Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
File: aVJaNi6HcFoewCLRZWDydtWc7h0.mft (raw, json)
Hash identifier: 6zb+V0EdRyQZavu012JYYATAFZBwSLquHcQMkqPU+Nc=
Subject key identifier: BF:88:C4:86:A1:40:1C:14:2E:1B:9C:19:BC:6D:EC:63:AD:98:F2:9A
Authority key identifier: 69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
Certificate issuer: /CN=69525a362e87705a1ec022d16560f276d59cee1d
Certificate serial: 0194BC049DBD3711E3AC560F60BFA0F8E93E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
Manifest number: 0603
Signing time: Fri 31 Jan 2025 11:00:06 +0000
Manifest this update: Fri 31 Jan 2025 11:00:06 +0000
Manifest next update: Sat 01 Feb 2025 11:00:06 +0000
Files and hashes: 1: aHJU3TtGM9M9L2c33hiqaeAD6-M.roa (hash: Jnk6c3GJ5E4y6b+inckEyRoPVADxMl1TsyYlid/Y0Y0=)
2: aVJaNi6HcFoewCLRZWDydtWc7h0.crl (hash: x/LvaDWJ0yRgju6/40LAdi0pJBa9eEFPHtnCYHCe22Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:9d:bd:37:11:e3:ac:56:0f:60:bf:a0:f8:e9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69525a362e87705a1ec022d16560f276d59cee1d
Validity
Not Before: Jan 31 11:00:06 2025 GMT
Not After : Feb 1 11:00:06 2025 GMT
Subject: CN=bf88c486a1401c142e1b9c19bc6dec63ad98f29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:89:f6:c6:0b:f8:dc:ca:4e:a5:7c:01:44:
14:cf:5f:53:57:ae:73:18:30:29:93:e6:da:47:72:
cc:54:b5:d5:df:70:4f:30:0c:24:c5:fe:54:c2:07:
be:a3:98:66:93:08:c0:11:75:55:9d:33:e9:ee:19:
fb:60:18:b9:45:a2:ac:75:b7:fd:ad:bb:a8:4c:ff:
c4:d7:59:6a:f8:fc:c5:74:d5:e6:4e:92:73:50:50:
99:57:85:c4:44:70:aa:c3:81:c9:a8:a5:54:a8:c9:
9c:f4:80:db:83:c3:11:05:57:e9:62:20:51:a5:83:
a6:16:f3:fe:eb:cc:ce:a0:80:8c:cc:49:bf:9c:59:
64:f7:ef:b3:8a:44:06:bb:30:da:a9:67:7c:74:93:
c9:59:f4:44:81:e4:94:ea:f7:10:c0:90:f5:6a:4f:
ab:bb:98:68:21:0a:cb:2d:40:ee:f9:e6:24:4e:71:
7e:17:a7:c3:70:25:34:02:03:65:c5:a9:04:57:f9:
fa:db:41:36:53:67:39:55:0d:ea:3d:18:e8:65:42:
5c:1f:5f:a8:d2:55:03:3c:82:d3:cb:29:47:68:f0:
3f:b3:bb:f8:01:ab:5f:a9:4a:99:18:6c:a8:99:57:
26:40:2e:d5:25:39:09:9a:10:51:4d:dd:76:e2:b3:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:88:C4:86:A1:40:1C:14:2E:1B:9C:19:BC:6D:EC:63:AD:98:F2:9A
X509v3 Authority Key Identifier:
keyid:69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1a:84:f4:09:a8:41:1a:b9:b1:c4:7a:69:a2:c7:41:2c:ce:
