Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier: RGYW6FTrxBkHgzWkr0Wv4na0nM4owvIH0N2yFPeLCek=
Subject key identifier: 4C:79:25:E4:2B:A9:B7:63:9B:C1:0E:2F:1B:C7:DB:67:C6:36:52:69
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 0194BC04E011572BB1CF204161E32FC41641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number: 0F3F
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: Bxk-ljoc2dW8QsY1t6SnljuVzrc.roa (hash: EHFgnxfo9FlNYICjVNDDOGwcGWSFUFvfhL6xXPC9Efc=)
2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: nYeC0N2usd0j5I0vKludRx2WeqozyhKE1usxCLjTNNE=)
3: hbudJorJpA0LronMbhTnCWltODU.roa (hash: DwgBGICs1kDDEoItVMFSXi6+JkhqgGxyVQsq2CAkyq0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e0:11:57:2b:b1:cf:20:41:61:e3:2f:c4:16:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=4c7925e42ba9b7639bc10e2f1bc7db67c6365269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:b8:7a:36:ed:0f:d1:60:68:4a:55:1a:51:
68:3c:72:51:37:93:29:b7:46:2a:6b:7e:b9:10:b1:
bc:5c:8e:a8:3f:2f:5f:e7:e9:2f:c8:63:30:c7:bb:
46:f1:62:36:b3:5b:c4:dc:2d:fe:2c:81:d3:fe:dd:
f2:5f:cd:55:8d:a3:04:ba:ce:c9:ae:0e:ab:06:bb:
fe:5a:23:fe:1a:df:c1:b3:17:48:a7:15:8a:07:5d:
b8:2a:b7:74:f4:17:d7:d1:2b:72:af:01:16:1f:44:
4c:54:2a:2c:a7:46:cd:b5:fc:27:68:23:d0:1e:cd:
ba:c8:69:5d:f5:91:29:7f:6b:63:a5:4c:c0:f2:74:
78:a4:8b:92:ca:bf:0c:28:45:f6:70:9b:e0:a5:5b:
14:49:f2:b0:5b:a1:cc:98:1d:7a:1c:98:ef:c2:4b:
35:d8:8f:ab:10:f4:dd:9c:b1:86:69:a5:3f:63:2f:
9f:7f:23:36:1d:41:5f:07:56:83:70:a5:f1:cc:17:
68:c6:0d:98:60:0c:16:09:06:58:80:7a:4e:bb:98:
14:c9:64:1d:5e:c2:40:3a:cf:c8:4f:e7:55:01:45:
54:a2:2d:f6:1b:1b:7a:d6:f7:ea:43:fb:84:76:71:
43:fe:3a:ee:6b:8a:20:64:82:21:4d:ed:2f:59:b6:
d4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:79:25:E4:2B:A9:B7:63:9B:C1:0E:2F:1B:C7:DB:67:C6:36:52:69
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:67:97:47:c9:62:bd:5f:b6:a1:48:df:0a:3a:c9:26:22:bd:
ab:42:55:19:03:b4:ce:ce:22:87:f6:96:9d:a9:9c:99:14:8e:
1a:5e:4b:6a:62:8c:01:17:cc:df:b9:d4:e1:19:52:ef:0c:28:
24:c9:aa:04:24:95:a7:b1:af:c1:67:02:a7:cf:bc:b3:99:07:
67:ab:33:a2:54:a3:89:e4:9c:e4:c6:c5:1f:a0:b7:e7:34:23:
4c:f1:3f:4c:f2:33:57:14:6f:2b:4d:54:ad:f3:60:8a:6c:a0:
de:60:0d:de:86:56:f2:15:24:53:a7:f2:56:ca:7f:ab:ff:4a:
4f:21:c1:99:22:ce:15:14:d1:9d:9e:f9:82:36:5f:e3:41:32:
ee:81:be:b6:da:8f:23:05:f0:7d:f2:3c:8e:e7:e7:5a:c1:f2:
49:df:a7:e2:de:be:9a:25:44:a6:1b:41:77:9d:36:a4:b7:b3:
62:62:2a:5b:1f:5c:66:7d:ec:95:e0:80:98:3a:36:b9:1d:f4:
4d:08:f4:10:f8:3d:a3:22:f7:a5:29:db:b2:b5:20:b1:51:f8:
80:24:de:02:9f:d0:67:90:53:c4:39:7d:37:d1:0f:cb:41:a1:
4a:10:1a:e8:bb:eb:5f:f2:6f:db:d5:05:17:8a:9b:de:90:fd:
1f:4d:38:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOARVyuxzyBBYeMvxBZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZjljNTQwYjE0NmJiNDRjODIxOWQwMTM3NWMxMDEyNDky
MGFlOWYwHhcNMjUwMTMxMTEwMDIzWhcNMjUwMjAxMTEwMDIzWjAzMTEwLwYDVQQD
Eyg0Yzc5MjVlNDJiYTliNzYzOWJjMTBlMmYxYmM3ZGI2N2M2MzY1MjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGy4ejbtD9FgaEpVGlFoPHJRN5Mp
t0Yqa365ELG8XI6oPy9f5+kvyGMwx7tG8WI2s1vE3C3+LIHT/t3yX81VjaMEus7J
rg6rBrv+WiP+Gt/BsxdIpxWKB124Krd09BfX0StyrwEWH0RMVCosp0bNtfwnaCPQ
Hs26yGld9ZEpf2tjpUzA8nR4pIuSyr8MKEX2cJvgpVsUSfKwW6HMmB16HJjvwks1
2I+rEPTdnLGGaaU/Yy+ffyM2HUFfB1aDcKXxzBdoxg2YYAwWCQZYgHpOu5gUyWQd
XsJAOs/IT+dVAUVUoi32Gxt61vfqQ/uEdnFD/jrua4ogZIIhTe0vWbbU2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEx5JeQrqbdjm8EOLxvH22fGNlJpMB8GA1UdIwQY
MBaAFGr5xUCxRrtEyCGdATdcEBJJIK6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zNzk1MjktZjQ2OS00MzYzLThiODct
NDIxYTk5YmRkNzhmLzEvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zNzk1MjktZjQ2OS00MzYzLThiODctNDIxYTk5YmRkNzhm
LzEvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGeXR8li
vV+2oUjfCjrJJiK9q0JVGQO0zs4ih/aWnamcmRSOGl5LamKMARfM37nU4RlS7wwo
JMmqBCSVp7GvwWcCp8+8s5kHZ6szolSjieSc5MbFH6C35zQjTPE/TPIzVxRvK01U
rfNgimyg3mAN3oZW8hUkU6fyVsp/q/9KTyHBmSLOFRTRnZ75gjZf40Ey7oG+ttqP
IwXwffI8jufnWsHySd+n4t6+miVEphtBd502pLezYmIqWx9cZn3sleCAmDo2uR30
TQj0EPg9oyL3pSnbsrUgsVH4gCTeAp/QZ5BTxDl9N9EPy0GhShAa6LvrX/Jv29UF
F4qb3pD9H004Ig==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:41 2025 by rpki-client