Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: XyUoT39fGKoYg2NhPYzlyZV0AlZz0MHCM0PHth+8kLc=
Subject key identifier: D5:68:DA:46:E4:4C:41:B9:D9:E9:FD:29:23:D5:F4:1D:AE:FC:1C:38
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 0194BCE0735BE99BD651E676C7AA4E7CAC28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 0542
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: yOe9oNpC+xB7M4l3zO171qOIKX3t6F5PjGd3EAGmckE=)
2: h2bGxUxbqOMwKZqb7G6CRO2lZho.roa (hash: mynhqYVK2VXcY1dJrTVkYeBGm7TzlIqS2eWaSHlhFbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:73:5b:e9:9b:d6:51:e6:76:c7:aa:4e:7c:ac:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=d568da46e44c41b9d9e9fd2923d5f41daefc1c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:88:a9:5c:43:18:a2:54:05:cb:8b:58:7e:
74:f9:4c:d4:27:e0:48:ee:3e:1d:e4:71:a2:ca:02:
6f:e1:48:ab:e1:1d:03:c1:14:e9:e2:8e:4c:17:ef:
d3:ee:e6:07:d0:1b:32:db:02:8e:68:dd:00:52:fe:
65:3f:e8:ff:81:d4:89:18:7d:bf:4f:c6:b8:b1:94:
7d:6b:ea:64:e9:e4:a4:29:78:7a:9e:56:31:3b:f8:
c9:30:7b:41:32:8a:33:d7:c0:f1:6e:a7:39:04:d5:
7c:62:3d:ca:ca:8d:0c:d3:de:bd:1a:4a:15:c2:8c:
9c:0b:bb:ae:a2:fd:e8:98:6f:15:7b:04:bc:44:0a:
11:0b:1b:4b:ac:78:70:f7:39:58:67:e0:ce:1f:32:
7e:8c:f8:17:4a:8e:42:71:2a:25:21:fc:20:51:05:
ad:43:88:ef:3c:de:f6:47:cb:b4:12:75:09:b1:08:
17:5b:8a:5e:08:e9:1c:44:d9:92:c7:a4:e3:a0:d0:
15:2c:a3:2f:60:d2:cc:80:5a:58:b1:51:64:84:9f:
52:30:d6:5d:30:fa:1b:5e:f1:e4:b0:d3:94:67:d1:
b2:64:d6:0b:43:7e:8f:8b:41:0d:5b:9e:67:f3:9d:
65:c9:2d:18:d7:77:95:73:19:81:aa:d2:05:1c:a3:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:68:DA:46:E4:4C:41:B9:D9:E9:FD:29:23:D5:F4:1D:AE:FC:1C:38
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e3:2e:06:3d:a8:e3:ca:8d:00:d0:15:db:1d:fe:ae:17:d2:
36:15:62:f3:58:63:c8:2c:74:12:67:63:2b:b1:a6:bf:fa:c9:
2a:9a:76:41:b4:45:35:ff:e5:25:9b:96:da:88:8f:59:d8:e9:
58:85:e5:89:b4:0c:d7:13:1c:38:5c:bc:3a:8b:d0:d1:58:43:
1e:95:2a:8f:da:38:10:b5:30:8d:d2:e4:3a:53:e1:9e:36:a5:
da:f4:5a:ce:54:2b:7b:26:40:3b:e4:54:f4:87:91:35:9a:cf:
48:5e:1d:9d:77:9b:8d:5b:cd:92:91:78:6c:1a:aa:dd:0b:32:
08:19:66:d0:5a:5e:ed:a4:3a:b8:51:7d:78:be:e0:9e:25:ea:
dc:74:8c:a1:2c:48:58:7c:d8:c7:83:07:49:99:17:61:3a:45:
4b:bd:33:ea:14:d7:ad:78:c0:70:c8:bf:76:d4:89:02:3c:b6:
78:68:47:cf:95:ab:52:c8:4a:13:f8:a8:8c:56:a8:97:de:df:
c1:03:20:ae:7b:ca:c5:c2:ab:5c:e2:1e:e5:0a:6f:9d:9b:34:
16:8a:17:93:a8:cf:82:c2:73:94:e1:1f:b5:d6:ac:72:01:77:
1e:ea:93:17:e5:e7:37:d1:dc:fe:59:71:07:1b:48:fd:e2:1d:
cf:47:b2:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84HNb6ZvWUeZ2x6pOfKwoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzE2OGVjNTk3YTNhMzc3NDJjYjRkZWQ3ODM1NmYxNDU0
ZjJiYWQwHhcNMjUwMTMxMTUwMDEzWhcNMjUwMjAxMTUwMDEzWjAzMTEwLwYDVQQD
EyhkNTY4ZGE0NmU0NGM0MWI5ZDllOWZkMjkyM2Q1ZjQxZGFlZmMxYzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+OIqVxDGKJUBcuLWH50+UzUJ+BI
7j4d5HGiygJv4Uir4R0DwRTp4o5MF+/T7uYH0Bsy2wKOaN0AUv5lP+j/gdSJGH2/
T8a4sZR9a+pk6eSkKXh6nlYxO/jJMHtBMooz18Dxbqc5BNV8Yj3Kyo0M0969GkoV
woycC7uuov3omG8VewS8RAoRCxtLrHhw9zlYZ+DOHzJ+jPgXSo5CcSolIfwgUQWt
Q4jvPN72R8u0EnUJsQgXW4peCOkcRNmSx6TjoNAVLKMvYNLMgFpYsVFkhJ9SMNZd
MPobXvHksNOUZ9GyZNYLQ36Pi0ENW55n851lyS0Y13eVcxmBqtIFHKOPiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVo2kbkTEG52en9KSPV9B2u/Bw4MB8GA1UdIwQY
MBaAFALBaOxZejo3dCy03teDVvFFTyutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDIt
NjFkNTc1MjQxYzFmLzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDItNjFkNTc1MjQxYzFm
LzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+MuBj2o
48qNANAV2x3+rhfSNhVi81hjyCx0EmdjK7Gmv/rJKpp2QbRFNf/lJZuW2oiPWdjp
WIXlibQM1xMcOFy8OovQ0VhDHpUqj9o4ELUwjdLkOlPhnjal2vRazlQreyZAO+RU
9IeRNZrPSF4dnXebjVvNkpF4bBqq3QsyCBlm0Fpe7aQ6uFF9eL7gniXq3HSMoSxI
WHzYx4MHSZkXYTpFS70z6hTXrXjAcMi/dtSJAjy2eGhHz5WrUshKE/iojFaol97f
wQMgrnvKxcKrXOIe5QpvnZs0FooXk6jPgsJzlOEftdascgF3HuqTF+XnN9Hc/llx
BxtI/eIdz0eylQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:10 2025 by rpki-client