Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
File: aaKML4THXo0DiGlDVRUt0rcx8kk.mft (raw, json)
Hash identifier: Y/FrIqCwaYVZZGOPWyqLVcG4Z9VbDubetjtKtUQ+zDQ=
Subject key identifier: 20:15:A8:BB:AE:31:54:C9:F2:D2:AE:CE:69:19:77:B4:18:8C:48:8E
Authority key identifier: 69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
Certificate issuer: /CN=69a28c2f84c75e8d0388694355152dd2b731f249
Certificate serial: 0194BD17DA3DF005366D656C15487A7D5B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: WdYc6wSLVkfUe7irxf4uyXxEIsM.roa (hash: dpYwLA3RR3eH0lZ7/JtVVQoaXF1Y2bKy7GfyH86APlE=)
2: aaKML4THXo0DiGlDVRUt0rcx8kk.crl (hash: bBVu8dismCG9gLmCG8ZNtjeagNuP0pavczWkIdXn7DE=)
3: tUMiGCgmsKV0vxqojlEA4oJxpRM.roa (hash: UydNeJbpnz/tc0fGV+RmvBf+BwmLoVjaXgDPrRLbpVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:da:3d:f0:05:36:6d:65:6c:15:48:7a:7d:5b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a28c2f84c75e8d0388694355152dd2b731f249
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=2015a8bbae3154c9f2d2aece691977b4188c488e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:8d:a8:00:b6:0e:31:f1:2b:00:2c:c1:16:
39:b3:30:05:2a:9c:ca:dc:e9:c5:ab:df:bd:15:a0:
ac:e1:8a:f4:f1:61:ce:6a:4a:a5:c1:75:86:d3:3b:
59:22:61:bb:93:7e:43:2c:10:f1:ce:f3:5a:2b:1e:
0d:49:98:ab:25:b9:f1:05:1d:30:15:e6:37:86:6f:
e6:ba:42:11:a6:83:53:2d:97:48:02:32:7d:a8:b3:
4b:33:08:fa:47:03:a5:b9:cf:71:5e:3c:d5:ec:34:
8f:31:2c:6c:82:a6:d9:08:30:7e:62:2b:f6:05:fe:
11:2c:02:61:1b:3f:40:2c:30:5c:48:e5:f1:ce:e3:
7b:aa:b8:c9:a9:36:b5:7e:f0:99:f5:5f:2d:1f:0c:
38:c6:e0:51:ee:ed:4e:7b:7c:d1:97:e4:9b:31:08:
b1:5f:c0:d4:47:c8:2b:6b:5e:0b:e9:c7:61:3f:76:
74:b7:4c:9f:77:c8:55:33:8f:37:6e:12:00:f4:f6:
21:32:0f:69:03:a2:f1:b1:5c:c9:79:e5:bc:59:46:
19:6e:57:9b:16:08:ee:77:46:9b:25:ab:46:6d:ce:
7c:46:f3:05:7d:0c:a8:4c:8c:ab:6e:20:a2:e2:b1:
5f:33:c9:11:d3:05:18:a7:c8:fd:51:1a:99:f1:d2:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:15:A8:BB:AE:31:54:C9:F2:D2:AE:CE:69:19:77:B4:18:8C:48:8E
X509v3 Authority Key Identifier:
keyid:69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ba:14:de:df:a3:b1:3f:29:0f:2d:ee:d9:19:94:1d:bd:3f:
54:a5:ed:45:85:d6:ad:e5:f8:a1:52:d0:3f:08:bb:88:d9:26:
86:7c:0a:20:01:66:be:47:db:d7:d7:86:06:35:bf:ee:82:a4:
8d:97:97:3b:40:c8:18:60:0a:44:9e:7e:49:82:75:a6:4f:7f:
52:76:af:47:ff:24:17:ce:c6:22:56:f3:70:26:4b:9f:f0:aa:
54:94:a4:b2:bb:53:00:1c:29:09:f4:5e:b3:d1:24:91:51:9c:
6c:d9:7b:94:b1:6c:20:aa:a1:05:b1:6f:26:30:52:f5:82:04:
4c:42:1b:ba:ef:82:46:e5:1e:71:31:07:41:81:90:ef:65:b4:
a2:a5:be:7d:86:ab:95:5d:90:7f:0b:46:0a:64:3b:f2:e6:a6:
06:58:39:74:74:39:4a:f1:84:5c:ee:a9:c0:b1:f2:8f:ef:2f:
98:8e:c3:c6:98:c2:09:f2:e1:62:3a:0f:bb:cb:0b:7e:ff:13:
e5:e3:be:90:41:4b:37:81:1c:f7:ea:48:fe:c9:63:5b:af:b9:
3f:65:8d:2f:84:04:e0:49:86:8a:02:dc:03:d0:2a:00:d5:87:
3b:d6:c2:7f:87:2e:36:2f:89:12:c4:9c:ad:17:9b:c8:9b:bf:
d8:6a:6d:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F9o98AU2bWVsFUh6fVuJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTI4YzJmODRjNzVlOGQwMzg4Njk0MzU1MTUyZGQyYjcz
MWYyNDkwHhcNMjUwMTMxMTYwMDQ0WhcNMjUwMjAxMTYwMDQ0WjAzMTEwLwYDVQQD
EygyMDE1YThiYmFlMzE1NGM5ZjJkMmFlY2U2OTE5NzdiNDE4OGM0ODhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRONqAC2DjHxKwAswRY5szAFKpzK
3OnFq9+9FaCs4Yr08WHOakqlwXWG0ztZImG7k35DLBDxzvNaKx4NSZirJbnxBR0w
FeY3hm/mukIRpoNTLZdIAjJ9qLNLMwj6RwOluc9xXjzV7DSPMSxsgqbZCDB+Yiv2
Bf4RLAJhGz9ALDBcSOXxzuN7qrjJqTa1fvCZ9V8tHww4xuBR7u1Oe3zRl+SbMQix
X8DUR8gra14L6cdhP3Z0t0yfd8hVM483bhIA9PYhMg9pA6LxsVzJeeW8WUYZbleb
Fgjud0abJatGbc58RvMFfQyoTIyrbiCi4rFfM8kR0wUYp8j9URqZ8dIDBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAVqLuuMVTJ8tKuzmkZd7QYjEiOMB8GA1UdIwQY
MBaAFGmijC+Ex16NA4hpQ1UVLdK3MfJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFLTUw0VEhYbzBEaUdsRFZSVXQwcmN4OGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYt
MmNiZDU1ZjlhOGVlLzEvYWFLTUw0VEhYbzBEaUdsRFZSVXQwcmN4OGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYtMmNiZDU1ZjlhOGVl
LzEvYWFLTUw0VEhYbzBEaUdsRFZSVXQwcmN4OGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQboU3t+j
sT8pDy3u2RmUHb0/VKXtRYXWreX4oVLQPwi7iNkmhnwKIAFmvkfb19eGBjW/7oKk
jZeXO0DIGGAKRJ5+SYJ1pk9/UnavR/8kF87GIlbzcCZLn/CqVJSksrtTABwpCfRe
s9EkkVGcbNl7lLFsIKqhBbFvJjBS9YIETEIbuu+CRuUecTEHQYGQ72W0oqW+fYar
lV2QfwtGCmQ78uamBlg5dHQ5SvGEXO6pwLHyj+8vmI7DxpjCCfLhYjoPu8sLfv8T
5eO+kEFLN4Ec9+pI/sljW6+5P2WNL4QE4EmGigLcA9AqANWHO9bCf4cuNi+JEsSc
rRebyJu/2GptvQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:48 2025 by rpki-client