Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
File: aQetffrtuWAyDtF0BxUki4lasIQ.mft (raw, json)
Hash identifier: rEhGsvMZroZG0NxWTLcfi8I7BaHPCoZtn/BtN48YDxk=
Subject key identifier: 96:4C:5D:C4:AC:65:BC:39:E3:66:8E:D1:9B:E5:A2:A1:E5:D8:DE:D4
Authority key identifier: 69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
Certificate issuer: /CN=6907ad7dfaedb960320ed1740715248b895ab084
Certificate serial: 0194BC3C785A4DE82378700C18482327DD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
Manifest number: 02AC
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: aQetffrtuWAyDtF0BxUki4lasIQ.crl (hash: XV1kEzjnY9M7o/tQQ0Vti6nOph1O7j1S1MiEokUq1B4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:78:5a:4d:e8:23:78:70:0c:18:48:23:27:dd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6907ad7dfaedb960320ed1740715248b895ab084
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=964c5dc4ac65bc39e3668ed19be5a2a1e5d8ded4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:4c:a7:ed:4f:b2:17:24:de:6d:f2:09:a6:
d1:3c:92:5e:b9:2c:6f:fc:d4:6a:68:d8:c9:a8:f4:
e1:cb:45:cd:4d:30:d6:19:b7:30:69:af:92:f0:de:
c3:d5:e2:c0:5f:19:d5:c9:c1:15:10:e5:6c:d6:ad:
4d:91:ca:f3:b4:6d:55:29:2f:b2:18:16:05:75:ca:
85:e2:ec:b0:8d:f4:8b:a6:1c:89:75:1a:b8:59:1a:
ff:0f:71:12:fa:11:5e:f4:3b:08:31:5f:d6:19:b3:
99:3c:70:42:d9:ab:f8:9d:99:ee:e9:4b:36:38:b7:
af:36:1c:63:69:13:78:8e:dc:74:13:a3:8f:c0:7a:
02:60:c5:a4:62:8a:fc:bc:11:88:28:39:00:19:6c:
5c:4b:85:8f:1a:af:c7:f2:d2:68:db:05:6f:b6:58:
14:fe:50:be:a9:b8:55:18:51:d9:10:a0:71:b6:34:
ff:f7:37:e8:e0:d9:1d:d0:db:07:40:7a:dc:e9:81:
57:71:16:37:a3:e9:ae:bc:71:80:ff:fe:f0:68:07:
b3:9a:2e:31:f6:ea:1d:58:c5:4a:59:4e:73:3e:dd:
6c:00:a0:7b:a1:03:32:1e:c7:24:ae:de:c3:a6:a1:
26:dc:9a:f9:f9:bc:5c:e1:01:80:cd:0c:f0:7b:23:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4C:5D:C4:AC:65:BC:39:E3:66:8E:D1:9B:E5:A2:A1:E5:D8:DE:D4
X509v3 Authority Key Identifier:
keyid:69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e1:37:4b:71:ee:65:5c:a1:0a:64:1b:19:d3:c3:a8:ee:65:
01:6a:27:37:aa:8e:4f:dc:ce:36:4d:ce:19:9a:db:54:c6:5e:
02:c6:81:1c:94:ba:97:49:54:f6:5b:8e:79:9d:14:2f:9a:98:
b7:a2:e2:3e:6b:00:99:d1:dd:de:fc:52:fb:ed:34:05:c7:53:
da:07:64:9c:3f:3c:9f:0e:0f:17:37:3d:a0:b3:22:82:f4:6a:
0b:93:ac:4f:51:13:14:92:9c:ee:35:f1:e4:47:fe:65:54:3a:
29:f0:8e:1f:ac:b6:30:ed:46:b3:11:42:08:f3:33:02:b3:fb:
29:34:5e:31:f3:99:c7:b8:f4:75:81:49:73:12:0c:5b:de:f0:
60:56:f2:77:15:b7:88:5c:ae:42:e0:50:72:4b:5d:1b:ad:39:
ca:f3:da:f4:54:3c:04:4c:6a:9f:dc:51:66:92:0e:ff:c7:34:
80:d4:0f:ed:aa:87:90:8c:33:38:0b:01:25:0b:85:c4:a7:75:
28:69:46:9f:fb:73:20:52:5e:2f:aa:8c:d6:3e:8e:ef:4d:a9:
07:fe:27:f6:70:1d:54:b1:50:a0:2d:89:20:fb:5e:09:ee:80:
1f:83:45:8b:84:94:36:bd:b0:c3:9d:c4:71:ea:db:82:ae:b2:
c9:62:43:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PHhaTegjeHAMGEgjJ90eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MDdhZDdkZmFlZGI5NjAzMjBlZDE3NDA3MTUyNDhiODk1
YWIwODQwHhcNMjUwMTMxMTIwMTA3WhcNMjUwMjAxMTIwMTA3WjAzMTEwLwYDVQQD
Eyg5NjRjNWRjNGFjNjViYzM5ZTM2NjhlZDE5YmU1YTJhMWU1ZDhkZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsxMp+1Pshck3m3yCabRPJJeuSxv
/NRqaNjJqPThy0XNTTDWGbcwaa+S8N7D1eLAXxnVycEVEOVs1q1NkcrztG1VKS+y
GBYFdcqF4uywjfSLphyJdRq4WRr/D3ES+hFe9DsIMV/WGbOZPHBC2av4nZnu6Us2
OLevNhxjaRN4jtx0E6OPwHoCYMWkYor8vBGIKDkAGWxcS4WPGq/H8tJo2wVvtlgU
/lC+qbhVGFHZEKBxtjT/9zfo4Nkd0NsHQHrc6YFXcRY3o+muvHGA//7waAezmi4x
9uodWMVKWU5zPt1sAKB7oQMyHsckrt7DpqEm3Jr5+bxc4QGAzQzweyPBXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZMXcSsZbw542aO0ZvloqHl2N7UMB8GA1UdIwQY
MBaAFGkHrX367blgMg7RdAcVJIuJWrCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFldGZmcnR1V0F5RHRGMEJ4VWtpNGxhc0lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kYzA3Y2UtMzRmMS00YWM5LTkzZDct
ZDFiNTZjODQ0MTg4LzEvYVFldGZmcnR1V0F5RHRGMEJ4VWtpNGxhc0lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9kYzA3Y2UtMzRmMS00YWM5LTkzZDctZDFiNTZjODQ0MTg4
LzEvYVFldGZmcnR1V0F5RHRGMEJ4VWtpNGxhc0lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuE3S3Hu
ZVyhCmQbGdPDqO5lAWonN6qOT9zONk3OGZrbVMZeAsaBHJS6l0lU9luOeZ0UL5qY
t6LiPmsAmdHd3vxS++00BcdT2gdknD88nw4PFzc9oLMigvRqC5OsT1ETFJKc7jXx
5Ef+ZVQ6KfCOH6y2MO1GsxFCCPMzArP7KTReMfOZx7j0dYFJcxIMW97wYFbydxW3
iFyuQuBQcktdG605yvPa9FQ8BExqn9xRZpIO/8c0gNQP7aqHkIwzOAsBJQuFxKd1
KGlGn/tzIFJeL6qM1j6O702pB/4n9nAdVLFQoC2JIPteCe6AH4NFi4SUNr2ww53E
cerbgq6yyWJDMg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:27 2025 by rpki-client