Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
File: aXC3r07RGKBaFTFefYuUY0yf6iA.mft (raw, json)
Hash identifier: pGZzw2L2ECYfKauqQbuAfhnTMaG0T6G3OvIvJqGcECE=
Subject key identifier: 87:15:70:39:FB:57:CD:D8:8B:71:36:B8:2D:0D:F8:08:5E:C6:F3:73
Authority key identifier: 69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
Certificate issuer: /CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Certificate serial: 0194BD17D4DD42E41DB78A50C07896B35781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
Manifest number: 09B5
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: aXC3r07RGKBaFTFefYuUY0yf6iA.crl (hash: rqxir1JrJdvMUk0YOwvQHP5LC6zJEnAVhmG6+MpFRWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d4:dd:42:e4:1d:b7:8a:50:c0:78:96:b3:57:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=87157039fb57cdd88b7136b82d0df8085ec6f373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:83:c6:e4:3d:d5:44:08:42:e7:4c:ee:7b:
e9:f0:d9:6b:41:96:5a:3a:c3:a4:0a:57:ab:01:88:
b4:91:ef:8b:d7:f5:af:6a:f2:01:32:df:46:af:8b:
f9:f6:54:4b:bb:dd:f4:d7:8d:7f:a6:64:bc:71:86:
03:48:6b:2a:c9:5d:81:1a:2a:98:04:98:9d:f2:b5:
88:eb:75:b4:16:bb:7b:7a:9f:b6:00:98:13:ff:ee:
a1:73:ee:5a:4b:4f:f4:b2:94:c6:dc:50:d0:55:fb:
02:07:c1:22:12:02:3f:3b:22:50:11:06:c8:89:c3:
69:d1:86:95:fa:54:b5:b0:65:1b:8e:1f:a8:91:19:
d0:6f:9f:18:aa:7a:c6:ba:39:78:30:52:dd:42:2e:
2c:7d:5f:2e:7e:8c:1a:30:8e:02:c6:2d:7b:b5:20:
04:28:ea:ca:1c:5b:70:48:32:82:73:22:4c:8b:e8:
5b:68:fb:01:ae:f1:89:8f:3f:ba:f5:86:ff:f0:63:
db:9d:68:5d:07:44:b0:00:68:d3:af:34:62:9d:ef:
c6:e2:70:67:37:2b:b6:32:08:e0:47:5c:02:e7:b4:
ba:07:eb:ca:9e:eb:bf:bc:d2:51:2f:4e:c2:1b:2e:
59:fb:b8:82:3d:27:77:09:9e:64:8e:f0:56:a2:9c:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:15:70:39:FB:57:CD:D8:8B:71:36:B8:2D:0D:F8:08:5E:C6:F3:73
X509v3 Authority Key Identifier:
keyid:69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fe:fb:15:7a:1a:42:5b:e1:b9:a3:fe:c2:c7:2c:3e:5a:fc:
a0:0a:e3:74:f4:10:ca:a3:a5:5d:d8:0c:a3:7f:fb:11:c9:92:
cd:49:9b:c6:dd:17:ae:2a:9d:6b:19:5b:c6:ff:b6:52:2e:14:
c2:bc:a7:4c:9f:d9:23:86:bb:14:75:1a:89:5e:7f:7d:60:f0:
ec:7e:7e:13:4c:f8:a2:3d:0b:42:c3:79:f6:76:cf:74:8d:dc:
fc:d4:3f:c5:bd:ba:0e:0d:d2:f2:fa:65:87:5a:65:55:ca:58:
8a:f3:2c:dc:07:a4:e3:48:68:f6:fb:fa:a5:f9:1c:10:6d:f4:
46:e4:b6:0a:05:07:1f:ea:6d:99:82:6f:7c:7c:27:81:3a:72:
5e:4c:91:01:2f:fc:c0:72:9a:9d:9e:ae:66:28:05:79:8b:f1:
05:da:a5:dd:f9:30:0c:9b:a0:0f:5f:d8:c6:67:ad:15:d6:2c:
aa:a9:0a:01:b9:8c:bd:b4:41:32:2a:e2:30:58:79:13:08:bd:
a5:0e:87:0d:cf:08:4a:3a:35:78:ac:29:69:3a:17:8c:30:32:
e9:fe:12:1a:ae:53:95:2e:03:da:38:d5:d4:6d:9a:93:f3:f0:
8e:af:88:8e:eb:ca:c8:7c:ae:af:23:31:99:ad:54:6f:a1:9d:
c2:be:1d:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F9TdQuQdt4pQwHiWs1eBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzBiN2FmNGVkMTE4YTA1YTE1MzE1ZTdkOGI5NDYzNGM5
ZmVhMjAwHhcNMjUwMTMxMTYwMDQzWhcNMjUwMjAxMTYwMDQzWjAzMTEwLwYDVQQD
Eyg4NzE1NzAzOWZiNTdjZGQ4OGI3MTM2YjgyZDBkZjgwODVlYzZmMzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3GDxuQ91UQIQudM7nvp8NlrQZZa
OsOkClerAYi0ke+L1/WvavIBMt9Gr4v59lRLu930141/pmS8cYYDSGsqyV2BGiqY
BJid8rWI63W0Frt7ep+2AJgT/+6hc+5aS0/0spTG3FDQVfsCB8EiEgI/OyJQEQbI
icNp0YaV+lS1sGUbjh+okRnQb58YqnrGujl4MFLdQi4sfV8ufowaMI4Cxi17tSAE
KOrKHFtwSDKCcyJMi+hbaPsBrvGJjz+69Yb/8GPbnWhdB0SwAGjTrzRine/G4nBn
Nyu2MgjgR1wC57S6B+vKnuu/vNJRL07CGy5Z+7iCPSd3CZ5kjvBWopwyiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcVcDn7V83Yi3E2uC0N+AhexvNzMB8GA1UdIwQY
MBaAFGlwt69O0RigWhUxXn2LlGNMn+ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhDM3IwN1JHS0JhRlRGZWZZdVVZMHlmNmlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82YzEzYWMtMzhhNy00NjhjLWI3ZjEt
YjEwNjIzMmEzNDJjLzEvYVhDM3IwN1JHS0JhRlRGZWZZdVVZMHlmNmlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS82YzEzYWMtMzhhNy00NjhjLWI3ZjEtYjEwNjIzMmEzNDJj
LzEvYVhDM3IwN1JHS0JhRlRGZWZZdVVZMHlmNmlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/77FXoa
QlvhuaP+wscsPlr8oArjdPQQyqOlXdgMo3/7EcmSzUmbxt0Xriqdaxlbxv+2Ui4U
wrynTJ/ZI4a7FHUaiV5/fWDw7H5+E0z4oj0LQsN59nbPdI3c/NQ/xb26Dg3S8vpl
h1plVcpYivMs3Aek40ho9vv6pfkcEG30RuS2CgUHH+ptmYJvfHwngTpyXkyRAS/8
wHKanZ6uZigFeYvxBdql3fkwDJugD1/YxmetFdYsqqkKAbmMvbRBMiriMFh5Ewi9
pQ6HDc8ISjo1eKwpaToXjDAy6f4SGq5TlS4D2jjV1G2ak/Pwjq+IjuvKyHyuryMx
ma1Ub6Gdwr4dYg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:27 2025 by rpki-client