Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: r/k3LOmj8bTIYs3Tzz0IBP2rbrik56TueEuOzuvVjgk=
Subject key identifier: EE:94:9A:2A:4C:39:66:EF:26:CD:16:6B:35:46:56:25:13:EC:41:95
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 0194BC05147B741DE65685D1C8DFB66D400F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 034E
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: hzFFWbg1JimUvWR3lZWnIXJQvSGvITK7uZkgy4SO28c=)
2: lqUgtVIOgNM_8oahrIOECTTMeHE.roa (hash: SpiLSoHograVnyHrwg8KcUf+YJh+U33Y4LuzthE2ieU=)
3: t7AOBzb4Is80NIsg5AED49fAWd8.roa (hash: B7i726ENR+tchfJwU+HqKnow9F/D1fEtIVs8BKGbYDo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:14:7b:74:1d:e6:56:85:d1:c8:df:b6:6d:40:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=ee949a2a4c3966ef26cd166b3546562513ec4195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:33:37:2f:af:5c:86:73:f6:59:71:99:be:e2:
af:ba:c5:52:73:0b:d1:a5:25:df:8e:18:00:81:9a:
27:04:bb:f2:28:5a:bd:84:7a:1f:a2:2c:ce:bb:6e:
34:15:64:8c:c2:5b:8c:e3:eb:82:f2:bc:db:d7:95:
38:5b:63:b9:9f:46:99:e6:e6:5e:b1:e6:c3:a4:ef:
40:e3:9e:69:a2:1f:74:bc:99:53:d3:48:cb:35:b5:
12:7b:a4:e5:9d:5a:b1:0b:96:72:d6:09:1f:6f:16:
b9:21:ef:66:96:b0:a7:0b:c0:ad:d8:61:db:b7:1c:
35:d4:5e:8b:16:52:fa:7c:cf:c7:9d:03:58:9e:53:
ae:7a:42:f1:eb:3d:cf:f2:dc:0e:9c:d9:e8:6b:7f:
28:2a:df:c0:ee:f6:47:ce:7e:04:ca:ec:60:72:12:
df:8b:b6:ed:ac:5b:ec:4b:93:e9:35:25:55:ff:cc:
94:0d:a2:b6:70:c9:e6:76:15:2a:49:e0:9d:6b:96:
55:f6:24:a9:67:ae:ad:6f:95:ae:77:a6:1e:5d:ea:
75:24:bb:66:35:75:d3:56:d9:1c:55:c6:25:86:b8:
15:d6:99:c1:e9:98:6f:20:a1:1b:33:02:3c:29:66:
51:dd:dc:d7:db:76:fd:9b:9f:ca:69:50:5c:73:e2:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:94:9A:2A:4C:39:66:EF:26:CD:16:6B:35:46:56:25:13:EC:41:95
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:99:76:be:5a:b8:b9:ea:1b:dc:25:28:88:aa:33:bd:9c:1d:
f8:a0:e6:0e:ed:a1:6e:5d:3f:30:cc:fc:76:d9:28:c9:6f:83:
21:e9:89:d5:45:f5:8e:13:d9:cb:e9:71:2a:58:6f:9e:1e:36:
64:87:5f:64:7b:5e:84:c0:33:1d:39:49:e3:9f:de:26:df:9f:
1f:5e:72:f7:03:29:8a:e2:ed:0f:fb:c7:49:c2:b4:a5:8b:bd:
c9:ea:53:e8:35:f4:f3:13:06:67:79:7f:02:5b:27:6b:c5:4b:
dd:57:fd:1d:10:0f:93:84:b4:ab:56:a2:d3:ea:a5:22:5d:d4:
eb:9c:cb:44:f9:7a:e6:74:7e:43:24:25:01:f3:3a:13:75:d6:
50:ff:8d:4f:7d:58:c0:30:d1:ab:7d:4a:d6:0f:77:39:c6:0a:
54:19:24:6d:e8:ca:f1:b4:50:20:a7:fa:ac:7f:01:4d:2c:5e:
d2:30:b7:37:f0:86:62:09:ac:3f:a6:2c:58:94:d1:06:db:ff:
d5:dc:0f:ca:3b:0c:07:82:06:3f:73:c2:f0:87:b5:a2:e5:ce:
54:6b:00:f4:42:00:ee:6f:7a:12:d3:ab:72:5f:62:f0:b3:2c:
d9:01:0d:5f:60:00:bb:c0:7c:9b:44:bd:ea:7b:08:3b:69:7b:
d1:98:59:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRR7dB3mVoXRyN+2bUAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZjNhYTAxNDBiNzk4MzUwMGVhODI5ZjNjMzZiYmZiNjVh
Zjk5NzIwHhcNMjUwMTMxMTEwMDM3WhcNMjUwMjAxMTEwMDM3WjAzMTEwLwYDVQQD
EyhlZTk0OWEyYTRjMzk2NmVmMjZjZDE2NmIzNTQ2NTYyNTEzZWM0MTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TM3L69chnP2WXGZvuKvusVScwvR
pSXfjhgAgZonBLvyKFq9hHofoizOu240FWSMwluM4+uC8rzb15U4W2O5n0aZ5uZe
sebDpO9A455poh90vJlT00jLNbUSe6TlnVqxC5Zy1gkfbxa5Ie9mlrCnC8Ct2GHb
txw11F6LFlL6fM/HnQNYnlOuekLx6z3P8twOnNnoa38oKt/A7vZHzn4EyuxgchLf
i7btrFvsS5PpNSVV/8yUDaK2cMnmdhUqSeCda5ZV9iSpZ66tb5Wud6YeXep1JLtm
NXXTVtkcVcYlhrgV1pnB6ZhvIKEbMwI8KWZR3dzX23b9m5/KaVBcc+LsUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6UmipMOWbvJs0WazVGViUT7EGVMB8GA1UdIwQY
MBaAFGrzqgFAt5g1AOqCnzw2u/tlr5lyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZPcUFVQzNtRFVBNm9LZlBEYTctMld2bVhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zMmIxYWMtNDE4OS00OWZkLWE5OTkt
YjhmM2I3NzllNTRiLzEvYXZPcUFVQzNtRFVBNm9LZlBEYTctMld2bVhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zMmIxYWMtNDE4OS00OWZkLWE5OTktYjhmM2I3NzllNTRi
LzEvYXZPcUFVQzNtRFVBNm9LZlBEYTctMld2bVhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZl2vlq4
ueob3CUoiKozvZwd+KDmDu2hbl0/MMz8dtkoyW+DIemJ1UX1jhPZy+lxKlhvnh42
ZIdfZHtehMAzHTlJ45/eJt+fH15y9wMpiuLtD/vHScK0pYu9yepT6DX08xMGZ3l/
Alsna8VL3Vf9HRAPk4S0q1ai0+qlIl3U65zLRPl65nR+QyQlAfM6E3XWUP+NT31Y
wDDRq31K1g93OcYKVBkkbejK8bRQIKf6rH8BTSxe0jC3N/CGYgmsP6YsWJTRBtv/
1dwPyjsMB4IGP3PC8Ie1ouXOVGsA9EIA7m96EtOrcl9i8LMs2QENX2AAu8B8m0S9
6nsIO2l70ZhZyg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:33 2025 by rpki-client