Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
File: AYODB_eazcWa1uuC6Miq76PYgok.mft (raw, json)
Hash identifier: Ddurw7KG7dtD4NTH4NfXDFdG8sYOJgdgOqAAnndkJ04=
Subject key identifier: 11:CC:55:D8:9B:17:6D:43:A2:36:DC:96:AB:FB:14:EC:3A:DC:74:3B
Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Certificate issuer: /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Certificate serial: 0194BC3C3519152869870BD9E98729857477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: AYODB_eazcWa1uuC6Miq76PYgok.crl (hash: CLpXLZVtXFfUhJq2G/2nLPf5XjbinS4P8C6xcMjQLWk=)
2: G-x9l4PGLNif47OW3NwBj1bjEFk.roa (hash: gkQrFC6ugAL0eKhNEMz9YjZEv73JxhI6D2mp/f+87Ho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:35:19:15:28:69:87:0b:d9:e9:87:29:85:74:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=11cc55d89b176d43a236dc96abfb14ec3adc743b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:70:4c:dc:a0:c1:40:b4:8f:18:46:fd:0d:
6f:d1:5c:5d:05:17:df:8e:56:96:e0:9c:b1:7b:b5:
10:65:81:7b:b2:78:57:8a:aa:09:eb:b6:b3:b9:11:
06:d5:3d:35:de:5f:01:93:cf:aa:ad:12:48:85:b5:
9f:65:26:c5:14:21:04:98:0b:89:9f:57:a4:1f:f8:
6f:3e:f9:53:17:11:1e:56:d6:cc:07:27:58:8e:d1:
7c:fe:57:d7:36:45:45:da:37:e9:86:59:44:e0:ff:
11:f5:86:1d:c2:e3:64:20:b4:4e:61:ca:39:3a:fa:
60:9d:54:48:1e:6f:73:6b:97:3d:e7:81:38:bb:f2:
18:d1:83:5a:38:d3:9d:3b:46:2e:1d:03:53:b7:d2:
0e:04:59:3f:b4:5e:bb:70:81:fb:52:1d:2e:80:b1:
1e:61:4e:2e:91:4b:98:41:0c:0b:e2:c5:47:22:b6:
6d:8d:2a:da:8f:14:1d:69:24:b6:a0:4b:32:5e:06:
ea:1a:15:ef:89:77:f4:10:f6:4e:11:a8:88:d9:15:
e8:8f:dc:5b:f2:1e:a0:f1:51:9b:e9:78:c1:ab:67:
42:36:3b:6b:3a:aa:41:ec:56:44:0f:14:4a:c2:0f:
6f:19:73:60:b6:8d:95:59:ca:4a:35:b5:b9:9e:2e:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CC:55:D8:9B:17:6D:43:A2:36:DC:96:AB:FB:14:EC:3A:DC:74:3B
X509v3 Authority Key Identifier:
keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:11:45:a4:a7:d3:3e:7b:85:ac:0a:81:88:0c:ab:a5:c3:9f:
fa:76:54:14:a6:6b:dc:02:38:a2:e1:76:5c:8f:c3:16:4b:4d:
df:24:b2:d6:f8:9d:d1:fc:ba:0b:bf:9a:97:58:82:78:02:49:
6b:73:a8:14:5f:70:82:10:9c:67:0e:60:8c:af:64:3c:9f:e2:
8c:f1:91:d3:31:46:0e:ba:6f:29:a9:57:27:e3:01:11:be:3a:
fb:d5:8f:47:e4:bd:ea:9c:8a:77:a7:37:02:a5:a7:78:4f:21:
30:66:2d:2d:83:76:96:19:e5:e9:58:13:63:22:3e:83:62:8a:
2b:d8:66:ca:91:19:63:f5:81:3d:96:c5:2d:b5:6e:49:d1:1e:
5d:bd:0f:d1:f1:45:e7:50:f3:4c:3b:3a:01:59:13:30:9d:6f:
a4:68:b4:70:6d:1f:e5:9b:54:f2:37:19:04:5c:3e:2c:b1:59:
a9:4f:16:c4:f1:8a:bb:34:f6:e4:5a:89:98:b4:38:49:ee:85:
80:9d:e3:ab:17:85:54:39:34:64:1e:38:23:d9:cc:04:0c:c7:
2f:05:0f:55:c6:11:b9:24:b0:07:e0:1b:37:46:5f:e3:5e:f1:
fb:7d:31:08:64:52:91:e9:25:2d:d4:6f:48:4e:11:19:eb:fd:
fd:df:5a:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDUZFShphwvZ6YcphXR3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxODM4MzA3Zjc5YWNkYzU5YWQ2ZWI4MmU4YzhhYWVmYTNk
ODgyODkwHhcNMjUwMTMxMTIwMDQ5WhcNMjUwMjAxMTIwMDQ5WjAzMTEwLwYDVQQD
EygxMWNjNTVkODliMTc2ZDQzYTIzNmRjOTZhYmZiMTRlYzNhZGM3NDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr9wTNygwUC0jxhG/Q1v0VxdBRff
jlaW4Jyxe7UQZYF7snhXiqoJ67azuREG1T013l8Bk8+qrRJIhbWfZSbFFCEEmAuJ
n1ekH/hvPvlTFxEeVtbMBydYjtF8/lfXNkVF2jfphllE4P8R9YYdwuNkILROYco5
OvpgnVRIHm9za5c954E4u/IY0YNaONOdO0YuHQNTt9IOBFk/tF67cIH7Uh0ugLEe
YU4ukUuYQQwL4sVHIrZtjSrajxQdaSS2oEsyXgbqGhXviXf0EPZOEaiI2RXoj9xb
8h6g8VGb6XjBq2dCNjtrOqpB7FZEDxRKwg9vGXNgto2VWcpKNbW5ni4D8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHMVdibF21Dojbclqv7FOw63HQ7MB8GA1UdIwQY
MBaAFAGDgwf3ms3FmtbrgujIqu+j2IKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85ZjYxYmUtOGMzMS00OWJhLWI0MjQt
Y2EzZDRhYWU2ZjA5LzEvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85ZjYxYmUtOGMzMS00OWJhLWI0MjQtY2EzZDRhYWU2ZjA5
LzEvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxxFFpKfT
PnuFrAqBiAyrpcOf+nZUFKZr3AI4ouF2XI/DFktN3ySy1vid0fy6C7+al1iCeAJJ
a3OoFF9wghCcZw5gjK9kPJ/ijPGR0zFGDrpvKalXJ+MBEb46+9WPR+S96pyKd6c3
AqWneE8hMGYtLYN2lhnl6VgTYyI+g2KKK9hmypEZY/WBPZbFLbVuSdEeXb0P0fFF
51DzTDs6AVkTMJ1vpGi0cG0f5ZtU8jcZBFw+LLFZqU8WxPGKuzT25FqJmLQ4Se6F
gJ3jqxeFVDk0ZB44I9nMBAzHLwUPVcYRuSSwB+AbN0Zf417x+30xCGRSkeklLdRv
SE4RGev9/d9a8w==
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:57:54 2025 by rpki-client