Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File: AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier: eppa+aANZSr7HoTXibIuVul6e2FGUA1iSe7nzTzYFhs=
Subject key identifier: 5A:95:ED:C8:F3:9F:17:81:F6:9B:CD:36:E5:80:B8:8A:F5:46:DA:2D
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer: /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial: 0194BBCEACC0E8B943A75017A893347FE831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number: 03A9
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: cZYjd7OXJOxxn+WauJvWAvCNXcmuCHSeI2ZvJyg/w9g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ac:c0:e8:b9:43:a7:50:17:a8:93:34:7f:e8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=5a95edc8f39f1781f69bcd36e580b88af546da2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:54:fc:ea:69:86:9a:54:2b:bb:4b:b0:a6:
39:78:ef:ba:24:ce:80:61:71:02:7e:fc:79:66:cb:
ab:7c:8e:77:89:1e:86:f7:be:23:7a:e2:cf:a9:b9:
95:52:9f:70:6b:03:e9:84:ff:b8:0d:7e:c7:a1:5b:
c3:78:c2:ab:38:f6:6a:5a:ca:1d:86:ac:0f:26:64:
83:26:39:37:0c:18:7a:c6:b0:0a:6a:e5:df:a8:2a:
38:15:80:ef:9e:8e:fc:af:ec:91:15:96:0a:77:59:
e0:2e:c7:3f:c1:7f:82:99:33:88:6e:68:4e:76:7f:
3d:29:7e:41:46:28:4d:83:27:b8:ac:e4:28:9d:c4:
1a:e3:0e:b5:90:23:fa:67:df:f6:4a:9d:07:a8:59:
38:a5:4c:25:de:c0:4a:fa:43:94:48:f6:1c:db:eb:
3c:d3:31:86:74:55:88:c3:ba:d6:cb:90:97:46:3f:
2a:60:3f:6a:13:9e:81:45:1f:d3:e8:35:d8:a2:60:
a9:e8:b0:f0:2e:08:0b:a8:58:7c:7d:a6:3f:14:f2:
68:4f:57:8e:6c:bb:d2:fd:86:fe:a7:5d:72:a2:bf:
07:4b:4b:03:f8:43:5a:37:4e:31:27:be:0d:dc:97:
f1:ff:d9:4f:a3:a8:94:ad:a4:d0:18:fa:5c:10:12:
ac:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:95:ED:C8:F3:9F:17:81:F6:9B:CD:36:E5:80:B8:8A:F5:46:DA:2D
X509v3 Authority Key Identifier:
keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e1:43:d3:a4:49:7f:a4:8f:fd:65:4f:3e:ff:eb:21:a9:e1:
af:81:84:28:75:99:25:ad:e0:96:a8:86:db:c0:13:d6:cc:39:
24:ea:da:09:cf:13:9f:3f:c4:eb:b9:a8:8b:b1:b7:4f:9a:0c:
3e:5a:30:4b:10:3b:fc:05:ab:36:db:27:d4:3f:c9:10:74:94:
75:b3:1b:71:c5:81:2d:c8:3d:b7:ae:17:82:f6:31:db:14:df:
b9:4b:f5:53:64:59:4c:7f:af:4b:0e:0a:58:61:77:d4:82:69:
ff:30:5b:21:d5:b2:10:c4:3f:50:70:2c:df:6e:0c:1c:a2:31:
c1:c6:f4:c8:a6:bc:59:10:ee:c8:89:88:02:83:0d:d9:07:ce:
6e:77:93:44:00:e6:84:1e:a5:6c:bc:a3:d2:55:45:e5:09:54:
12:e2:08:d5:93:cb:2c:b4:31:92:73:b5:1e:7e:05:45:8e:46:
3d:14:ea:67:71:77:01:08:7c:5c:2a:40:65:c9:60:c1:17:fc:
24:bc:4c:2e:37:17:4a:d0:4f:49:37:d3:f3:bb:ec:86:bb:b1:
6a:dd:4d:59:00:6b:17:76:ab:2d:9e:b3:11:fe:7c:ee:18:44:
9d:4d:f9:5e:93:a2:9f:09:86:43:15:96:1b:36:87:6f:05:75:
ae:36:f0:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zqzA6LlDp1AXqJM0f+gxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMWM4ZThjYzA3NWMyZDA0MzEzYjkxMWQ5M2Q2MWZlMmE5
YWRlYTIwHhcNMjUwMTMxMTAwMTExWhcNMjUwMjAxMTAwMTExWjAzMTEwLwYDVQQD
Eyg1YTk1ZWRjOGYzOWYxNzgxZjY5YmNkMzZlNTgwYjg4YWY1NDZkYTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssFU/OpphppUK7tLsKY5eO+6JM6A
YXECfvx5ZsurfI53iR6G974jeuLPqbmVUp9wawPphP+4DX7HoVvDeMKrOPZqWsod
hqwPJmSDJjk3DBh6xrAKauXfqCo4FYDvno78r+yRFZYKd1ngLsc/wX+CmTOIbmhO
dn89KX5BRihNgye4rOQoncQa4w61kCP6Z9/2Sp0HqFk4pUwl3sBK+kOUSPYc2+s8
0zGGdFWIw7rWy5CXRj8qYD9qE56BRR/T6DXYomCp6LDwLggLqFh8faY/FPJoT1eO
bLvS/Yb+p11yor8HS0sD+ENaN04xJ74N3Jfx/9lPo6iUraTQGPpcEBKsqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqV7cjznxeB9pvNNuWAuIr1RtotMB8GA1UdIwQY
MBaAFAMcjozAdcLQQxO5Edk9Yf4qmt6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXh5T2pNQjF3dEJERTdrUjJUMWhfaXFhM3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83NTIxM2QtMDFhNC00YjYxLWI1OTQt
NjI2OGNlZGFiZDg0LzEvQXh5T2pNQjF3dEJERTdrUjJUMWhfaXFhM3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy83NTIxM2QtMDFhNC00YjYxLWI1OTQtNjI2OGNlZGFiZDg0
LzEvQXh5T2pNQjF3dEJERTdrUjJUMWhfaXFhM3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+FD06RJ
f6SP/WVPPv/rIanhr4GEKHWZJa3glqiG28AT1sw5JOraCc8Tnz/E67moi7G3T5oM
PlowSxA7/AWrNtsn1D/JEHSUdbMbccWBLcg9t64XgvYx2xTfuUv1U2RZTH+vSw4K
WGF31IJp/zBbIdWyEMQ/UHAs324MHKIxwcb0yKa8WRDuyImIAoMN2QfObneTRADm
hB6lbLyj0lVF5QlUEuII1ZPLLLQxknO1Hn4FRY5GPRTqZ3F3AQh8XCpAZclgwRf8
JLxMLjcXStBPSTfT87vshruxat1NWQBrF3arLZ6zEf587hhEnU35XpOinwmGQxWW
GzaHbwV1rjbwtw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:08 2025 by rpki-client