Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
File: aXJqlhM2--eCCz10joEvSVyHLTU.mft (raw, json)
Hash identifier: Eftm7bjcNkImG+kW7EAg6zvGsjYmVxE7xZL7xXaMDuY=
Subject key identifier: C8:20:B9:D4:8B:5C:AA:A2:BE:8A:96:1A:F3:6D:09:2F:78:22:CE:4E
Authority key identifier: 69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
Certificate issuer: /CN=69726a961336fbe7820b3d748e812f495c872d35
Certificate serial: 0194BD17A326EABEB0DF1AF5C8C41E473EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
Manifest number: 0C1A
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: TPjf70pa6qBZmpfYB0iX9CcL4Y4.roa (hash: swAbvLbVBmlLATlL/hX7o87L+INYtKkOcONzc8lraTI=)
2: aXJqlhM2--eCCz10joEvSVyHLTU.crl (hash: x+WnIJr6oGBVmQPBh2vnlVYy/0/q4xEN5MNpF7WFTkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a3:26:ea:be:b0:df:1a:f5:c8:c4:1e:47:3e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69726a961336fbe7820b3d748e812f495c872d35
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=c820b9d48b5caaa2be8a961af36d092f7822ce4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ff:7b:ab:c3:8e:bf:c4:c6:23:3b:78:8e:a0:
e0:c9:01:b5:36:e7:88:75:42:c3:9e:bb:c6:ea:18:
9f:c5:69:0f:be:de:4c:37:ef:2d:7d:b5:b1:5d:0a:
22:58:eb:9b:85:44:b6:63:9d:4c:10:be:2b:77:fb:
3d:74:c1:03:41:07:f3:5a:60:e0:bb:d6:fc:b7:7a:
28:19:1a:95:92:fa:97:b7:d0:55:23:0a:02:f4:a4:
07:c3:08:9a:3c:53:fa:8c:84:6f:1d:87:3e:68:ff:
e0:33:bd:a3:55:73:58:0b:10:0c:75:6f:ad:95:d6:
03:b6:5b:fc:4a:60:af:34:47:b0:68:88:ff:ae:8d:
5e:fc:23:88:3a:b3:43:d5:a4:db:7d:cb:97:e4:2e:
a1:52:de:91:26:3d:0f:df:d0:e5:c8:dc:93:33:01:
20:58:d0:19:1a:6b:ab:8f:67:9d:8f:a5:a3:1e:61:
1d:d5:f8:1f:a3:5c:10:c8:ff:32:66:5a:40:43:8c:
5b:be:c3:b4:16:48:cb:39:48:ca:ea:85:c9:1d:d8:
bd:01:53:01:ec:9b:29:40:63:71:09:5a:fa:21:1a:
ac:e5:d0:33:f4:41:75:5c:06:c4:ed:4a:88:ee:f6:
4a:8d:ee:ca:f6:14:28:a1:c1:b4:43:84:9b:b3:7a:
f0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:20:B9:D4:8B:5C:AA:A2:BE:8A:96:1A:F3:6D:09:2F:78:22:CE:4E
X509v3 Authority Key Identifier:
keyid:69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8f:d8:9b:30:e2:41:3f:2f:f6:b1:8d:1e:6e:0f:4d:8c:72:
fc:12:c0:88:0c:e4:ed:78:dd:e6:12:49:6f:ae:f1:4a:60:29:
72:8e:5f:29:69:1e:1f:1e:d4:78:18:21:c6:4d:ec:fa:65:d4:
19:35:69:eb:29:31:2e:c5:17:77:20:9e:90:91:74:69:14:2b:
30:1a:91:33:78:96:3e:f6:33:9f:be:36:ea:79:de:f9:2c:d9:
9b:61:28:d3:4c:55:39:93:de:1f:a2:80:65:46:b4:1e:2e:52:
d2:43:95:65:04:03:6f:04:c7:58:0a:f1:19:88:d6:21:a6:f7:
a5:42:1b:5d:a4:35:17:df:b7:ae:bb:dd:bc:0a:ed:0f:8a:80:
b8:55:14:5b:74:0e:6c:55:e9:02:6e:45:ae:86:b7:82:a9:ab:
d4:da:c1:be:6d:16:aa:41:6d:02:6c:d3:f9:cb:1c:75:e7:68:
e6:10:2d:14:63:c4:31:20:4a:61:24:60:8c:1e:8f:b3:f4:cc:
01:7b:29:5f:98:59:63:a8:ed:cb:4c:87:6b:5b:c8:c7:1f:b4:
96:76:1b:4b:63:36:60:25:57:a8:1c:03:92:36:fc:f9:fb:66:
1d:1c:b3:f2:53:1a:75:9b:90:b4:24:87:ae:fd:29:7b:5e:05:
b8:f9:97:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6Mm6r6w3xr1yMQeRz7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzI2YTk2MTMzNmZiZTc4MjBiM2Q3NDhlODEyZjQ5NWM4
NzJkMzUwHhcNMjUwMTMxMTYwMDMwWhcNMjUwMjAxMTYwMDMwWjAzMTEwLwYDVQQD
EyhjODIwYjlkNDhiNWNhYWEyYmU4YTk2MWFmMzZkMDkyZjc4MjJjZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v97q8OOv8TGIzt4jqDgyQG1NueI
dULDnrvG6hifxWkPvt5MN+8tfbWxXQoiWOubhUS2Y51MEL4rd/s9dMEDQQfzWmDg
u9b8t3ooGRqVkvqXt9BVIwoC9KQHwwiaPFP6jIRvHYc+aP/gM72jVXNYCxAMdW+t
ldYDtlv8SmCvNEewaIj/ro1e/COIOrND1aTbfcuX5C6hUt6RJj0P39DlyNyTMwEg
WNAZGmurj2edj6WjHmEd1fgfo1wQyP8yZlpAQ4xbvsO0FkjLOUjK6oXJHdi9AVMB
7JspQGNxCVr6IRqs5dAz9EF1XAbE7UqI7vZKje7K9hQoocG0Q4Sbs3rwJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMggudSLXKqivoqWGvNtCS94Is5OMB8GA1UdIwQY
MBaAFGlyapYTNvvnggs9dI6BL0lchy01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yNWU5NzItMjg0Mi00NTE0LThhZGUt
YzAxNjZkOTcwMTBkLzEvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8yNWU5NzItMjg0Mi00NTE0LThhZGUtYzAxNjZkOTcwMTBk
LzEvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABI/YmzDi
QT8v9rGNHm4PTYxy/BLAiAzk7Xjd5hJJb67xSmApco5fKWkeHx7UeBghxk3s+mXU
GTVp6ykxLsUXdyCekJF0aRQrMBqRM3iWPvYzn7426nne+SzZm2Eo00xVOZPeH6KA
ZUa0Hi5S0kOVZQQDbwTHWArxGYjWIab3pUIbXaQ1F9+3rrvdvArtD4qAuFUUW3QO
bFXpAm5Froa3gqmr1NrBvm0WqkFtAmzT+cscdedo5hAtFGPEMSBKYSRgjB6Ps/TM
AXspX5hZY6jty0yHa1vIxx+0lnYbS2M2YCVXqBwDkjb8+ftmHRyz8lMadZuQtCSH
rv0pe14FuPmXpQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:20 2025 by rpki-client