Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
File: aQomMkmEfPlzRHQiE2RPkpvqqZc.mft (raw, json)
Hash identifier: u+twf6ymtfG5jU5hYy83ijCiAQL2XEvaYFufNsbNVxA=
Subject key identifier: 0C:A6:C9:2A:22:7A:D2:3F:2F:18:3D:B3:20:6C:06:5E:1C:2A:00:BF
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Certificate issuer: /CN=690a263249847cf97344742213644f929beaa997
Certificate serial: 0194BBCDC884790EF097BBBCA02DBFFE6245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
Manifest number: 0689
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: DY21Bg3oUbtzm77wQkCwRHIkQQk.roa (hash: qZIMcnP47zIIcLpWesPleUJ2XdB9zCYyYyzYWyBj/nk=)
2: aQomMkmEfPlzRHQiE2RPkpvqqZc.crl (hash: 2ncg5glWCR7eRYaQzImdV6lGUfVCokbR3R3ULO6zJ8I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c8:84:79:0e:f0:97:bb:bc:a0:2d:bf:fe:62:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690a263249847cf97344742213644f929beaa997
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=0ca6c92a227ad23f2f183db3206c065e1c2a00bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6e:46:7e:a5:cf:67:2e:9b:61:1d:f7:10:6a:
03:ae:f0:07:c0:60:0c:7a:7d:86:f2:b9:19:d2:8c:
29:b7:a8:00:7c:45:50:f6:cd:41:d1:b4:a6:30:fe:
89:da:c5:5a:2e:60:07:38:fe:56:f1:7e:25:2d:08:
2f:41:f9:ff:48:7e:df:b9:13:f1:68:4a:3c:2e:a8:
f2:a2:ea:5a:bd:f5:6e:90:29:26:a5:50:bf:5c:1e:
d5:1a:4f:ae:51:c0:c9:40:bc:3f:b8:83:80:92:10:
55:da:a9:60:08:bd:08:9c:83:80:fc:65:7a:f1:4a:
3d:c6:7b:98:f0:d9:e6:21:dd:ef:1d:9d:72:02:2f:
02:36:5d:48:00:df:fd:95:18:b3:a6:f4:51:b9:25:
7c:b9:50:63:9a:a1:f9:18:18:5f:ad:09:55:69:af:
ab:3d:78:8e:ea:15:ea:34:87:34:36:e2:96:6b:98:
b5:ed:11:99:92:34:ff:cd:5c:02:38:02:b8:e9:f3:
85:e1:b7:0e:3c:a2:d0:7e:f1:23:ab:df:e9:24:f5:
ed:cf:ab:b9:8c:0f:14:4a:7e:50:f4:66:26:64:c6:
39:d8:0c:60:b3:bc:47:80:79:cd:c8:87:47:42:90:
11:0f:b0:54:c7:b6:fa:a7:9a:b5:80:a9:81:47:53:
ac:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A6:C9:2A:22:7A:D2:3F:2F:18:3D:B3:20:6C:06:5E:1C:2A:00:BF
X509v3 Authority Key Identifier:
keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ce:b2:e2:8b:1c:41:53:b6:ab:1a:5a:1f:0f:6d:9a:28:ee:
6b:39:e8:86:6f:5f:ea:9d:77:2d:43:ec:b1:f5:96:e9:20:86:
bf:15:1a:07:41:81:34:da:75:1c:c0:61:3f:b8:21:05:68:ea:
dc:d9:b5:85:74:ba:b4:4b:51:ff:f6:92:6e:0e:11:4a:8c:8d:
07:4f:71:23:92:e8:de:aa:5c:a2:f2:da:21:63:53:c9:d6:65:
fe:13:87:79:c2:41:5a:ae:72:ff:86:61:86:c4:81:b3:e6:9c:
fd:f3:d2:46:bb:f9:32:7e:58:d6:12:90:8b:8b:53:fa:4a:8b:
9b:dd:00:41:e9:5c:b4:91:67:d8:43:d8:ae:7d:69:48:bf:96:
30:bb:4b:1f:d8:52:53:3d:2d:5a:43:7d:aa:a6:e6:47:fc:64:
50:44:a4:07:61:fb:06:c8:a0:ba:11:66:98:7d:a5:f6:68:45:
95:f0:85:62:28:f3:04:61:83:10:32:76:6d:4c:8c:04:37:1a:
92:22:c5:76:80:bd:12:1a:e0:b0:2c:ad:8c:03:7e:17:e1:4b:
1d:80:42:97:53:bb:0f:13:5e:c5:14:12:a2:20:32:26:c3:9f:
91:6b:c9:1f:cb:5f:61:ae:84:5d:a1:47:dd:f3:ce:e6:02:7a:
84:24:b7:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zciEeQ7wl7u8oC2//mJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MGEyNjMyNDk4NDdjZjk3MzQ0NzQyMjEzNjQ0ZjkyOWJl
YWE5OTcwHhcNMjUwMTMxMTAwMDEyWhcNMjUwMjAxMTAwMDEyWjAzMTEwLwYDVQQD
EygwY2E2YzkyYTIyN2FkMjNmMmYxODNkYjMyMDZjMDY1ZTFjMmEwMGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW5GfqXPZy6bYR33EGoDrvAHwGAM
en2G8rkZ0owpt6gAfEVQ9s1B0bSmMP6J2sVaLmAHOP5W8X4lLQgvQfn/SH7fuRPx
aEo8LqjyoupavfVukCkmpVC/XB7VGk+uUcDJQLw/uIOAkhBV2qlgCL0InIOA/GV6
8Uo9xnuY8NnmId3vHZ1yAi8CNl1IAN/9lRizpvRRuSV8uVBjmqH5GBhfrQlVaa+r
PXiO6hXqNIc0NuKWa5i17RGZkjT/zVwCOAK46fOF4bcOPKLQfvEjq9/pJPXtz6u5
jA8USn5Q9GYmZMY52Axgs7xHgHnNyIdHQpARD7BUx7b6p5q1gKmBR1OswwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAymySoietI/Lxg9syBsBl4cKgC/MB8GA1UdIwQY
MBaAFGkKJjJJhHz5c0R0IhNkT5Kb6qmXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFvbU1rbUVmUGx6UkhRaUUyUlBrcHZxcVpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hNzZhODYtNzViMy00Y2VmLWEzNDAt
MzFiMmE2MDdiYTk3LzEvYVFvbU1rbUVmUGx6UkhRaUUyUlBrcHZxcVpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hNzZhODYtNzViMy00Y2VmLWEzNDAtMzFiMmE2MDdiYTk3
LzEvYVFvbU1rbUVmUGx6UkhRaUUyUlBrcHZxcVpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE86y4osc
QVO2qxpaHw9tmijuaznohm9f6p13LUPssfWW6SCGvxUaB0GBNNp1HMBhP7ghBWjq
3Nm1hXS6tEtR//aSbg4RSoyNB09xI5Lo3qpcovLaIWNTydZl/hOHecJBWq5y/4Zh
hsSBs+ac/fPSRrv5Mn5Y1hKQi4tT+kqLm90AQelctJFn2EPYrn1pSL+WMLtLH9hS
Uz0tWkN9qqbmR/xkUESkB2H7BsiguhFmmH2l9mhFlfCFYijzBGGDEDJ2bUyMBDca
kiLFdoC9EhrgsCytjAN+F+FLHYBCl1O7DxNexRQSoiAyJsOfkWvJH8tfYa6EXaFH
3fPO5gJ6hCS37g==
-----END CERTIFICATE-----
Generated at Thu May 1 07:33:00 2025 by rpki-client