Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier: Ni5jr/JUXwpvFP+v/y1/rLe/4ctRdFFQaYIm37OtsMQ=
Subject key identifier: 07:61:1E:00:9C:60:59:1E:C5:FB:F0:60:92:63:82:DB:EB:42:04:8F
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 0194BC730D4F5BD4B820ADE4F6C640B175A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number: 0216
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: KzlJt5DgmKDzkMFy8W9SM7YYwdm+KTjxmobEq3s7VCs=)
2: UyMSzhYCoyIv-Z-RWQ0FyyqBdmg.roa (hash: 2A2ajEPDxijC/XTi8wtmJY4/n4ZoZiwiXE/zRByiGqY=)
3: _G4BPEj7ANS0vazxrz5vo4pF7D0.roa (hash: xO167vhfgz0I5ajGU1YeyzUid/SyKj87Sz3pu5PRJWo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0d:4f:5b:d4:b8:20:ad:e4:f6:c6:40:b1:75:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=07611e009c60591ec5fbf060926382dbeb42048f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1f:14:dd:a4:0e:f8:b4:35:7c:29:2a:32:06:
d7:72:f7:84:7a:e7:ee:ea:36:cc:02:37:42:50:f0:
6e:4c:fe:6a:6e:7c:61:b2:43:f8:0b:d6:e0:36:fa:
9e:0c:2b:81:92:ee:ad:d0:90:5e:50:27:a7:70:f9:
d9:20:2e:0d:a3:6b:99:87:9e:f3:3c:3d:42:a8:fc:
28:7b:22:54:39:31:f9:8f:f7:b7:eb:df:e3:0c:f9:
e4:16:51:c8:f3:cc:e5:87:a9:f3:ca:ed:b2:0a:02:
e6:88:4b:64:93:47:78:e1:ee:5b:1e:c9:97:46:f5:
09:d8:d5:2f:82:e3:04:e4:cc:50:5c:cc:34:08:70:
5f:c0:3c:50:cf:db:f8:54:e6:34:84:c4:33:6d:1e:
2a:1b:47:db:ae:52:da:d2:10:f3:ba:79:58:ff:53:
75:8a:63:3f:b9:16:7b:39:63:60:d9:67:66:91:73:
fb:35:32:6d:fc:6d:06:3c:e6:33:f8:ec:8e:2f:5b:
01:9b:98:6f:fa:26:8c:0d:ea:f9:63:71:70:55:5e:
0a:0e:e2:ec:56:b9:a9:fe:41:9c:f6:86:8f:c7:7f:
e5:93:c4:93:0f:5e:83:17:ab:f7:d0:8a:86:27:d9:
2b:e4:15:f4:5d:70:a5:62:5a:9c:fb:0d:7a:25:78:
f9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:61:1E:00:9C:60:59:1E:C5:FB:F0:60:92:63:82:DB:EB:42:04:8F
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:42:53:f3:35:84:d2:a8:6e:c5:8d:02:5b:7b:71:31:92:87:
8c:7a:31:97:b2:ef:06:d0:27:0f:d9:b4:9e:00:54:bf:69:17:
3f:82:04:2a:0f:9f:d2:52:e0:09:69:ef:f3:3e:4b:4d:05:5c:
1c:44:0d:81:33:d3:64:7e:c9:81:a8:cc:fb:56:94:03:23:54:
69:0f:ee:3b:bb:18:bc:1d:37:62:58:02:aa:09:01:76:fb:ed:
bb:c3:00:e9:f3:1f:af:00:57:9c:ea:d9:75:d6:a1:82:94:7d:
b7:d8:62:af:87:7b:50:39:8c:09:ad:ce:d2:16:09:2b:af:66:
8f:d9:bf:8d:10:98:4f:4a:cd:7c:a4:3f:72:cf:99:b8:80:65:
29:62:6e:6e:91:9c:c1:c0:64:1a:d4:ed:c6:f7:0b:7f:48:7c:
00:25:3f:cf:ee:2c:36:03:b2:30:00:eb:c1:23:c5:0c:3d:39:
f3:49:2c:60:b3:7c:fd:67:9c:20:9f:68:c8:f9:42:96:a1:ae:
26:c4:a9:50:05:e2:98:e0:39:9f:38:27:91:19:41:f0:5e:12:
90:a4:d7:40:d5:43:dd:82:84:c4:24:75:a9:2c:e8:a2:c2:82:
cd:46:78:38:94:f3:bc:0c:06:25:9a:db:93:3a:05:ac:bd:06:
ee:2d:c4:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cw1PW9S4IK3k9sZAsXWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMzY0ZmNlZGQ2OTEzNTc3MzNjZDVjY2Q3MDI5ZGI4ZTYx
ZDFlM2EwHhcNMjUwMTMxMTMwMDQ0WhcNMjUwMjAxMTMwMDQ0WjAzMTEwLwYDVQQD
EygwNzYxMWUwMDljNjA1OTFlYzVmYmYwNjA5MjYzODJkYmViNDIwNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h8U3aQO+LQ1fCkqMgbXcveEeufu
6jbMAjdCUPBuTP5qbnxhskP4C9bgNvqeDCuBku6t0JBeUCencPnZIC4No2uZh57z
PD1CqPwoeyJUOTH5j/e369/jDPnkFlHI88zlh6nzyu2yCgLmiEtkk0d44e5bHsmX
RvUJ2NUvguME5MxQXMw0CHBfwDxQz9v4VOY0hMQzbR4qG0fbrlLa0hDzunlY/1N1
imM/uRZ7OWNg2WdmkXP7NTJt/G0GPOYz+OyOL1sBm5hv+iaMDer5Y3FwVV4KDuLs
Vrmp/kGc9oaPx3/lk8STD16DF6v30IqGJ9kr5BX0XXClYlqc+w16JXj5/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdhHgCcYFkexfvwYJJjgtvrQgSPMB8GA1UdIwQY
MBaAFAM2T87daRNXczzVzNcCnbjmHR46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEt
YWJmMGI1OTQ2NDZmLzEvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEtYWJmMGI1OTQ2NDZm
LzEvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUJT8zWE
0qhuxY0CW3txMZKHjHoxl7LvBtAnD9m0ngBUv2kXP4IEKg+f0lLgCWnv8z5LTQVc
HEQNgTPTZH7JgajM+1aUAyNUaQ/uO7sYvB03YlgCqgkBdvvtu8MA6fMfrwBXnOrZ
ddahgpR9t9hir4d7UDmMCa3O0hYJK69mj9m/jRCYT0rNfKQ/cs+ZuIBlKWJubpGc
wcBkGtTtxvcLf0h8ACU/z+4sNgOyMADrwSPFDD0580ksYLN8/WecIJ9oyPlClqGu
JsSpUAXimOA5nzgnkRlB8F4SkKTXQNVD3YKExCR1qSzoosKCzUZ4OJTzvAwGJZrb
kzoFrL0G7i3EWw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:05:49 2025 by rpki-client