Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft
File: AonuzqJ5QTJX2JCMJVaKvrivhnc.mft (raw, json)
Hash identifier: YbPR8GutQC7Pk5H4Fp8dQKZ2eNOYsqNiStb/8QyPtQg=
Subject key identifier: F3:18:F7:AF:8F:0C:77:97:00:50:5D:F5:DF:AA:C0:52:40:70:41:C5
Authority key identifier: 02:89:EE:CE:A2:79:41:32:57:D8:90:8C:25:56:8A:BE:B8:AF:86:77
Certificate issuer: /CN=0289eecea279413257d8908c25568abeb8af8677
Certificate serial: 0194BC3C1B243F2D20B236FA3B937C6067D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AonuzqJ5QTJX2JCMJVaKvrivhnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft
Manifest number: 09A1
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: AonuzqJ5QTJX2JCMJVaKvrivhnc.crl (hash: v09fCj9dIbhYca+zxBCdSYXj2NRWxrVKwtHi8Vgbaic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1b:24:3f:2d:20:b2:36:fa:3b:93:7c:60:67:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0289eecea279413257d8908c25568abeb8af8677
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=f318f7af8f0c779700505df5dfaac052407041c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:35:27:ac:00:3d:c9:c4:52:24:b3:ff:fa:
6f:0d:f8:1d:54:57:53:96:7d:a7:00:6b:44:53:03:
72:6e:93:82:eb:e5:15:0b:29:0c:1f:4a:33:90:f7:
de:1b:88:54:a7:10:5a:37:5f:6f:51:ce:60:2d:67:
08:89:b5:51:9d:68:53:69:7c:2d:0e:cd:8a:e7:c1:
e4:b7:bf:a0:9b:10:6e:93:c4:b0:b7:67:b1:1d:67:
23:26:d6:c1:54:cb:1a:6d:67:13:9f:ea:b1:2d:85:
b5:38:35:cf:4d:0c:f9:37:92:a1:a6:e5:6a:4b:32:
84:d7:f0:bf:b3:a6:b9:3d:ca:d5:62:3b:44:7c:a5:
8b:0a:dd:31:2a:f3:a8:e3:8b:68:1c:b2:b7:bf:d7:
27:97:1f:2a:e4:91:61:e1:2f:0f:28:da:b5:dd:c8:
c0:02:3c:91:48:79:57:a6:8a:c3:8b:c8:a9:6f:9f:
3c:3e:4c:d3:47:5d:c6:83:92:76:87:7c:7b:fd:f8:
5f:3c:dd:9b:3f:3c:ea:5b:43:24:8d:25:53:4b:b5:
af:f6:e4:87:3d:d9:03:fd:cd:53:f2:af:2a:d1:20:
44:b0:db:ae:00:ec:cc:e6:47:85:45:cb:cc:cf:99:
73:28:99:cc:a4:96:1f:28:b2:b9:ba:be:71:73:d1:
1a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:18:F7:AF:8F:0C:77:97:00:50:5D:F5:DF:AA:C0:52:40:70:41:C5
X509v3 Authority Key Identifier:
keyid:02:89:EE:CE:A2:79:41:32:57:D8:90:8C:25:56:8A:BE:B8:AF:86:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AonuzqJ5QTJX2JCMJVaKvrivhnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3a:5a:c3:5f:3b:dc:1e:56:7b:0b:da:79:71:01:cd:65:6f:
02:22:9f:99:d8:bf:34:4d:e3:03:77:c6:02:2e:39:10:c0:79:
