Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier: SN2Jz55NLJHLtO/CX7eHgEkwxmAP5fyqVg9aRT30fsk=
Subject key identifier: ED:CE:E6:D4:DA:A5:C4:70:BF:86:64:75:3E:C8:50:6F:F1:5D:09:21
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer: /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial: 0194BD177B2F2A0A48D7292347D81F6CC76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: Tb83W43B5mTae4EPLC4qWEp+hjpSpdmfaudyNagevKo=)
2: fwoYr1Kqstn23idquOGuF4OaEDA.roa (hash: 15qdfkfLDueOEzyhhBl0giIuBtBZlXb5NLiGIPdeRgc=)
3: o93VYBco2vvWfQM6y3ieuHQCi9k.roa (hash: MBbxyku746pAaoPUULrkZQLEeLBzRWKy6GYPbFcoyfI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7b:2f:2a:0a:48:d7:29:23:47:d8:1f:6c:c7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=edcee6d4daa5c470bf8664753ec8506ff15d0921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:22:34:96:84:8a:3e:29:b8:1f:d6:9e:4d:
27:c0:22:d8:0f:aa:d8:7d:1c:4d:1c:9d:89:ae:85:
1a:74:fb:72:6a:f3:9f:91:ee:5c:87:29:29:94:16:
61:ab:84:26:cd:7b:e6:8f:81:13:87:8f:0a:3d:74:
bb:69:37:f1:2f:82:68:0c:ff:2c:04:f2:1d:c2:d7:
a0:48:5b:05:a1:bb:1d:8b:c1:78:f3:47:5b:b3:a0:
d3:c7:69:92:51:7e:58:de:82:f5:be:8a:d3:94:03:
d2:ae:f7:88:b0:95:4c:0f:3d:25:fa:1f:fa:66:78:
81:c9:a2:d5:34:f5:d4:bd:38:ad:7b:88:7e:4a:a0:
c7:94:f6:b9:76:1a:6c:38:14:ca:e1:3b:5e:07:e7:
25:42:7b:c9:5f:88:25:6f:c4:09:01:15:c0:3a:66:
b0:47:56:00:2b:84:fd:62:30:84:10:f3:d0:b7:32:
d8:5b:fc:12:4e:2b:25:02:68:04:56:c6:6e:35:4c:
e7:6d:69:f1:f6:91:f5:5b:07:6c:7e:e4:3b:55:d7:
43:c4:24:bd:86:cb:ce:92:dc:e4:28:58:3d:14:38:
07:6f:6f:f3:da:c5:35:8f:b0:6a:85:38:9e:4d:60:
3d:70:86:fb:b0:81:8c:e3:ee:71:a6:a5:ca:05:35:
fc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CE:E6:D4:DA:A5:C4:70:BF:86:64:75:3E:C8:50:6F:F1:5D:09:21
X509v3 Authority Key Identifier:
keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c8:39:b4:98:ce:38:00:91:8a:38:2a:8d:74:7c:b5:f3:b4:
a1:dd:4d:dc:54:f3:76:b4:8a:0f:c4:c8:5a:81:f8:ec:10:fa:
47:c9:01:1f:e1:5a:37:b1:d9:37:5c:07:0e:2e:b2:f4:8f:f3:
11:e3:2b:3d:0e:d5:c1:92:c9:a8:5c:ae:ad:10:f8:bc:e0:90:
fb:01:9c:1a:06:6e:05:33:e4:9b:a7:d2:70:c7:a4:70:05:56:
4f:b3:5c:d2:39:23:e6:6e:c3:54:00:9b:dd:38:94:0a:32:8c:
7b:1a:ff:c9:7e:76:fe:58:97:21:bf:e0:86:98:97:1e:ed:9b:
c3:85:c9:64:2e:60:ec:e5:9b:6f:fd:42:78:af:b8:6d:59:88:
f7:3e:08:31:1b:b1:eb:8c:d1:72:9e:02:b0:9b:cf:f9:80:5f:
e1:3b:e9:e1:26:d1:48:d3:7e:3b:bf:97:1b:28:cf:ff:05:14:
c9:be:01:c5:ee:b2:ea:74:5a:3a:eb:fa:75:42:34:27:a8:5c:
1c:63:03:84:fb:94:2b:34:46:e1:6d:ca:1f:81:fd:4f:05:55:
c6:45:be:9e:1a:ed:8d:a7:3c:61:8c:85:b9:1f:e6:6e:af:04:
0d:6f:ae:89:d6:50:1d:c2:53:29:97:c4:7d:6c:9e:64:a3:51:
53:27:02:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3svKgpI1ykjR9gfbMdvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjRkMTY5NzdlZWUyZjU4YmViMWJiN2FhMmY0YjJmYTFh
YmZjNDgwHhcNMjUwMTMxMTYwMDIwWhcNMjUwMjAxMTYwMDIwWjAzMTEwLwYDVQQD
EyhlZGNlZTZkNGRhYTVjNDcwYmY4NjY0NzUzZWM4NTA2ZmYxNWQwOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8EiNJaEij4puB/Wnk0nwCLYD6rY
fRxNHJ2JroUadPtyavOfke5chykplBZhq4QmzXvmj4ETh48KPXS7aTfxL4JoDP8s
BPIdwtegSFsFobsdi8F480dbs6DTx2mSUX5Y3oL1vorTlAPSrveIsJVMDz0l+h/6
ZniByaLVNPXUvTite4h+SqDHlPa5dhpsOBTK4TteB+clQnvJX4glb8QJARXAOmaw
R1YAK4T9YjCEEPPQtzLYW/wSTislAmgEVsZuNUznbWnx9pH1WwdsfuQ7VddDxCS9
hsvOktzkKFg9FDgHb2/z2sU1j7BqhTieTWA9cIb7sIGM4+5xpqXKBTX8KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3O5tTapcRwv4ZkdT7IUG/xXQkhMB8GA1UdIwQY
MBaAFAMk0Wl37uL1i+sbt6ovSy+hq/xIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMt
YzI1ZDdmY2EwMDM3LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80NTc4YTYtMWExYy00OTQ0LWE3NzMtYzI1ZDdmY2EwMDM3
LzEvQXlUUmFYZnU0dldMNnh1M3FpOUxMNkdyX0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMg5tJjO
OACRijgqjXR8tfO0od1N3FTzdrSKD8TIWoH47BD6R8kBH+FaN7HZN1wHDi6y9I/z
EeMrPQ7VwZLJqFyurRD4vOCQ+wGcGgZuBTPkm6fScMekcAVWT7Nc0jkj5m7DVACb
3TiUCjKMexr/yX52/liXIb/ghpiXHu2bw4XJZC5g7OWbb/1CeK+4bVmI9z4IMRux
64zRcp4CsJvP+YBf4Tvp4SbRSNN+O7+XGyjP/wUUyb4Bxe6y6nRaOuv6dUI0J6hc
HGMDhPuUKzRG4W3KH4H9TwVVxkW+nhrtjac8YYyFuR/mbq8EDW+uidZQHcJTKZfE
fWyeZKNRUycC/A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:51 2025 by rpki-client