Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
File: A5aaE8t8Nxi9NxdxJijnqxszsKU.mft (raw, json)
Hash identifier: muU2p71HuB8hai2EzrTLQuNgYQzMGbaXT8KIEe0f30k=
Subject key identifier: 5C:4D:23:97:51:19:78:9C:25:28:18:10:48:DA:7E:34:47:51:95:C7
Authority key identifier: 03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
Certificate issuer: /CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Certificate serial: 0194BCE0DFF9BA3BB9A4A79BAFBD4875C7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
Manifest number: 0858
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: A5aaE8t8Nxi9NxdxJijnqxszsKU.crl (hash: zBCIx4Rqep3rxpx26t9E/J/zNleVeApiKAgT5pgC4wQ=)
2: MK6Wt26ubZnx8uPGofYFajPlEuM.roa (hash: pNoc6zxMnN0pQF1kB42eiM3UzngOuAJOl2Ggh4EWIBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:df:f9:ba:3b:b9:a4:a7:9b:af:bd:48:75:c7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=5c4d23975119789c2528181048da7e34475195c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:ad:27:0f:7c:a8:df:18:f1:d7:18:90:87:
a8:15:80:02:5b:db:4d:a0:dd:71:32:e1:68:ff:3d:
d5:02:65:00:73:3c:4f:96:85:10:89:31:d0:f9:30:
85:2b:82:07:89:fa:f1:36:12:0e:fd:ca:ba:69:86:
59:4e:e2:c4:f2:84:26:e1:bf:78:0c:a0:48:08:d8:
39:09:2c:90:c0:2f:73:1e:64:db:a3:5a:8b:bc:33:
37:4d:c4:2a:36:e6:ba:f2:28:b9:99:31:09:6d:21:
67:21:3a:86:81:aa:81:37:00:b8:d6:a1:da:5b:41:
f0:2a:e1:1f:8f:73:75:d0:34:cd:7c:d2:57:b4:dd:
ae:c6:c5:b9:d8:41:f1:69:87:5a:49:6e:d6:0c:3e:
1d:56:c1:ad:5a:16:56:57:bb:be:02:ed:cf:d3:81:
ad:1f:17:7b:03:19:62:04:ba:54:ec:65:69:7c:de:
d9:dc:ca:3e:c5:56:ee:96:82:99:97:42:34:c5:0b:
0c:af:34:fd:85:87:42:17:b2:88:84:4c:f8:d5:4b:
1e:8d:75:35:82:4b:85:a4:be:47:53:5d:70:67:7f:
c9:e6:27:dc:f9:1b:65:03:d1:62:ad:b2:1a:95:e9:
7f:34:6d:5e:0b:c2:87:5d:5f:2c:f5:09:be:01:bc:
a0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4D:23:97:51:19:78:9C:25:28:18:10:48:DA:7E:34:47:51:95:C7
X509v3 Authority Key Identifier:
keyid:03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:91:1a:fd:f2:82:eb:ea:9d:f1:f7:27:13:f8:b3:31:f9:c4:
39:85:fb:72:32:2b:f0:88:34:67:e9:cb:bb:0b:13:d8:86:39:
8d:e5:d2:6a:6c:7a:42:4c:56:33:f8:28:b7:17:f2:22:69:92:
22:e4:8b:2a:8d:3d:41:a7:c0:ad:c6:e4:97:73:51:66:07:7b:
28:ed:19:14:2c:d5:b3:0f:cc:f2:84:b4:40:0d:b7:33:6e:51:
0f:cd:67:c7:7a:d0:c7:0e:6b:75:b4:54:f8:fd:92:ec:29:b6:
d4:3b:c0:49:78:f0:28:80:cd:a1:0c:6f:92:52:bc:a2:2c:8e:
f1:3a:af:6b:89:39:27:87:28:40:1b:e8:d6:ff:77:d8:f6:91:
b3:dd:e9:9e:8f:8a:5d:fa:06:7b:6d:ff:76:a0:4b:47:cd:ce:
0a:f9:b3:a9:15:6a:d1:31:5e:84:b3:ce:e9:95:c2:26:ad:1a:
d8:8b:de:82:9f:a1:19:55:25:e0:06:ab:00:f5:15:df:20:af:
8f:7e:e8:7f:2b:5f:b7:69:1c:14:9c:09:dc:ed:95:75:e7:ed:
6f:dc:de:04:e0:d1:59:fd:0a:6d:f3:23:08:e7:69:fd:6c:98:
4d:12:90:5e:ac:83:a5:ff:f2:6e:08:ae:af:4e:a9:f2:af:cb:
fa:f5:78:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84N/5uju5pKebr71IdcevMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOTY5YTEzY2I3YzM3MThiZDM3MTc3MTI2MjhlN2FiMWIz
M2IwYTUwHhcNMjUwMTMxMTUwMDQxWhcNMjUwMjAxMTUwMDQxWjAzMTEwLwYDVQQD
Eyg1YzRkMjM5NzUxMTk3ODljMjUyODE4MTA0OGRhN2UzNDQ3NTE5NWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0+tJw98qN8Y8dcYkIeoFYACW9tN
oN1xMuFo/z3VAmUAczxPloUQiTHQ+TCFK4IHifrxNhIO/cq6aYZZTuLE8oQm4b94
DKBICNg5CSyQwC9zHmTbo1qLvDM3TcQqNua68ii5mTEJbSFnITqGgaqBNwC41qHa
W0HwKuEfj3N10DTNfNJXtN2uxsW52EHxaYdaSW7WDD4dVsGtWhZWV7u+Au3P04Gt
Hxd7AxliBLpU7GVpfN7Z3Mo+xVbuloKZl0I0xQsMrzT9hYdCF7KIhEz41UsejXU1
gkuFpL5HU11wZ3/J5ifc+RtlA9FirbIalel/NG1eC8KHXV8s9Qm+AbygDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxNI5dRGXicJSgYEEjafjRHUZXHMB8GA1UdIwQY
MBaAFAOWmhPLfDcYvTcXcSYo56sbM7ClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVhYUU4dDhOeGk5TnhkeEppam5xeHN6c0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jMTI5YWItNzlhNy00YmMwLTlhM2It
NDFlZmVhY2U3YTcxLzEvQTVhYUU4dDhOeGk5TnhkeEppam5xeHN6c0tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9jMTI5YWItNzlhNy00YmMwLTlhM2ItNDFlZmVhY2U3YTcx
LzEvQTVhYUU4dDhOeGk5TnhkeEppam5xeHN6c0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5Ea/fKC
6+qd8fcnE/izMfnEOYX7cjIr8Ig0Z+nLuwsT2IY5jeXSamx6QkxWM/gotxfyImmS
IuSLKo09QafArcbkl3NRZgd7KO0ZFCzVsw/M8oS0QA23M25RD81nx3rQxw5rdbRU
+P2S7Cm21DvASXjwKIDNoQxvklK8oiyO8Tqva4k5J4coQBvo1v932PaRs93pno+K
XfoGe23/dqBLR83OCvmzqRVq0TFehLPO6ZXCJq0a2Ivegp+hGVUl4AarAPUV3yCv
j37ofytft2kcFJwJ3O2Vdeftb9zeBODRWf0KbfMjCOdp/WyYTRKQXqyDpf/ybgiu
r06p8q/L+vV4IQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:19 2025 by rpki-client