Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
File: 1AjPCbarAFupM7KnpKbSfqa7cso.mft (raw, json)
Hash identifier: RgT5zsSX50OtLksWzcdPf7AL87w5JxmXv07VMoiHAHE=
Subject key identifier: 3B:4A:D9:17:4F:9A:B1:06:1C:CC:78:6A:6D:E3:68:BC:6E:F4:F6:C8
Authority key identifier: D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
Certificate issuer: /CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Certificate serial: 0194BC3C77A9F987DDA828B0F8D65FF51750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
Manifest number: 0143
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: 1AjPCbarAFupM7KnpKbSfqa7cso.crl (hash: yb6CrOPXyXQDjh47k+g8DqBHeAhZYyDGlOJPoNfSLIg=)
2: mjk_9mBIX2K41ASneFahi5WxQms.roa (hash: qL7nGWS3Awht9PmP0vDzSTXhKhc/jIpjX536PZtB9fQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:77:a9:f9:87:dd:a8:28:b0:f8:d6:5f:f5:17:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=3b4ad9174f9ab1061ccc786a6de368bc6ef4f6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:fe:4c:93:95:4f:60:42:ca:f5:d9:82:2a:
4a:ea:d6:37:d9:29:50:b7:1e:32:92:5f:af:73:9a:
ce:47:e3:d0:24:9c:de:df:33:22:cb:58:68:cb:70:
73:ca:66:25:65:4a:d7:2f:c1:b5:0e:9c:86:d9:69:
2f:35:e4:93:70:43:c2:e3:2d:86:8c:ac:b7:4d:83:
b6:94:ff:b7:9a:e7:e3:01:78:e9:85:10:87:c4:d2:
b1:31:b6:64:7c:a2:5b:b4:62:36:45:d6:74:cc:9d:
b0:11:dd:12:4c:78:7d:b7:8d:99:b8:1f:f8:77:21:
ba:7c:79:91:24:13:06:a9:4d:b2:ca:cf:e4:eb:21:
0f:7f:f5:41:68:f9:38:3f:81:f9:94:fa:0f:9f:60:
6f:1a:1b:8c:53:4e:58:7d:15:f5:3e:59:19:2d:91:
57:08:d7:2c:c5:ce:7c:2f:0c:13:1e:19:68:aa:da:
9b:5e:69:0a:9f:99:e1:73:9e:07:07:3f:9e:1c:49:
0e:ab:f5:f7:4f:5a:d3:57:b2:32:52:89:e0:f5:08:
ea:b3:86:9c:dc:1f:43:2f:a2:c9:b5:b7:4b:d5:07:
70:8d:9c:3d:69:a7:58:0c:03:37:59:93:42:3a:e9:
b5:0f:a5:5c:57:eb:bf:72:dd:59:57:5d:1b:6b:1e:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4A:D9:17:4F:9A:B1:06:1C:CC:78:6A:6D:E3:68:BC:6E:F4:F6:C8
X509v3 Authority Key Identifier:
keyid:D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:74:e4:19:86:9b:e0:8c:f4:69:02:0e:67:eb:b8:8a:53:cb:
53:d0:99:c4:69:c7:18:66:16:37:35:91:48:1b:59:49:cd:c2:
6f:8f:d9:ca:7c:a8:ac:62:28:29:8b:8f:8a:66:63:a4:63:43:
72:33:3e:3c:4f:3a:27:05:b1:68:38:15:66:78:e2:9a:39:ad:
ff:5a:e7:21:4b:71:28:c8:0b:99:d1:31:70:56:7c:12:65:47:
91:5a:68:98:39:69:6c:ce:8f:21:8d:0b:eb:96:54:49:24:a2:
54:4e:42:22:44:62:b1:29:cc:d4:61:e7:6a:86:cf:97:34:cd:
a6:b0:02:f0:9b:04:a8:a8:8f:56:86:02:36:b1:24:00:de:7c:
05:c1:d2:ea:e2:e5:a0:12:9f:e9:ff:d4:32:ed:93:57:61:f4:
30:e9:25:05:ec:30:35:3a:ca:62:7b:e7:8f:05:eb:55:48:cb:
9f:68:1e:3e:99:38:97:a5:72:ed:e6:6a:6f:2c:71:42:ac:a5:
f1:40:1a:14:ba:19:c6:4a:f1:76:95:ab:6c:7b:41:73:9f:91:
f4:12:45:a5:a0:b5:8a:8e:8f:8a:4f:07:19:86:0b:a3:13:ca:
b7:64:6c:ae:8e:28:54:5c:d2:65:99:a0:7e:12:df:7e:f6:fe:
86:16:56:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PHep+YfdqCiw+NZf9RdQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MDhjZjA5YjZhYjAwNWJhOTMzYjJhN2E0YTZkMjdlYTZi
YjcyY2EwHhcNMjUwMTMxMTIwMTA2WhcNMjUwMjAxMTIwMTA2WjAzMTEwLwYDVQQD
EygzYjRhZDkxNzRmOWFiMTA2MWNjYzc4NmE2ZGUzNjhiYzZlZjRmNmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH7+TJOVT2BCyvXZgipK6tY32SlQ
tx4ykl+vc5rOR+PQJJze3zMiy1hoy3BzymYlZUrXL8G1DpyG2WkvNeSTcEPC4y2G
jKy3TYO2lP+3mufjAXjphRCHxNKxMbZkfKJbtGI2RdZ0zJ2wEd0STHh9t42ZuB/4
dyG6fHmRJBMGqU2yys/k6yEPf/VBaPk4P4H5lPoPn2BvGhuMU05YfRX1PlkZLZFX
CNcsxc58LwwTHhloqtqbXmkKn5nhc54HBz+eHEkOq/X3T1rTV7IyUong9Qjqs4ac
3B9DL6LJtbdL1QdwjZw9aadYDAM3WZNCOum1D6VcV+u/ct1ZV10bax6QJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtK2RdPmrEGHMx4am3jaLxu9PbIMB8GA1UdIwQY
MBaAFNQIzwm2qwBbqTOyp6Sm0n6mu3LKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUFqUENiYXJBRnVwTTdLbnBLYlNmcWE3Y3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hNmQxMjQtMDRlNi00ZGVmLWExNmIt
ZDY1MjM2ODI5OWQ1LzEvMUFqUENiYXJBRnVwTTdLbnBLYlNmcWE3Y3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9hNmQxMjQtMDRlNi00ZGVmLWExNmItZDY1MjM2ODI5OWQ1
LzEvMUFqUENiYXJBRnVwTTdLbnBLYlNmcWE3Y3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3TkGYab
4Iz0aQIOZ+u4ilPLU9CZxGnHGGYWNzWRSBtZSc3Cb4/ZynyorGIoKYuPimZjpGND
cjM+PE86JwWxaDgVZnjimjmt/1rnIUtxKMgLmdExcFZ8EmVHkVpomDlpbM6PIY0L
65ZUSSSiVE5CIkRisSnM1GHnaobPlzTNprAC8JsEqKiPVoYCNrEkAN58BcHS6uLl
oBKf6f/UMu2TV2H0MOklBewwNTrKYnvnjwXrVUjLn2gePpk4l6Vy7eZqbyxxQqyl
8UAaFLoZxkrxdpWrbHtBc5+R9BJFpaC1io6Pik8HGYYLoxPKt2Rsro4oVFzSZZmg
fhLffvb+hhZWUA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:36 2025 by rpki-client