Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json)
Hash identifier: lvbebD7TQFbN6iR2ldCZ4WaDLeKRGQwwqunQHZdGTw8=
Subject key identifier: DE:5F:49:E2:A2:16:6A:FD:41:BC:A8:FE:81:E1:BE:62:2B:F8:68:D8
Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Certificate serial: 0194BCAA2C601310627EC9CF6D824172BAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
Manifest number: 0462
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: 3w4mmQ+fOP/ieD6qDYbj06SWKm68kAy5uxSjBnpJLwY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2c:60:13:10:62:7e:c9:cf:6d:82:41:72:ba:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=de5f49e2a2166afd41bca8fe81e1be622bf868d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:26:1d:48:65:b3:67:70:04:1b:f7:d7:b3:15:
0c:bb:18:2e:4b:12:4d:0f:cd:87:42:81:c7:1b:33:
ec:53:74:f3:a5:6a:dd:37:4e:3f:56:c4:a7:79:72:
5f:34:a3:9a:6d:bb:c5:ee:cb:fe:72:1b:44:e0:53:
49:99:68:36:7c:8e:30:06:ed:f9:79:6b:06:f0:89:
43:08:ac:b0:3e:53:71:36:f9:b3:ad:12:53:89:57:
f5:8b:84:73:51:72:4d:58:3c:24:99:17:4a:b8:ad:
67:d9:58:7b:5f:8e:02:62:f1:ba:66:55:d0:3c:b3:
3b:37:cc:da:5c:7d:08:98:e8:41:91:a7:ce:8d:40:
24:20:e8:0b:e0:cf:f2:c8:cb:32:de:84:c0:3b:a6:
ff:44:5c:5d:57:44:f6:e1:f8:af:10:93:d3:94:09:
0b:41:54:55:63:09:d2:65:40:20:1b:0e:fb:e8:7d:
c0:40:08:d3:97:c4:20:b5:a6:f5:97:45:c4:d4:ee:
d6:8d:2c:97:6c:f8:03:95:91:39:02:c1:fa:bb:08:
a5:b2:94:e3:70:4b:d1:1e:82:c9:6a:ae:4c:ca:0e:
b5:55:45:44:6e:81:0b:b2:dc:f0:0a:cc:21:9f:02:
fc:64:c0:42:38:56:18:30:4a:13:5f:c1:6f:05:9c:
70:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5F:49:E2:A2:16:6A:FD:41:BC:A8:FE:81:E1:BE:62:2B:F8:68:D8
X509v3 Authority Key Identifier:
keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:76:b8:bf:d1:47:1c:52:c3:54:b1:62:71:56:2b:3c:7a:1d:
fd:c8:90:1a:c6:8d:cc:64:42:68:b5:fd:62:46:38:60:9b:60:
8a:d2:41:b2:f6:26:b4:1d:55:7a:cc:32:61:0a:cc:37:90:85:
09:f2:f7:ec:a8:fc:6d:d1:3c:31:a6:be:93:a8:68:5a:55:41:
35:ad:03:f6:e9:a5:78:38:dd:e2:2a:5e:fa:8c:05:11:0e:8d:
19:f1:a6:e7:e9:3c:b4:d5:c5:96:44:2a:13:c0:0c:8b:e0:72:
4d:4b:5f:45:2e:32:be:f3:ef:76:41:b7:98:92:45:81:78:e2:
c1:f6:41:0c:f7:04:1b:16:e2:e7:7a:0a:e4:fb:cb:ad:81:ba:
5c:ec:22:6d:11:14:76:fd:ef:ba:88:8e:a5:70:40:b0:41:6c:
cd:8c:52:da:ac:d5:3b:f5:ea:d9:da:a4:48:5a:f0:b0:3e:85:
e8:2c:b9:7e:1b:9b:c3:d2:42:89:e4:50:92:9d:c4:5e:40:f1:
71:f2:7a:4c:ba:ea:22:f5:09:0a:a8:8e:9c:a2:44:0d:bd:b8:
76:7f:0c:d7:3f:86:4b:33:4c:8e:3b:4b:a1:5b:dd:42:0f:ce:
16:f8:26:83:c3:51:67:5e:c7:a7:28:d3:26:03:ed:e2:59:fa:
c4:79:ea:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qixgExBifsnPbYJBcrrvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzk0ODA0Y2ZjYzdlZjI1OGQ0NmZjMzI0YzE2NzY0NDc2
MDNlZjYwHhcNMjUwMTMxMTQwMDU2WhcNMjUwMjAxMTQwMDU2WjAzMTEwLwYDVQQD
EyhkZTVmNDllMmEyMTY2YWZkNDFiY2E4ZmU4MWUxYmU2MjJiZjg2OGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SYdSGWzZ3AEG/fXsxUMuxguSxJN
D82HQoHHGzPsU3TzpWrdN04/VsSneXJfNKOabbvF7sv+chtE4FNJmWg2fI4wBu35
eWsG8IlDCKywPlNxNvmzrRJTiVf1i4RzUXJNWDwkmRdKuK1n2Vh7X44CYvG6ZlXQ
PLM7N8zaXH0ImOhBkafOjUAkIOgL4M/yyMsy3oTAO6b/RFxdV0T24fivEJPTlAkL
QVRVYwnSZUAgGw776H3AQAjTl8Qgtab1l0XE1O7WjSyXbPgDlZE5AsH6uwilspTj
cEvRHoLJaq5Myg61VUVEboELstzwCswhnwL8ZMBCOFYYMEoTX8FvBZxwHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5fSeKiFmr9Qbyo/oHhvmIr+GjYMB8GA1UdIwQY
MBaAFALJSATPzH7yWNRvwyTBZ2RHYD72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMt
MjU5YmU5ZmJjMWYxLzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMtMjU5YmU5ZmJjMWYx
LzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXa4v9FH
HFLDVLFicVYrPHod/ciQGsaNzGRCaLX9YkY4YJtgitJBsvYmtB1VeswyYQrMN5CF
CfL37Kj8bdE8Maa+k6hoWlVBNa0D9umleDjd4ipe+owFEQ6NGfGm5+k8tNXFlkQq
E8AMi+ByTUtfRS4yvvPvdkG3mJJFgXjiwfZBDPcEGxbi53oK5PvLrYG6XOwibREU
dv3vuoiOpXBAsEFszYxS2qzVO/Xq2dqkSFrwsD6F6Cy5fhubw9JCieRQkp3EXkDx
cfJ6TLrqIvUJCqiOnKJEDb24dn8M1z+GSzNMjjtLoVvdQg/OFvgmg8NRZ17HpyjT
JgPt4ln6xHnqyg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:54:24 2025 by rpki-client