Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json)
Hash identifier: wT/9FW7ffcoLdVKm2OzldHKi8ob2UrdT79R1+o7R+CY=
Subject key identifier: 54:D7:69:A4:DF:B0:22:63:34:5B:A0:E6:46:49:39:A5:6B:32:02:DB
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 0194BC72F4750DC17E858FE7ED9847FFBA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
Manifest number: 0EC0
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: 2mYmMGy7Ti_KyOuLpac8P0aJo-o.roa (hash: 7Oo3zdyOE/QV+f77eDuuxUjf5TpkVbKXCVJzZ0cucSE=)
2: 49B0SV3aq_qlfvTwlp8UE5CobPo.roa (hash: yMZJeYZiW5dafRmL5wUYONlnojOdeuMxDbGu8bc7GFw=)
3: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: gMofEtuUcggKyG3TOyZ+LB8KAt9J2pWZ17Xbu+RGXhc=)
4: DIInnuZdiy-zCSCwskLDS0wKfgk.roa (hash: /2yH/VB8ROD8Ru24wKvehpojDCx4Z8f1crW4IuS7dHk=)
5: GW6-Jvlwjtx3rnuekpEEOJDcDfQ.roa (hash: 4PchxaO97M5ALVklaE9pgrQ30DiguvYbt4ODi/Jdq5o=)
6: P3XxS3_mq-k03JC18lyjAECzFgE.roa (hash: Z7XywYWvyl6XIwPp86R1p+0qf8cnFqM/awHO6MAnwM0=)
7: SAV39gTAMXrfyUL8wQWnwMuliLE.roa (hash: P5PXGe69sOa6Yl2Oh8kGnbZiJAWAu2Hk26Pmc66I7dA=)
8: U6PZiMPGFi59UQPbQvpJ5OeISTQ.roa (hash: gM+BMcTeRgWeVB1ILtIfWaNCb7+/7Q9sOp/rbFUSzM8=)
9: bqT0YeAhtl8HXgKWXTHsXvzrmxM.roa (hash: MeQQwtYVritPs/rwvak/6/BqNGkePOEhbf9TfPte6Fc=)
10: eA3XvUzA8rU0zk1uxW-x6eqZwV8.roa (hash: XXNn6NHlNjF+Tkj5FxN4rNYejajXM81qbW7yrvpO2f4=)
11: nkN8ltJzBELoYpBm0phb1xL0AEc.roa (hash: UJR4wQ0MJo3ttmH5k9UEjPDRknm3NvKoTS2VXDv1/GA=)
12: t2KUlecrJopo3Q18DTABuP6MxmI.roa (hash: byq3cHtv4RKgw4jIix6/FrBFhnRCLilCQfHQ7NO2BVY=)
13: yF4FG_fgk-pORU47r0Q89C6ZF8w.roa (hash: 5EbV5DER828x4O3YgC/wPMkGoAgZzbNKY8THMe86bNU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f4:75:0d:c1:7e:85:8f:e7:ed:98:47:ff:ba:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=54d769a4dfb02263345ba0e6464939a56b3202db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:b3:3e:0c:d2:3e:ad:a3:24:a4:0f:8b:d1:
2a:eb:de:3a:6d:0c:e1:22:b1:f7:81:c5:b1:e7:c2:
b9:2f:1a:a8:6a:86:e2:5d:d6:a9:5a:b2:b7:df:ea:
36:90:7b:30:a7:76:1e:d2:6e:27:d5:a2:62:75:12:
ec:73:7e:09:6d:2c:b4:22:02:de:2c:7c:c6:36:02:
b3:61:0e:63:c8:b6:cd:21:93:47:06:c5:34:ab:59:
e4:6e:4a:cd:ea:b3:26:a8:53:3a:fa:87:37:a6:53:
a0:3b:4a:b7:1d:d8:54:bb:34:61:63:b2:d7:35:24:
f9:74:e4:9f:54:f2:a0:4e:c4:4d:1c:a3:45:d5:54:
40:24:1a:ff:19:6f:cf:05:b3:e6:16:fa:bc:b5:9d:
d1:0b:d7:5b:0f:b0:6a:55:36:42:a1:72:dc:92:7f:
8c:b6:fd:43:50:9f:91:86:8d:4d:9c:28:c9:cc:bf:
90:ee:3d:d4:ee:60:eb:0e:1d:96:ba:6e:8a:79:9a:
57:6f:b3:54:0a:74:79:ad:f7:10:9e:86:b4:70:01:
a4:eb:12:15:52:32:ad:5d:99:3d:a7:8e:84:b9:f7:
52:a2:8b:2e:49:1b:c7:a1:1f:46:29:66:22:25:da:
a0:e2:df:7c:1d:92:e1:32:e2:d7:f5:d7:50:a7:8a:
6f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D7:69:A4:DF:B0:22:63:34:5B:A0:E6:46:49:39:A5:6B:32:02:DB
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:84:4e:e0:a9:c8:61:b2:e4:3d:5e:bb:2c:9b:f5:fd:07:6e:
c5:9d:e6:80:14:60:32:b8:65:45:fb:1c:16:5f:b0:c0:4a:72:
18:9d:82:52:4b:e5:6e:c1:66:85:c0:30:a6:1d:5f:41:3d:27:
5e:2b:c3:04:9a:d9:fd:ec:4c:47:c7:d1:8e:26:ef:00:19:20:
b4:c4:e9:6a:9d:ac:14:b6:a6:d5:ab:af:c2:e4:a1:03:9a:d6:
a1:f0:0c:c4:00:c4:fc:29:a1:5f:cd:93:60:26:fc:32:47:c9:
14:4b:41:f4:01:9f:ad:9d:60:2a:2c:a2:99:cf:4f:03:d4:17:
ae:4f:bb:a3:68:c3:57:15:05:39:30:b8:f9:70:d6:b8:b6:60:
c6:40:ce:75:1e:c0:73:7b:e8:d3:37:aa:7f:de:35:6e:78:4e:
d0:b3:e3:f3:da:14:26:ec:60:91:6d:51:85:86:4e:2b:44:bb:
61:55:23:2f:c4:c9:e0:f5:81:84:6c:92:10:7c:b0:ed:05:eb:
6b:5c:81:55:71:50:f8:46:8a:e2:37:da:9e:7f:75:3c:1d:ce:
40:c3:c6:ec:4d:63:c8:da:2e:81:e1:ee:0f:a0:d8:04:9b:ea:
25:b4:03:6a:2f:b8:9b:44:b0:db:40:68:90:ff:8d:84:0a:c0:
35:8d:1a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:12:54 2025 by rpki-client