Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
File: aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json)
Hash identifier: C/Yza27cbPNbfJUmtX41mMP0XRfmylE2mZWlfYmgv6A=
Subject key identifier: E2:C7:98:C5:6E:AF:D0:E8:1E:7B:64:1D:24:38:BA:AC:C6:62:29:FF
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 0194BD17801695F39ED9CD4014E537CA3C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
Manifest number: 0897
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: 7+XKzVdTvDvoaBPlNSTSravmVWZwvXaLFf3VhgZv0+Y=)
2: sO327XoAur1DplfvgQUPrjYRerA.roa (hash: Y49ly/oM+VJ0V39d5VwjbL8ksFq63YJHHzGwktv4Jrw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:80:16:95:f3:9e:d9:cd:40:14:e5:37:ca:3c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=e2c798c56eafd0e81e7b641d2438baacc66229ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:40:44:6f:85:21:f3:49:00:b8:2f:81:7a:
0f:0f:25:11:8e:a4:5d:a1:92:9f:31:66:8d:44:1c:
88:b8:09:4c:21:d8:cf:6e:5b:04:6f:10:cd:62:a5:
16:7c:c1:f7:3e:8c:05:67:1d:e9:e2:af:05:db:f0:
39:10:2e:60:4d:c5:95:d5:76:e1:7f:d0:1e:f9:a2:
bd:19:39:dd:16:d7:ce:bb:c8:99:54:32:bf:e4:2b:
54:48:df:41:60:ab:2b:0c:dd:6c:d0:be:55:60:70:
21:33:4c:f5:cb:82:6e:40:9a:d4:c9:4c:72:be:25:
a1:fb:33:75:0e:1c:60:84:b4:f2:d0:3c:15:66:6f:
3e:78:5d:1d:f6:e9:67:11:31:70:d2:78:4e:45:e6:
f7:d1:33:e0:54:f3:de:de:07:c7:25:b0:81:b1:27:
71:6c:00:85:ec:bc:14:e5:c4:01:9c:c2:93:db:09:
ef:b2:dd:98:d3:32:c6:0f:ee:55:c8:1c:8a:c9:c8:
47:dc:28:c3:f7:a0:9e:34:c5:1a:eb:bb:e2:0e:93:
5a:94:ed:81:cc:01:ea:db:09:ec:b1:1c:b2:b2:81:
55:1b:a8:59:ee:e7:ad:d8:9c:63:e4:3f:3a:33:80:
20:49:89:39:b3:04:2c:4a:32:00:73:57:82:c0:0b:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C7:98:C5:6E:AF:D0:E8:1E:7B:64:1D:24:38:BA:AC:C6:62:29:FF
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:30:90:69:0c:9b:3b:f7:a7:12:3e:ed:35:9d:92:38:13:6a:
6a:3e:16:af:db:de:63:b3:8e:c5:34:07:8e:ea:39:b6:ed:38:
90:74:05:d2:cc:14:10:88:ce:0a:98:55:a7:44:f1:64:ce:0f:
d1:89:8e:e0:14:19:e8:5a:c0:16:3a:40:83:d8:91:b7:96:e5:
d9:6b:8e:a2:2a:2c:08:96:29:64:d7:b5:12:12:6c:2b:8e:ef:
7c:f2:30:54:3d:4e:a9:ec:d8:0e:74:49:11:66:d9:90:6d:7a:
30:03:e0:71:a7:86:55:9d:fb:89:6e:f6:02:cd:e7:19:25:8d:
91:9e:f2:ad:7b:64:24:59:b6:f7:60:3f:58:07:9d:c7:5e:8e:
c1:01:68:48:5e:80:5a:cc:54:d7:fc:fb:45:54:12:f5:ec:5d:
ef:b0:b6:a3:70:50:81:a9:f2:c2:9a:72:27:88:ec:d0:0a:a7:
4b:18:78:9e:84:a9:1b:9b:3f:07:5d:e8:bb:33:a1:6f:96:17:
f2:46:89:a9:e6:c1:4a:66:21:2f:6c:46:2f:c7:49:81:03:de:
71:bd:6d:de:49:cd:47:1e:e2:65:8c:44:24:ba:46:e3:54:69:
c7:ce:3a:ee:4c:47:35:14:1b:57:2f:56:a5:a0:01:8e:cb:8b:
b8:36:bb:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F4AWlfOe2c1AFOU3yjxTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjU5NmIzM2I0OGMyOTM1ZGQxMjlmYWM2ZTYxZGJjMDA4
MTkzZmYwHhcNMjUwMTMxMTYwMDIxWhcNMjUwMjAxMTYwMDIxWjAzMTEwLwYDVQQD
EyhlMmM3OThjNTZlYWZkMGU4MWU3YjY0MWQyNDM4YmFhY2M2NjIyOWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxANARG+FIfNJALgvgXoPDyURjqRd
oZKfMWaNRByIuAlMIdjPblsEbxDNYqUWfMH3PowFZx3p4q8F2/A5EC5gTcWV1Xbh
f9Ae+aK9GTndFtfOu8iZVDK/5CtUSN9BYKsrDN1s0L5VYHAhM0z1y4JuQJrUyUxy
viWh+zN1DhxghLTy0DwVZm8+eF0d9ulnETFw0nhOReb30TPgVPPe3gfHJbCBsSdx
bACF7LwU5cQBnMKT2wnvst2Y0zLGD+5VyByKychH3CjD96CeNMUa67viDpNalO2B
zAHq2wnssRyysoFVG6hZ7uet2Jxj5D86M4AgSYk5swQsSjIAc1eCwAsSVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLHmMVur9DoHntkHSQ4uqzGYin/MB8GA1UdIwQY
MBaAFGhllrM7SMKTXdEp+sbmHbwAgZP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jMDY5ZjEtOWY4Mi00ZDVhLTg2MzEt
NDUxY2RhMDc3ZDg2LzEvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9jMDY5ZjEtOWY4Mi00ZDVhLTg2MzEtNDUxY2RhMDc3ZDg2
LzEvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDCQaQyb
O/enEj7tNZ2SOBNqaj4Wr9veY7OOxTQHjuo5tu04kHQF0swUEIjOCphVp0TxZM4P
0YmO4BQZ6FrAFjpAg9iRt5bl2WuOoiosCJYpZNe1EhJsK47vfPIwVD1OqezYDnRJ
EWbZkG16MAPgcaeGVZ37iW72As3nGSWNkZ7yrXtkJFm292A/WAedx16OwQFoSF6A
WsxU1/z7RVQS9exd77C2o3BQganywppyJ4js0AqnSxh4noSpG5s/B13ouzOhb5YX
8kaJqebBSmYhL2xGL8dJgQPecb1t3knNRx7iZYxEJLpG41Rpx8467kxHNRQbVy9W
paABjsuLuDa7UA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:29:09 2025 by rpki-client