Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
File: aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft (raw, json)
Hash identifier: Y6nNCb9cXTyrU0yiv9oXm2AJ0XopahxOqcKfRpnAEes=
Subject key identifier: 6C:73:28:6D:8E:B4:87:00:DF:CF:29:24:9A:F3:96:61:B0:D2:D1:6C
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 0194BD1749621FDC9042B5C0A769662E71C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
Manifest number: 0318
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: 1-7Y0vxgGjFDrArJxbSZiKPHjpLI.roa (hash: bOO4FlKJWXEQJjLmaOoP7m2UMLj2WLiNGPSaCEd5lyU=)
2: aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl (hash: RmckCWCO/wYD3Faa4MfYQjbjho7e5u4j/y2I/vqk3OE=)
3: fxSPTs_KrZKa-NlCbE6u4smq6IQ.roa (hash: 9pMUqI23+lfSB11w0dNCq2uY/O6yUaZq0tlanY1cD7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:49:62:1f:dc:90:42:b5:c0:a7:69:66:2e:71:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=6c73286d8eb48700dfcf29249af39661b0d2d16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:bf:e2:8c:92:4c:ac:5e:26:66:d0:ad:f5:
bf:e0:aa:b1:13:d4:99:dd:a8:23:4c:9a:e5:ef:1d:
f4:08:0d:5c:63:35:e4:75:df:f7:87:eb:48:b1:95:
b9:42:3f:fc:fa:ea:bc:a9:b0:d3:49:21:2c:3e:c8:
1b:d0:69:cc:91:23:5f:82:9f:27:ca:3b:57:42:14:
7a:4c:32:a6:56:0e:27:c1:f4:5f:db:59:90:a6:34:
f2:9e:b9:0c:74:33:51:2f:7d:04:48:93:9b:24:29:
4a:80:49:06:ec:da:59:b6:da:0c:d2:80:2a:59:40:
56:5f:07:3d:02:30:53:42:8f:3b:35:ae:3c:80:79:
54:0b:2e:70:1f:64:09:af:e0:98:da:a3:ce:07:4f:
58:3a:38:83:65:20:b0:55:6f:2f:e3:6a:ec:ec:c1:
8b:85:38:72:ea:38:40:ed:62:78:cf:b5:ac:19:e8:
e4:e8:1c:e9:f8:59:db:5d:65:4f:69:05:f1:89:96:
ca:42:6b:f9:4c:d2:5c:2e:24:d9:c1:94:ae:0f:5f:
f2:17:82:c4:87:49:c8:6d:53:c7:77:f3:f5:57:ef:
01:df:60:17:65:9f:c4:b3:70:8b:5e:be:76:28:3e:
a1:b4:09:bd:ca:ce:2e:bd:fb:b5:3f:e7:7e:d7:ef:
29:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:28:6D:8E:B4:87:00:DF:CF:29:24:9A:F3:96:61:B0:D2:D1:6C
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f8:1b:2a:17:fa:9e:76:f7:5b:61:ca:26:05:38:9e:2c:41:
02:9e:13:df:d6:24:aa:fe:0a:b5:53:62:eb:71:7e:7f:da:fd:
03:bd:32:4f:7c:bb:28:c6:40:3d:60:ef:bf:19:e0:61:ba:5b:
33:5b:68:0f:80:f5:78:3f:64:54:5c:08:f2:24:c6:06:93:1b:
b1:42:29:61:cb:9f:b8:c4:e8:4b:dd:c5:24:8b:7d:1e:90:9d:
72:fa:92:6b:ce:f4:b8:66:e7:29:cb:08:38:73:05:e1:4c:54:
3d:65:0c:7c:59:7c:08:8e:fe:4a:03:d5:9b:1e:70:9c:e1:a9:
c0:62:49:b5:39:6d:97:fb:9e:75:11:d6:07:3d:f2:5b:9e:d5:
3e:a0:2a:1d:d8:d8:1b:3b:d1:d1:2e:b0:92:b0:da:20:25:1b:
40:b6:b1:6f:93:ad:7a:d6:a9:fb:53:2f:56:bd:20:6f:5d:77:
82:58:be:94:b5:92:53:41:2a:8b:a6:b9:e7:ef:5e:71:1c:09:
99:b9:19:08:d9:c7:f9:3c:03:4f:49:5f:2a:b7:c7:b4:a4:f8:
6a:ab:fd:09:fb:11:da:ce:fc:89:53:92:16:77:19:72:ca:fc:
84:b7:7a:81:9b:be:99:da:98:b9:a1:e4:ae:7a:6a:da:f4:59:
fc:2c:67:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F0liH9yQQrXAp2lmLnHJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NmM2N2IyNWQyZjIyNWQ5NzJjZmRmM2I0ZWFmZjIyZTM3
OTAwYTgwHhcNMjUwMTMxMTYwMDA3WhcNMjUwMjAxMTYwMDA3WjAzMTEwLwYDVQQD
Eyg2YzczMjg2ZDhlYjQ4NzAwZGZjZjI5MjQ5YWYzOTY2MWIwZDJkMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp+/4oySTKxeJmbQrfW/4KqxE9SZ
3agjTJrl7x30CA1cYzXkdd/3h+tIsZW5Qj/8+uq8qbDTSSEsPsgb0GnMkSNfgp8n
yjtXQhR6TDKmVg4nwfRf21mQpjTynrkMdDNRL30ESJObJClKgEkG7NpZttoM0oAq
WUBWXwc9AjBTQo87Na48gHlUCy5wH2QJr+CY2qPOB09YOjiDZSCwVW8v42rs7MGL
hThy6jhA7WJ4z7WsGejk6Bzp+FnbXWVPaQXxiZbKQmv5TNJcLiTZwZSuD1/yF4LE
h0nIbVPHd/P1V+8B32AXZZ/Es3CLXr52KD6htAm9ys4uvfu1P+d+1+8pLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxzKG2OtIcA388pJJrzlmGw0tFsMB8GA1UdIwQY
MBaAFGlsZ7JdLyJdlyz987Tq/yLjeQCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYzYzNGEtMGNkOS00NzY1LWJkMDkt
NTY2M2RlMTZkNjZmLzEvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8zYzYzNGEtMGNkOS00NzY1LWJkMDktNTY2M2RlMTZkNjZm
LzEvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfgbKhf6
nnb3W2HKJgU4nixBAp4T39Ykqv4KtVNi63F+f9r9A70yT3y7KMZAPWDvvxngYbpb
M1toD4D1eD9kVFwI8iTGBpMbsUIpYcufuMToS93FJIt9HpCdcvqSa870uGbnKcsI
OHMF4UxUPWUMfFl8CI7+SgPVmx5wnOGpwGJJtTltl/uedRHWBz3yW57VPqAqHdjY
GzvR0S6wkrDaICUbQLaxb5Otetap+1MvVr0gb113gli+lLWSU0Eqi6a55+9ecRwJ
mbkZCNnH+TwDT0lfKrfHtKT4aqv9CfsR2s78iVOSFncZcsr8hLd6gZu+mdqYuaHk
rnpq2vRZ/Cxnjg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:18 2025 by rpki-client