94:1b:be:5e:b0:76:4f:f6:d7:9d:55:14:ab:5e:29:59:b2:20:
63:08:8c:89:21:6e:6f:82:f3:a8:98:84:04:3b:cd:15:94:2a:
8d:51:6a:29:31:c8:c8:f8:b5:bf:9f:40:04:52:40:13:8d:7f:
1c:94:a2:f5:44:b2:6e:c6:ff:6f:b0:da:78:35:b4:f6:3b:03:
16:88:a4:2d:dd:20:62:16:a9:7f:bf:b0:83:b1:1f:11:e8:14:
13:64:87:42:56:e4:34:43:8c:b0:a9:a7:45:90:52:3c:a1:2f:
c3:5d:13:e2:27:c7:54:2f:4b:27:f7:00:ed:a9:f0:91:b4:a5:
52:5a:c3:46:3b:21:21:5f:32:33:02:6a:93:fe:96:f4:04:53:
9b:70:22:fa:0b:24:26:61:a8:5d:37:a5:dc:c8:00:59:ed:64:
13:b0:d4:63:bb:00:bb:cb:bf:d2:f0:25:2c:da:cf:95:89:75:
2b:08:77:43:e9:1f:cd:d2:d3:49:fa:57:45:92:ad:9c:27:b4:
b7:a8:99:36:3a:10:9d:8f:9a:52:be:bd:26:45:3f:d7:b0:87:
83:9d:83:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBskPy0gsjb6O5N8YGfXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODllZWNlYTI3OTQxMzI1N2Q4OTA4YzI1NTY4YWJlYjhh
Zjg2NzcwHhcNMjUwMTMxMTIwMDQzWhcNMjUwMjAxMTIwMDQzWjAzMTEwLwYDVQQD
EyhmMzE4ZjdhZjhmMGM3Nzk3MDA1MDVkZjVkZmFhYzA1MjQwNzA0MWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLg1J6wAPcnEUiSz//pvDfgdVFdT
ln2nAGtEUwNybpOC6+UVCykMH0ozkPfeG4hUpxBaN19vUc5gLWcIibVRnWhTaXwt
Ds2K58Hkt7+gmxBuk8Swt2exHWcjJtbBVMsabWcTn+qxLYW1ODXPTQz5N5KhpuVq
SzKE1/C/s6a5PcrVYjtEfKWLCt0xKvOo44toHLK3v9cnlx8q5JFh4S8PKNq13cjA
AjyRSHlXporDi8ipb588PkzTR13Gg5J2h3x7/fhfPN2bPzzqW0MkjSVTS7Wv9uSH
PdkD/c1T8q8q0SBEsNuuAOzM5keFRcvMz5lzKJnMpJYfKLK5ur5xc9EaYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMY96+PDHeXAFBd9d+qwFJAcEHFMB8GA1UdIwQY
MBaAFAKJ7s6ieUEyV9iQjCVWir64r4Z3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9udXpxSjVRVEpYMkpDTUpWYUt2cml2aG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMmI4OGItMWZiZi00MGY0LWFkYTUt
MjcwOTI5ZDA1MTkyLzEvQW9udXpxSjVRVEpYMkpDTUpWYUt2cml2aG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yMmI4OGItMWZiZi00MGY0LWFkYTUtMjcwOTI5ZDA1MTky
LzEvQW9udXpxSjVRVEpYMkpDTUpWYUt2cml2aG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzpaw187
3B5WewvaeXEBzWVvAiKfmdi/NE3jA3fGAi45EMB5lBu+XrB2T/bXnVUUq14pWbIg
YwiMiSFub4LzqJiEBDvNFZQqjVFqKTHIyPi1v59ABFJAE41/HJSi9USybsb/b7Da
eDW09jsDFoikLd0gYhapf7+wg7EfEegUE2SHQlbkNEOMsKmnRZBSPKEvw10T4ifH
VC9LJ/cA7anwkbSlUlrDRjshIV8yMwJqk/6W9ARTm3Ai+gskJmGoXTel3MgAWe1k
E7DUY7sAu8u/0vAlLNrPlYl1Kwh3Q+kfzdLTSfpXRZKtnCe0t6iZNjoQnY+aUr69
JkU/17CHg52D3A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:34 2025 by rpki-client