Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
File: AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft (raw, json)
Hash identifier: Gga6nmWV2LxTd/udf7tMvulvCZEjEtdqVCM14Wj+Kvw=
Subject key identifier: EC:E1:0E:02:CD:50:CA:F8:88:DD:42:DE:95:E4:68:82:05:93:97:11
Authority key identifier: 03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
Certificate issuer: /CN=030b00e6074502e6538391feab18358281a3279b
Certificate serial: 0194BD85A2F78BA59569C1BE2E818266CBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
Manifest number: 03
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl (hash: 1Irqho5Ie/aDjiEqRTa3xtWrbNTQIx78poFeNG9TRp8=)
2: _x95g2yEdSVb-Lb5ljfHjKYUyw0.roa (hash: L85gnjbHLm0XHThSRWvyfg5dYAHvXuHbicBvmefIvAU=)
3: uFe0wHxAH2UJDFtywnXN56bE3x8.roa (hash: 9rxLZS+5H9kGmYpmtTMn6ZZUIBXYa1LvDlimXlk6PXU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a2:f7:8b:a5:95:69:c1:be:2e:81:82:66:cb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030b00e6074502e6538391feab18358281a3279b
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=ece10e02cd50caf888dd42de95e4688205939711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:88:38:2b:b5:bb:b2:2e:32:d6:9f:a3:4a:
9c:df:cc:08:34:fe:07:eb:b6:ed:c4:f8:04:86:2f:
dc:22:3c:88:69:58:86:b3:d8:30:54:ce:7f:96:8a:
16:58:6e:42:48:b3:b2:19:25:c8:2e:f9:ca:04:6e:
91:aa:0c:d0:1f:c1:21:05:e7:ba:74:1e:41:bf:c7:
f2:fc:d5:50:c5:a5:a8:1a:28:2e:0f:7b:63:68:2a:
ad:93:91:eb:4e:ea:f5:17:ee:7f:c8:65:e4:f3:ab:
aa:fd:fc:99:b6:f6:cf:46:62:13:3d:06:54:1c:e4:
bb:ee:15:14:6b:1d:54:b5:52:52:91:bf:45:b7:b0:
59:1a:6f:92:fe:3f:b6:53:9c:c6:f8:51:91:4b:1c:
2e:48:5c:20:ef:40:bb:33:f3:4c:a7:26:7b:59:a1:
b0:8e:9e:e1:72:a5:6f:f4:c4:b3:35:b9:42:6d:09:
04:fc:b3:1a:f3:ae:23:35:ce:80:2f:d2:18:f1:a4:
55:75:bf:5d:c6:b6:cc:5f:43:f5:81:cb:f5:d4:7e:
86:87:90:fa:6d:7e:8b:14:f3:95:bb:01:45:e8:65:
97:14:bf:d5:72:0d:4b:52:1e:ef:73:bc:d4:25:25:
93:da:23:03:23:37:01:dd:99:3b:18:42:6d:8b:13:
7b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E1:0E:02:CD:50:CA:F8:88:DD:42:DE:95:E4:68:82:05:93:97:11
X509v3 Authority Key Identifier:
keyid:03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:96:8a:00:90:a0:8f:d0:9e:bc:8a:4e:f0:a5:74:b1:f5:de:
b5:9c:a5:47:70:16:5b:c3:28:a3:59:44:2d:93:a3:02:7a:7f:
a6:80:80:8d:5d:51:56:01:9c:df:05:08:8f:7d:36:f5:af:10:
f9:9e:4d:11:ec:d6:04:30:8c:9a:f2:ca:44:d9:07:a3:e7:da:
ea:e3:27:b7:0a:20:ff:b3:e7:b7:50:84:b7:67:1e:7e:ed:32:
3f:8b:d6:98:33:7d:3a:2d:02:42:73:86:d2:7a:22:00:fe:e5:
6e:82:b1:8f:11:2c:38:33:35:f5:da:0a:d4:ac:b1:34:f5:c1:
93:27:44:d8:83:c1:34:39:46:d0:a4:0e:9d:77:a8:93:7e:16:
dd:28:8d:44:a0:f0:65:17:fe:ca:d5:7e:a2:c5:b2:a1:11:51:
3a:8b:42:02:25:69:bc:7a:2a:9e:2b:07:55:ae:b3:fa:60:60:
96:70:fa:51:f7:88:e6:94:99:a4:07:47:4b:37:d7:42:13:c8:
8b:74:31:6e:4d:e0:a3:1b:45:87:03:76:51:7c:d6:24:a4:70:
4b:b0:e9:08:ca:91:60:16:f7:e1:22:90:d8:ef:39:3d:8f:0c:
58:c8:10:d1:2f:8e:3a:72:e5:e0:5b:b6:27:d0:81:cb:23:1a:
7c:91:ca:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9haL3i6WVacG+LoGCZsvGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMGIwMGU2MDc0NTAyZTY1MzgzOTFmZWFiMTgzNTgyODFh
MzI3OWIwHhcNMjUwMTMxMTgwMDM5WhcNMjUwMjAxMTgwMDM5WjAzMTEwLwYDVQQD
EyhlY2UxMGUwMmNkNTBjYWY4ODhkZDQyZGU5NWU0Njg4MjA1OTM5NzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6aIOCu1u7IuMtafo0qc38wINP4H
67btxPgEhi/cIjyIaViGs9gwVM5/looWWG5CSLOyGSXILvnKBG6RqgzQH8EhBee6
dB5Bv8fy/NVQxaWoGiguD3tjaCqtk5HrTur1F+5/yGXk86uq/fyZtvbPRmITPQZU
HOS77hUUax1UtVJSkb9Ft7BZGm+S/j+2U5zG+FGRSxwuSFwg70C7M/NMpyZ7WaGw
jp7hcqVv9MSzNblCbQkE/LMa864jNc6AL9IY8aRVdb9dxrbMX0P1gcv11H6Gh5D6
bX6LFPOVuwFF6GWXFL/Vcg1LUh7vc7zUJSWT2iMDIzcB3Zk7GEJtixN7WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzhDgLNUMr4iN1C3pXkaIIFk5cRMB8GA1UdIwQY
MBaAFAMLAOYHRQLmU4OR/qsYNYKBoyebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jMjY0NTgtZmRhOC00ZjBhLTk1N2Et
Nzc1NjQzODU0NGNhLzEvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9jMjY0NTgtZmRhOC00ZjBhLTk1N2EtNzc1NjQzODU0NGNh
LzEvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5aKAJCg
j9CevIpO8KV0sfXetZylR3AWW8Moo1lELZOjAnp/poCAjV1RVgGc3wUIj3029a8Q
+Z5NEezWBDCMmvLKRNkHo+fa6uMntwog/7Pnt1CEt2cefu0yP4vWmDN9Oi0CQnOG
0noiAP7lboKxjxEsODM19doK1KyxNPXBkydE2IPBNDlG0KQOnXeok34W3SiNRKDw
ZRf+ytV+osWyoRFROotCAiVpvHoqnisHVa6z+mBglnD6UfeI5pSZpAdHSzfXQhPI
i3Qxbk3goxtFhwN2UXzWJKRwS7DpCMqRYBb34SKQ2O85PY8MWMgQ0S+OOnLl4Fu2
J9CByyMafJHKTQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:20 2025 by rpki-client