Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
File: axa8EQuqKsnRYgwlBxdXfeZKkks.mft (raw, json)
Hash identifier: o+4twmNGWhJhdCamAi/k2L4yNkkXAXXuo0puVMv9Uyc=
Subject key identifier: 2A:94:F6:C3:67:65:4C:D4:8E:49:65:04:5B:6A:90:93:BD:80:58:DB
Authority key identifier: 6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
Certificate issuer: /CN=6b16bc110baa2ac9d1620c250717577de64a924b
Certificate serial: 0194BBCE5B64B143845D3493D8764E1498F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: axa8EQuqKsnRYgwlBxdXfeZKkks.crl (hash: l4g8CBlbfBolBBNXJxzNU/9Sszd8Hbw1C5Km3aL8BRA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5b:64:b1:43:84:5d:34:93:d8:76:4e:14:98:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b16bc110baa2ac9d1620c250717577de64a924b
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=2a94f6c367654cd48e4965045b6a9093bd8058db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:cf:fc:fa:55:cf:d3:44:29:08:4c:e1:76:
39:34:50:44:16:df:64:55:e6:01:67:f7:e1:64:8e:
4d:a1:f9:90:28:cc:46:d2:36:b8:4e:69:81:1d:52:
0f:aa:3c:42:8a:8b:68:f2:56:bf:05:2e:4f:17:47:
82:d9:b6:4f:37:8c:42:e6:67:d1:22:eb:50:a5:6f:
95:9e:40:5c:d0:36:a9:54:23:ae:ae:8e:8d:74:68:
ac:d6:33:35:94:ea:e2:42:50:0c:4d:62:cb:0e:d5:
62:9b:94:ce:0f:2f:9f:e2:85:bb:c9:a7:9c:e1:a4:
66:c9:88:b7:4c:88:9d:7b:b5:ab:5e:e3:90:02:fa:
99:83:ea:55:22:13:8d:49:9c:77:57:21:ee:9a:6d:
76:9d:b0:89:1e:53:85:65:70:36:ff:7e:55:28:2c:
a7:15:7d:6d:2d:ed:af:28:3b:c2:b1:83:bf:97:63:
58:19:33:f4:6a:bd:84:38:b5:77:4a:d1:6b:9c:24:
66:b9:53:4c:84:01:e6:30:43:5c:e9:fd:c1:f9:39:
b3:d1:89:19:0d:11:06:d0:d8:68:18:78:cd:51:35:
a6:6b:16:ca:3d:f6:ae:24:8c:3c:d1:78:45:38:e8:
ce:a2:44:f5:d3:86:66:44:73:30:8a:c9:0c:84:1f:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:94:F6:C3:67:65:4C:D4:8E:49:65:04:5B:6A:90:93:BD:80:58:DB
X509v3 Authority Key Identifier:
keyid:6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:37:55:41:97:78:92:46:67:34:7d:10:7d:0c:4a:38:ee:12:
ab:0e:c6:39:7b:dd:ff:96:a2:39:ec:5e:16:d0:62:7f:c7:b7:
c3:86:d9:71:18:4f:9d:0d:71:c0:fb:d1:68:b0:10:db:2b:3a:
d4:63:c6:14:0a:37:5e:f7:6d:32:cf:61:b3:56:4e:27:05:4a:
e9:2e:7d:24:fb:7c:69:69:a2:e8:81:2b:51:d8:90:4a:fd:29:
a4:04:95:99:70:3b:75:36:73:d4:45:65:09:55:82:cd:5f:e9:
31:ca:fd:9d:14:aa:a2:7d:19:38:ae:f6:1c:07:a0:f3:05:79:
1e:e7:1f:09:22:ae:aa:31:f7:4f:50:06:13:7e:6e:8d:a1:d0:
c0:4d:25:43:7b:73:6b:74:0b:02:bb:3d:e4:f8:bd:83:08:f8:
88:f2:5e:43:a5:02:4d:e3:ac:ab:b9:d8:1b:69:92:b4:5e:8f:
73:2c:23:08:6b:28:c0:4b:5e:ce:cf:07:53:47:86:f5:6f:a6:
62:29:ec:6c:ed:0f:bb:2c:d5:3c:1a:9a:50:1c:f7:a6:f4:5e:
f7:75:7f:40:6d:3e:89:39:55:ee:b7:5a:b1:f2:e6:65:fe:9d:
e8:b2:07:3b:76:0a:c8:4b:1b:71:94:ba:6a:9a:3c:97:b5:a1:
8d:08:74:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zltksUOEXTST2HZOFJjzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTZiYzExMGJhYTJhYzlkMTYyMGMyNTA3MTc1NzdkZTY0
YTkyNGIwHhcNMjUwMTMxMTAwMDUwWhcNMjUwMjAxMTAwMDUwWjAzMTEwLwYDVQQD
EygyYTk0ZjZjMzY3NjU0Y2Q0OGU0OTY1MDQ1YjZhOTA5M2JkODA1OGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrbP/PpVz9NEKQhM4XY5NFBEFt9k
VeYBZ/fhZI5NofmQKMxG0ja4TmmBHVIPqjxCioto8la/BS5PF0eC2bZPN4xC5mfR
IutQpW+VnkBc0DapVCOuro6NdGis1jM1lOriQlAMTWLLDtVim5TODy+f4oW7yaec
4aRmyYi3TIide7WrXuOQAvqZg+pVIhONSZx3VyHumm12nbCJHlOFZXA2/35VKCyn
FX1tLe2vKDvCsYO/l2NYGTP0ar2EOLV3StFrnCRmuVNMhAHmMENc6f3B+Tmz0YkZ
DREG0NhoGHjNUTWmaxbKPfauJIw80XhFOOjOokT104ZmRHMwiskMhB8aOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqU9sNnZUzUjkllBFtqkJO9gFjbMB8GA1UdIwQY
MBaAFGsWvBELqirJ0WIMJQcXV33mSpJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhhOEVRdXFLc25SWWd3bEJ4ZFhmZVpLa2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMzIyOGMtOGM5OC00NTk3LWEzN2Yt
NTgzYzk4YTA2MzAxLzEvYXhhOEVRdXFLc25SWWd3bEJ4ZFhmZVpLa2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wMzIyOGMtOGM5OC00NTk3LWEzN2YtNTgzYzk4YTA2MzAx
LzEvYXhhOEVRdXFLc25SWWd3bEJ4ZFhmZVpLa2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjdVQZd4
kkZnNH0QfQxKOO4Sqw7GOXvd/5aiOexeFtBif8e3w4bZcRhPnQ1xwPvRaLAQ2ys6
1GPGFAo3XvdtMs9hs1ZOJwVK6S59JPt8aWmi6IErUdiQSv0ppASVmXA7dTZz1EVl
CVWCzV/pMcr9nRSqon0ZOK72HAeg8wV5HucfCSKuqjH3T1AGE35ujaHQwE0lQ3tz
a3QLArs95Pi9gwj4iPJeQ6UCTeOsq7nYG2mStF6PcywjCGsowEtezs8HU0eG9W+m
YinsbO0PuyzVPBqaUBz3pvRe93V/QG0+iTlV7rdasfLmZf6d6LIHO3YKyEsbcZS6
apo8l7WhjQh06A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:55:51 2025 by rpki-client