2e:7c:40:05:c3:11:c3:3f:47:e7:2c:af:a3:79:e1:55:fc:07:
e5:e5:16:50:e7:4d:45:80:45:8d:07:0b:bd:fe:31:ac:ec:c4:
fa:bf:08:d8:3b:e4:85:b2:d5:91:6f:1b:cc:66:d6:cf:98:f7:
19:07:bc:4a:8b:45:42:a7:b9:b1:a4:40:e2:5a:d8:c8:d1:13:
07:5e:81:89:37:06:1d:3d:66:93:f9:02:fb:cb:63:cc:d8:26:
50:74:2f:a9:62:0e:5c:c4:fc:ae:0c:4f:02:80:40:6a:e2:61:
0d:7a:04:e7:df:77:98:d2:64:d1:2b:71:c8:c8:79:57:c1:74:
64:28:de:c1:1c:f3:26:4b:3d:d5:61:df:e5:a2:fd:b2:ca:40:
8e:ee:5c:ac:84:9e:a1:e4:31:4c:fe:5a:a4:b4:6c:c0:ea:f0:
d6:b7:ae:fc:d1:e0:26:d0:7e:d4:dc:6d:02:f5:e6:31:c1:3e:
46:3a:e7:ce:52:97:6f:35:7b:22:5a:f5:6a:c8:61:f2:f3:2f:
80:52:d4:77:9d:bd:2e:85:04:51:21:d8:8d:f3:59:89:af:28:
db:7b:98:59:a2:0c:90:37:9a:5b:4d:22:e4:69:01:28:37:af:
2e:93:c2:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BJ29NxHjrFYPYL+g+Ok+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTI1YTM2MmU4NzcwNWExZWMwMjJkMTY1NjBmMjc2ZDU5
Y2VlMWQwHhcNMjUwMTMxMTEwMDA2WhcNMjUwMjAxMTEwMDA2WjAzMTEwLwYDVQQD
EyhiZjg4YzQ4NmExNDAxYzE0MmUxYjljMTliYzZkZWM2M2FkOThmMjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoGJ9sYL+NzKTqV8AUQUz19TV65z
GDApk+baR3LMVLXV33BPMAwkxf5Uwge+o5hmkwjAEXVVnTPp7hn7YBi5RaKsdbf9
rbuoTP/E11lq+PzFdNXmTpJzUFCZV4XERHCqw4HJqKVUqMmc9IDbg8MRBVfpYiBR
pYOmFvP+68zOoICMzEm/nFlk9++zikQGuzDaqWd8dJPJWfREgeSU6vcQwJD1ak+r
u5hoIQrLLUDu+eYkTnF+F6fDcCU0AgNlxakEV/n620E2U2c5VQ3qPRjoZUJcH1+o
0lUDPILTyylHaPA/s7v4AatfqUqZGGyomVcmQC7VJTkJmhBRTd124rMQGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+IxIahQBwULhucGbxt7GOtmPKaMB8GA1UdIwQY
MBaAFGlSWjYuh3BaHsAi0WVg8nbVnO4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zMGNkODctZjM3NS00YjkzLThkMzkt
NjVkNmNhM2Y0OWQ4LzEvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8zMGNkODctZjM3NS00YjkzLThkMzktNjVkNmNhM2Y0OWQ4
LzEvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRqE9Amo
QRq5scR6aaLHQSzOLnxABcMRwz9H5yyvo3nhVfwH5eUWUOdNRYBFjQcLvf4xrOzE
+r8I2DvkhbLVkW8bzGbWz5j3GQe8SotFQqe5saRA4lrYyNETB16BiTcGHT1mk/kC
+8tjzNgmUHQvqWIOXMT8rgxPAoBAauJhDXoE5993mNJk0StxyMh5V8F0ZCjewRzz
Jks91WHf5aL9sspAju5crISeoeQxTP5apLRswOrw1reu/NHgJtB+1NxtAvXmMcE+
RjrnzlKXbzV7Ilr1ashh8vMvgFLUd529LoUEUSHYjfNZia8o23uYWaIMkDeaW00i
5GkBKDevLpPCSw==
-----END CERTIFICATE-----
Generated at Thu May 1 15:15:53 2025 by rpki-client