Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
File: AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft (raw, json)
Hash identifier: MlVeno+eOsXDXngLjt+3JCCHkTwHuIjAnfE4IDLRPMU=
Subject key identifier: 26:AF:E0:65:F1:5C:4C:8D:BD:E8:34:0C:48:6E:3E:33:CB:0D:1F:5C
Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
Certificate issuer: /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Certificate serial: 0194BCA98F861ABD5D5B2B27432E47C862B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
Manifest number: 13FB
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl (hash: FVJ5L/WpCqrvtdK8qTvLHYFptZFsh5AWvcUgxkDjcQ4=)
2: FGVVapfPvK0QzFf1pALkp5bEruw.roa (hash: TSwtNe6AniR+9RFExziwrrS0q9Xsbcr++0YQr2+oyJQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8f:86:1a:bd:5d:5b:2b:27:43:2e:47:c8:62:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=26afe065f15c4c8dbde8340c486e3e33cb0d1f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:0a:c1:37:42:e9:1e:96:20:e2:d0:bb:21:
5f:c4:72:07:26:61:6a:bc:0a:b3:f4:53:0c:87:24:
47:86:ca:36:10:02:1b:3b:90:a3:df:08:38:81:eb:
9a:9e:72:2a:e8:33:39:55:f1:55:56:ce:b0:4a:e3:
5e:86:c8:ab:b3:fb:a3:29:d3:df:2a:5f:da:b5:0b:
08:83:ad:86:ac:26:93:88:9b:82:9a:19:74:e1:9e:
d0:e8:c5:6b:ad:89:15:84:f9:fd:7b:f5:e7:e7:b4:
04:e3:e9:6e:6a:2f:42:5c:06:84:8a:9d:e2:b6:bd:
1d:01:70:84:ef:2f:af:79:ca:79:21:1d:8c:ea:e1:
f3:42:d2:84:6f:40:09:e3:18:24:4c:28:ba:f0:40:
3d:02:a5:c9:8a:0b:f6:f9:06:d3:a5:bd:e9:58:cd:
96:b0:7c:73:76:be:7c:11:3f:f8:af:7c:cb:c1:6f:
83:5f:fa:57:24:0e:e2:04:5c:c0:02:f5:3c:bd:ef:
61:5b:34:68:b2:08:1a:22:99:af:c9:93:d1:f2:23:
3d:ae:6b:7d:33:cb:76:bf:a3:8e:a1:ca:c5:a3:f9:
b6:9f:55:37:c7:8f:cb:b4:21:c5:22:51:32:c5:20:
72:f9:83:52:63:57:9c:7c:73:c9:70:46:1b:1b:92:
73:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AF:E0:65:F1:5C:4C:8D:BD:E8:34:0C:48:6E:3E:33:CB:0D:1F:5C
X509v3 Authority Key Identifier:
keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0f:dd:05:cb:80:7c:a9:ad:9b:4e:36:8a:6b:73:49:cd:fa:
9b:d6:e6:65:bb:6b:e2:13:68:65:cb:dd:12:61:eb:a8:59:c5:
c0:8e:bf:15:a9:63:07:74:ab:8f:b1:72:6c:02:c0:25:ac:b1:
7d:f8:3a:1e:ac:37:02:c8:d8:36:66:ed:eb:00:8e:2a:b7:43:
c0:32:3a:32:9c:57:51:cb:6f:cc:92:6c:2d:fd:b0:3d:67:78:
42:c2:8a:30:3d:2b:80:65:9a:67:f9:69:7e:5b:a8:ce:ad:71:
66:fe:23:84:bf:b9:b1:86:77:37:43:b7:9b:40:4c:70:e6:90:
d6:71:5f:32:6b:f7:b6:92:99:ea:b7:d6:16:c6:c1:43:c4:3b:
ac:4e:49:2f:ef:e9:e0:f4:3a:fb:73:35:90:05:23:4a:c5:1e:
64:14:87:24:16:2c:23:c5:4d:07:3b:71:85:a4:04:8b:5c:3e:
43:60:04:0b:70:7a:a9:8c:aa:04:92:e8:c6:d4:d8:d4:db:0e:
71:02:5a:42:85:73:93:8f:61:a8:4d:4a:ce:fd:04:2e:7b:4a:
34:ff:53:21:ed:c4:24:67:c2:80:6a:93:47:55:a9:50:32:e0:
9c:66:70:72:ce:27:b4:54:6d:10:b7:f4:22:6f:af:a4:f4:13:
14:e5:d8:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qY+GGr1dWysnQy5HyGK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMmZhNmUxOTA1NjgzODkwNWJjMzJiNTNhYjBkMTA0N2Q3
OGU0ZDQwHhcNMjUwMTMxMTQwMDE2WhcNMjUwMjAxMTQwMDE2WjAzMTEwLwYDVQQD
EygyNmFmZTA2NWYxNWM0YzhkYmRlODM0MGM0ODZlM2UzM2NiMGQxZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RYKwTdC6R6WIOLQuyFfxHIHJmFq
vAqz9FMMhyRHhso2EAIbO5Cj3wg4geuannIq6DM5VfFVVs6wSuNehsirs/ujKdPf
Kl/atQsIg62GrCaTiJuCmhl04Z7Q6MVrrYkVhPn9e/Xn57QE4+luai9CXAaEip3i
tr0dAXCE7y+vecp5IR2M6uHzQtKEb0AJ4xgkTCi68EA9AqXJigv2+QbTpb3pWM2W
sHxzdr58ET/4r3zLwW+DX/pXJA7iBFzAAvU8ve9hWzRosggaIpmvyZPR8iM9rmt9
M8t2v6OOocrFo/m2n1U3x4/LtCHFIlEyxSBy+YNSY1ecfHPJcEYbG5JzUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCav4GXxXEyNveg0DEhuPjPLDR9cMB8GA1UdIwQY
MBaAFAAvpuGQVoOJBbwytTqw0QR9eOTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84NjZiNmItZjU2Yy00YTJmLTkwMmQt
ZmJjMzZlNDM0OGY1LzEvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny84NjZiNmItZjU2Yy00YTJmLTkwMmQtZmJjMzZlNDM0OGY1
LzEvQUMtbTRaQldnNGtGdkRLMU9yRFJCSDE0NU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAw/dBcuA
fKmtm042imtzSc36m9bmZbtr4hNoZcvdEmHrqFnFwI6/FaljB3Srj7FybALAJayx
ffg6Hqw3AsjYNmbt6wCOKrdDwDI6MpxXUctvzJJsLf2wPWd4QsKKMD0rgGWaZ/lp
fluozq1xZv4jhL+5sYZ3N0O3m0BMcOaQ1nFfMmv3tpKZ6rfWFsbBQ8Q7rE5JL+/p
4PQ6+3M1kAUjSsUeZBSHJBYsI8VNBztxhaQEi1w+Q2AEC3B6qYyqBJLoxtTY1NsO
cQJaQoVzk49hqE1Kzv0ELntKNP9TIe3EJGfCgGqTR1WpUDLgnGZwcs4ntFRtELf0
Im+vpPQTFOXYDg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:01 2025 by rpki-client