Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
File: AOC06vnBB5HzU7qYfeI2ChOEF70.mft (raw, json)
Hash identifier: aqzz6PtrtCynUuZm+PuEWO1r0L2XMFbrcrinH4BQU/Y=
Subject key identifier: EA:56:B6:EE:39:2E:BE:B7:75:FB:76:44:51:E7:C5:A9:4E:62:7F:5A
Authority key identifier: 00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
Certificate issuer: /CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Certificate serial: 0194BCE0BD2873C9F8834C8FCF04AD2658AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
Manifest number: 0654
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: 7Qz5q4z6Tluf-_C3llmKbm-Y_6k.roa (hash: Btz39reQ2rKKUs2JCEZIO4ZVKwDZCOjT3ZoGf4qNKOM=)
2: AOC06vnBB5HzU7qYfeI2ChOEF70.crl (hash: fdPy7fEalhyralDuDviZ7Efi8Jv86ejgtRm8b9og2yk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bd:28:73:c9:f8:83:4c:8f:cf:04:ad:26:58:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=ea56b6ee392ebeb775fb764451e7c5a94e627f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:63:30:10:85:cc:f7:24:e7:83:08:6c:3e:
f3:bf:ba:8f:a2:2c:6b:41:04:fa:8a:75:93:f5:56:
e8:08:96:97:96:ca:1b:b4:03:fb:c5:80:40:85:bc:
16:a9:b9:38:02:80:9b:2f:41:e6:8e:49:1e:03:c0:
05:4d:02:a2:ac:51:f2:d3:63:84:f1:9c:b8:48:89:
ef:ad:04:15:9a:8f:f9:d0:90:77:15:88:26:99:7b:
bd:ac:d5:ca:4b:ae:69:c9:84:a7:ec:51:0e:db:c8:
6d:31:67:74:d1:d6:58:0f:6c:30:ed:5d:2b:c5:92:
1c:07:76:08:ee:dc:82:df:bb:04:63:ea:99:c6:7d:
09:2f:29:1a:59:a2:4f:81:5f:cf:9a:da:df:82:75:
ac:cb:98:6a:04:ee:ea:22:67:1a:df:f5:14:46:e8:
eb:d0:55:61:63:c5:54:0d:2d:71:8c:87:c0:6a:20:
7a:a1:07:1f:3e:a4:94:d7:e8:a5:d5:6a:17:86:70:
5b:ad:aa:28:55:e2:a4:2b:77:b7:8b:58:5e:d1:43:
85:1a:81:4e:70:b1:00:3b:e1:63:af:0a:9d:33:88:
e3:7d:b4:8a:6b:7d:e9:40:eb:76:65:91:c2:4b:91:
4c:02:4b:86:a3:21:e5:33:75:0d:11:cc:99:f2:bc:
4a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:56:B6:EE:39:2E:BE:B7:75:FB:76:44:51:E7:C5:A9:4E:62:7F:5A
X509v3 Authority Key Identifier:
keyid:00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:96:9a:69:0a:83:ed:3e:d5:6d:7f:c0:77:32:3d:68:87:67:
83:73:b8:7f:78:eb:8a:16:46:48:95:65:b9:e9:44:d5:3c:74:
0a:d3:28:17:2b:18:8c:f7:fa:e2:fe:ad:6c:91:51:ec:94:9a:
a7:3e:35:5d:c5:67:51:bf:25:0d:f1:c7:dd:4a:32:9e:e7:76:
09:c1:0b:a1:1a:e6:bb:63:d6:fd:cb:4a:8f:4d:97:9a:a1:d4:
dc:2a:15:6c:1c:43:b6:30:90:2d:70:b1:54:9e:fd:a9:75:5b:
48:d2:1e:6f:14:e7:2d:9f:23:c9:9f:08:32:92:5e:f5:cd:bb:
a5:79:b3:45:9d:1d:94:70:df:be:e3:71:3e:55:5d:41:0f:6a:
84:ec:f6:cb:93:8a:ed:49:0c:b1:cd:ad:62:c1:66:cd:3e:51:
d5:c4:e2:97:b3:9e:fd:09:43:e7:76:fa:8a:c2:0b:ae:e7:cc:
16:56:18:8c:60:11:f0:ae:04:7c:18:9b:4b:f2:2f:91:aa:52:
0c:10:3a:93:29:fb:18:c3:1a:f6:20:a8:aa:e1:4d:03:67:5d:
6b:94:8e:47:7d:4f:c3:3b:41:f4:48:e9:37:30:7c:10:4c:37:
ca:72:1f:19:59:d9:72:16:64:f3:d1:28:e0:59:48:78:4a:43:
0d:9c:5e:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84L0oc8n4g0yPzwStJlitMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZTBiNGVhZjljMTA3OTFmMzUzYmE5ODdkZTIzNjBhMTM4
NDE3YmQwHhcNMjUwMTMxMTUwMDMyWhcNMjUwMjAxMTUwMDMyWjAzMTEwLwYDVQQD
EyhlYTU2YjZlZTM5MmViZWI3NzVmYjc2NDQ1MWU3YzVhOTRlNjI3ZjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSBjMBCFzPck54MIbD7zv7qPoixr
QQT6inWT9VboCJaXlsobtAP7xYBAhbwWqbk4AoCbL0HmjkkeA8AFTQKirFHy02OE
8Zy4SInvrQQVmo/50JB3FYgmmXu9rNXKS65pyYSn7FEO28htMWd00dZYD2ww7V0r
xZIcB3YI7tyC37sEY+qZxn0JLykaWaJPgV/PmtrfgnWsy5hqBO7qImca3/UURujr
0FVhY8VUDS1xjIfAaiB6oQcfPqSU1+il1WoXhnBbraooVeKkK3e3i1he0UOFGoFO
cLEAO+FjrwqdM4jjfbSKa33pQOt2ZZHCS5FMAkuGoyHlM3UNEcyZ8rxKvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpWtu45Lr63dft2RFHnxalOYn9aMB8GA1UdIwQY
MBaAFADgtOr5wQeR81O6mH3iNgoThBe9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU9DMDZ2bkJCNUh6VTdxWWZlSTJDaE9FRjcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yMTAwNDMtNWFmZS00NTZmLWIzZjgt
ZGMwMjc0MzJlNWE1LzEvQU9DMDZ2bkJCNUh6VTdxWWZlSTJDaE9FRjcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yMTAwNDMtNWFmZS00NTZmLWIzZjgtZGMwMjc0MzJlNWE1
LzEvQU9DMDZ2bkJCNUh6VTdxWWZlSTJDaE9FRjcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJaaaQqD
7T7VbX/AdzI9aIdng3O4f3jrihZGSJVluelE1Tx0CtMoFysYjPf64v6tbJFR7JSa
pz41XcVnUb8lDfHH3Uoynud2CcELoRrmu2PW/ctKj02XmqHU3CoVbBxDtjCQLXCx
VJ79qXVbSNIebxTnLZ8jyZ8IMpJe9c27pXmzRZ0dlHDfvuNxPlVdQQ9qhOz2y5OK
7UkMsc2tYsFmzT5R1cTil7Oe/QlD53b6isILrufMFlYYjGAR8K4EfBibS/IvkapS
DBA6kyn7GMMa9iCoquFNA2dda5SOR31PwztB9EjpNzB8EEw3ynIfGVnZchZk89Eo
4FlIeEpDDZxeJw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:24:08 2025 by rpki-client