43:90:ee:b1:14:05:93:b1:37:ff:a5:3f:fb:ce:
05:e8:49:00:73:f6:cf:0d:19:55:bc:c8:49:83:d8:
d5:e4:49:bd:32:82:66:9c:42:72:1f:2d:5c:03:85:
f1:17:5a:4c:12:7d:7b:fe:02:a6:c4:53:15:ea:e2:
b7:a0:74:c1:6d:aa:a5:65:8e:b4:6f:bf:d6:07:a8:
e0:2d:01:b4:8f:a3:30:8a:d6:2c:77:f1:3b:4d:69:
f2:66:30:1c:21:74:27:8c:be:d3:51:9a:ff:4f:59:
eb:ff:a8:5c:99:9f:f0:0a:2d:2a:18:68:7f:64:d9:
64:69:c4:95:de:c3:c9:50:da:8b:95:9e:a0:b0:4d:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A6:B4:E0:53:D3:12:AB:07:28:51:A1:89:E4:ED:39:50:AF:09:47
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:de:6c:28:21:95:80:ae:9a:e6:24:bd:b0:df:c7:e1:3b:1c:
50:10:5c:af:9a:88:a9:a4:46:e1:78:8d:e9:5c:6b:6d:c6:a9:
c4:22:42:18:31:98:31:70:26:bd:e4:5c:77:57:a9:0d:3d:d4:
28:c9:73:aa:22:d9:19:45:85:54:ed:fc:bf:f0:b7:8d:bf:33:
f5:17:76:8b:9e:bd:81:48:b5:3e:87:9e:b8:19:85:e0:56:0d:
d0:91:f1:2e:de:50:9d:c1:b3:8d:6d:24:4f:22:de:c2:f3:23:
da:76:cf:5a:4b:ff:e3:5a:67:4d:8b:8d:c6:d8:32:ea:f0:6a:
80:78:77:d2:be:cf:df:da:01:2d:c9:e2:f2:60:5c:07:f1:6c:
d5:5f:90:87:7d:b6:95:db:6d:72:5d:1a:35:1e:85:21:51:07:
e7:8b:93:5b:f6:01:8d:8a:ca:d6:97:77:71:93:2f:e4:b3:4d:
d7:98:1b:26:15:4f:3f:b2:09:40:b0:46:77:b4:c3:52:cc:f6:
85:2d:9f:76:99:c4:b9:e9:29:7c:3b:e5:73:dd:3e:04:35:bf:
48:ea:0d:84:0e:e3:fa:b2:2d:59:3e:5e:38:6a:34:f6:b1:83:
99:8d:3a:04:6b:ba:26:70:56:4e:e4:84:62:e0:e1:40:fd:07:
13:90:44:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9aa29awnXs9WrdIIBw/EuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw
MDhhZWMwHhcNMjUwMTMxMTczMDA2WhcNMjUwMjAxMTczMDA2WjAzMTEwLwYDVQQD
EygzZmE2YjRlMDUzZDMxMmFiMDcyODUxYTE4OWU0ZWQzOTUwYWYwOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbnmIwnJxOJnhE2ZyKzuvPU08W68
vGqfgqqB47KUlKv4OSbOWgWeXYpNX6M4HSwu32eKMABbSx6EGshKcWJZDcdck5Gy
jqkb+8WYMviSvAq+FwYqR+u9Y5hVPCj3lT0wSMs6o01Wale0KvwbvgxRKvzCgffK
ru8ZQ5DusRQFk7E3/6U/+84F6EkAc/bPDRlVvMhJg9jV5Em9MoJmnEJyHy1cA4Xx
F1pMEn17/gKmxFMV6uK3oHTBbaqlZY60b7/WB6jgLQG0j6MwitYsd/E7TWnyZjAc
IXQnjL7TUZr/T1nr/6hcmZ/wCi0qGGh/ZNlkacSV3sPJUNqLlZ6gsE2HXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+mtOBT0xKrByhRoYnk7TlQrwlHMB8GA1UdIwQY
MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt
YjA3ZDg0MTZhZTRhLzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh
LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwN5sKCGV
gK6a5iS9sN/H4TscUBBcr5qIqaRG4XiN6VxrbcapxCJCGDGYMXAmveRcd1epDT3U
KMlzqiLZGUWFVO38v/C3jb8z9Rd2i569gUi1PoeeuBmF4FYN0JHxLt5QncGzjW0k
TyLewvMj2nbPWkv/41pnTYuNxtgy6vBqgHh30r7P39oBLcni8mBcB/Fs1V+Qh322
ldttcl0aNR6FIVEH54uTW/YBjYrK1pd3cZMv5LNN15gbJhVPP7IJQLBGd7TDUsz2
hS2fdpnEuekpfDvlc90+BDW/SOoNhA7j+rItWT5eOGo09rGDmY06BGu6JnBWTuSE
YuDhQP0HE5BEIw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:32 2025 by rpki-client