Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
File: AVz-48K26knSnhA-I6Uixi44UxE.mft (raw, json)
Hash identifier: qvk5Foj6TJAKA4yAr5O8qoECViqNRme1WTtm4KbVTVY=
Subject key identifier: 96:AC:F0:87:ED:9E:7B:7E:8D:D4:FE:F9:0C:1E:76:C0:BC:FB:69:D4
Authority key identifier: 01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
Certificate issuer: /CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Certificate serial: 0194BD1794EE9943B59400AC3A4149C703E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
Manifest number: 1140
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: AVz-48K26knSnhA-I6Uixi44UxE.crl (hash: aVQNCvzqRDPhBN7f90mu/HouMJtm9ZPG2CV1SDEOyNM=)
2: RcE6nYyQF7fwLJ22hRw58pxpEO4.roa (hash: U71UZwrToMoGIgEOhJfqlYI83JHFBKS+bWz/uad49Hs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:94:ee:99:43:b5:94:00:ac:3a:41:49:c7:03:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=96acf087ed9e7b7e8dd4fef90c1e76c0bcfb69d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7c:8f:bb:b2:05:75:74:54:ca:96:5d:5a:75:
1f:26:08:c7:94:de:c8:c3:9b:f7:4e:ae:34:c4:3a:
64:a0:38:24:db:b8:64:64:d4:62:11:c7:0e:d5:ac:
20:86:33:b9:ab:65:04:d1:1b:26:a2:c9:82:e1:c8:
f4:5e:9c:bf:ae:3e:e4:30:a7:85:47:7b:2c:56:a4:
b5:36:0a:59:7e:b0:f6:1c:c9:45:7d:65:9a:49:87:
fd:43:80:48:c1:f1:19:01:bb:5e:17:19:dc:bb:61:
27:4c:e7:8d:66:32:2d:d8:89:e0:24:ed:94:73:56:
12:fc:c4:80:65:b7:d9:11:ba:27:30:5d:d5:88:75:
37:d9:49:b3:7e:da:3c:fa:4d:3d:40:59:b3:99:dc:
f4:a6:b2:4a:b5:b7:e3:dc:bd:94:6e:22:d9:d5:5c:
b0:5b:8d:a6:c4:3e:f0:6e:44:02:31:a1:1c:aa:f5:
aa:84:71:3f:c4:b1:25:21:1d:2f:cd:f4:d4:da:14:
7a:0f:b7:53:ef:6d:b1:c1:20:07:fb:1b:f2:1e:63:
67:49:95:08:6c:5a:bb:1f:e5:aa:0a:51:46:5f:94:
aa:e3:af:15:02:92:88:a9:7d:c8:10:59:81:c5:9c:
f4:86:81:99:a0:36:85:2d:6b:44:17:7e:50:d1:b4:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AC:F0:87:ED:9E:7B:7E:8D:D4:FE:F9:0C:1E:76:C0:BC:FB:69:D4
X509v3 Authority Key Identifier:
keyid:01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:09:20:59:e5:c4:ea:27:d1:50:f8:66:df:35:a5:05:af:b6:
7e:df:37:12:da:7e:1e:a6:b4:a5:45:4b:87:1b:a9:aa:37:a8:
2e:8b:49:dc:e4:f1:d0:e1:cf:65:b3:b7:a4:bd:98:34:05:ba:
b6:a7:b2:01:72:d3:82:4d:27:a4:44:46:36:e9:7c:a8:cf:e8:
5d:8d:25:dd:6a:86:69:bc:d2:4e:a4:44:3d:54:42:09:0f:2b:
0c:d8:1e:3e:5e:77:f7:52:4e:e7:5f:82:96:7c:3c:2e:6b:fa:
00:e3:c5:e3:30:22:0f:01:06:a8:e7:bb:ba:7f:d9:f9:7c:a8:
a4:aa:2c:1d:d1:1d:ec:03:a3:bd:19:96:0f:01:9f:c0:02:2b:
69:ae:d0:b6:85:7b:30:90:b3:ba:10:94:a1:f2:99:a9:1b:25:
d7:5c:3d:06:91:73:c6:32:c2:b5:14:52:9b:5d:3d:e1:22:7a:
9a:cc:f3:5c:5f:22:a8:37:61:a4:a0:73:34:f3:65:0c:26:5b:
14:8d:55:fd:7d:4e:d1:25:41:45:fd:d4:28:84:42:35:93:28:
c4:cc:89:ce:74:8c:46:5b:51:22:98:24:26:e6:cd:ec:90:7e:
69:65:77:14:30:5a:20:28:7d:b6:76:98:84:c9:2a:2d:47:c9:
06:06:06:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F5TumUO1lACsOkFJxwPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNWNmZWUzYzJiNmVhNDlkMjllMTAzZTIzYTUyMmM2MmUz
ODUzMTEwHhcNMjUwMTMxMTYwMDI2WhcNMjUwMjAxMTYwMDI2WjAzMTEwLwYDVQQD
Eyg5NmFjZjA4N2VkOWU3YjdlOGRkNGZlZjkwYzFlNzZjMGJjZmI2OWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XyPu7IFdXRUypZdWnUfJgjHlN7I
w5v3Tq40xDpkoDgk27hkZNRiEccO1awghjO5q2UE0RsmosmC4cj0Xpy/rj7kMKeF
R3ssVqS1NgpZfrD2HMlFfWWaSYf9Q4BIwfEZAbteFxncu2EnTOeNZjIt2IngJO2U
c1YS/MSAZbfZEbonMF3ViHU32Umzfto8+k09QFmzmdz0prJKtbfj3L2UbiLZ1Vyw
W42mxD7wbkQCMaEcqvWqhHE/xLElIR0vzfTU2hR6D7dT722xwSAH+xvyHmNnSZUI
bFq7H+WqClFGX5Sq468VApKIqX3IEFmBxZz0hoGZoDaFLWtEF35Q0bSHwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJas8Iftnnt+jdT++QwedsC8+2nUMB8GA1UdIwQY
MBaAFAFc/uPCtupJ0p4QPiOlIsYuOFMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVZ6LTQ4SzI2a25TbmhBLUk2VWl4aTQ0VXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYmRiY2ItYmU5Yy00M2JkLWFlY2Yt
NGJmNzZjZTM1NjFkLzEvQVZ6LTQ4SzI2a25TbmhBLUk2VWl4aTQ0VXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8zYmRiY2ItYmU5Yy00M2JkLWFlY2YtNGJmNzZjZTM1NjFk
LzEvQVZ6LTQ4SzI2a25TbmhBLUk2VWl4aTQ0VXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQkgWeXE
6ifRUPhm3zWlBa+2ft83Etp+Hqa0pUVLhxupqjeoLotJ3OTx0OHPZbO3pL2YNAW6
tqeyAXLTgk0npERGNul8qM/oXY0l3WqGabzSTqREPVRCCQ8rDNgePl5391JO51+C
lnw8Lmv6AOPF4zAiDwEGqOe7un/Z+XyopKosHdEd7AOjvRmWDwGfwAIraa7QtoV7
MJCzuhCUofKZqRsl11w9BpFzxjLCtRRSm1094SJ6mszzXF8iqDdhpKBzNPNlDCZb
FI1V/X1O0SVBRf3UKIRCNZMoxMyJznSMRltRIpgkJubN7JB+aWV3FDBaICh9tnaY
hMkqLUfJBgYGYg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:30 2025 by rpki-client