Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/3ed902-a05d-49ac-a476-174fa26fd4b6/1/AhXKBUNIfztxz4FP4NjWb6lREVs.mft
File: AhXKBUNIfztxz4FP4NjWb6lREVs.mft (raw, json)
Hash identifier: mP8qIDAlORZAFpitT46JRbjr0szXgKJF/ZZUI6u+UuM=
Subject key identifier: 42:6A:A2:75:8F:EB:D9:75:DB:29:D0:31:A0:06:54:7F:C8:49:66:9F
Authority key identifier: 02:15:CA:05:43:48:7F:3B:71:CF:81:4F:E0:D8:D6:6F:A9:51:11:5B
Certificate issuer: /CN=0215ca0543487f3b71cf814fe0d8d66fa951115b
Certificate serial: 0194BD4ECFE0C07D02E39FAD0C57C052AA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhXKBUNIfztxz4FP4NjWb6lREVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/3ed902-a05d-49ac-a476-174fa26fd4b6/1/AhXKBUNIfztxz4FP4NjWb6lREVs.mft
Manifest number: 024F
Signing time: Fri 31 Jan 2025 17:00:46 +0000
Manifest this update: Fri 31 Jan 2025 17:00:46 +0000
Manifest next update: Sat 01 Feb 2025 17:00:46 +0000
Files and hashes: 1: AhXKBUNIfztxz4FP4NjWb6lREVs.crl (hash: QX8kq79yxg0vTnRwKD6/vJF4/0uN7URYTwJEauMtGms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:cf:e0:c0:7d:02:e3:9f:ad:0c:57:c0:52:aa:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0215ca0543487f3b71cf814fe0d8d66fa951115b
Validity
Not Before: Jan 31 17:00:46 2025 GMT
Not After : Feb 1 17:00:46 2025 GMT
Subject: CN=426aa2758febd975db29d031a006547fc849669f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:57:df:8e:53:ae:c3:95:06:d5:18:57:43:
7f:88:f2:ce:e1:c7:ed:cb:82:d7:63:5d:ea:7d:43:
d6:d4:97:be:89:bb:bc:1a:5a:0a:c0:89:b4:27:d7:
8d:a9:ca:7a:30:0d:72:ff:e4:08:37:3e:8d:61:a8:
f1:16:21:f0:18:cd:5b:12:db:1a:4c:41:1c:bb:33:
33:c0:83:9a:9e:90:f0:c8:25:4d:88:e2:a3:ff:40:
7f:22:33:4f:8a:42:64:78:1d:b1:e8:4f:0b:ae:3b:
1d:8e:4a:54:38:64:5e:36:ad:01:01:f8:d4:f2:35:
8c:59:f7:d5:14:a6:03:f4:05:79:6c:5e:7c:b5:6e:
a0:f2:cb:9c:1e:ad:00:72:7b:04:2b:56:93:b0:e0:
2c:e8:f2:25:31:e2:ce:ca:e1:50:ef:93:00:c9:0c:
c1:37:8f:7c:59:3a:02:c9:eb:e6:b3:53:f1:6e:3e:
09:05:ba:ec:06:79:6a:7c:99:eb:02:40:2a:e0:1f:
22:b3:08:aa:7f:09:28:0d:d0:0b:5e:0f:88:89:94:
d4:e2:d6:dd:59:bc:dd:81:97:39:d5:c0:8e:67:b1:
54:a1:e4:b5:42:dc:08:b8:de:f3:d8:a1:77:6c:6f:
14:99:e4:95:c8:5c:6e:9e:9c:29:e8:a4:2e:83:65:
c7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6A:A2:75:8F:EB:D9:75:DB:29:D0:31:A0:06:54:7F:C8:49:66:9F
X509v3 Authority Key Identifier:
keyid:02:15:CA:05:43:48:7F:3B:71:CF:81:4F:E0:D8:D6:6F:A9:51:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhXKBUNIfztxz4FP4NjWb6lREVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3ed902-a05d-49ac-a476-174fa26fd4b6/1/AhXKBUNIfztxz4FP4NjWb6lREVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3ed902-a05d-49ac-a476-174fa26fd4b6/1/AhXKBUNIfztxz4FP4NjWb6lREVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:30:cd:b8:69:cf:c1:db:28:bb:01:da:a1:83:b1:88:3c:f3:
b0:97:17:a0:90:16:c6:64:87:41:89:32:9b:f6:3d:25:ba:ce:
56:f9:5c:ee:3a:d6:6d:f5:fc:37:23:41:d5:99:bc:00:86:8e:
62:b5:73:e1:7f:a6:ec:31:93:ef:c4:79:56:7d:4a:8d:df:f3:
54:27:8b:f6:37:37:28:a5:54:5e:72:0e:cf:22:a1:c5:10:f4:
b8:cd:67:e7:39:ab:8b:cc:f9:1e:49:01:71:32:90:aa:6a:e5:
76:54:db:12:ba:0a:3c:46:06:ff:52:b6:63:37:37:d5:1b:7e:
59:9b:6a:9f:7f:30:3b:08:1a:1c:98:cc:3b:51:a6:95:11:94:
c0:44:54:5a:0c:36:e2:b7:71:ff:d9:1b:16:f2:a5:3a:4f:48:
c8:42:b7:15:c1:b7:8b:a5:a7:33:fa:a3:f3:c3:f5:42:2c:c3:
93:4a:d6:8e:0d:01:38:83:1f:25:cf:12:d4:ef:60:24:01:74:
f2:07:49:98:72:46:e0:87:c8:d9:92:e6:6b:2d:92:9d:d8:91:
0b:6b:8e:3e:bd:b6:9a:0d:7c:f4:98:fe:b8:ff:60:6f:49:30:
06:6c:79:9a:26:d1:41:a0:76:1d:8e:2d:6a:97:82:ab:53:51:
db:f0:0c:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Ts/gwH0C45+tDFfAUqp5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMTVjYTA1NDM0ODdmM2I3MWNmODE0ZmUwZDhkNjZmYTk1
MTExNWIwHhcNMjUwMTMxMTcwMDQ2WhcNMjUwMjAxMTcwMDQ2WjAzMTEwLwYDVQQD
Eyg0MjZhYTI3NThmZWJkOTc1ZGIyOWQwMzFhMDA2NTQ3ZmM4NDk2NjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9JX345TrsOVBtUYV0N/iPLO4cft
y4LXY13qfUPW1Je+ibu8GloKwIm0J9eNqcp6MA1y/+QINz6NYajxFiHwGM1bEtsa
TEEcuzMzwIOanpDwyCVNiOKj/0B/IjNPikJkeB2x6E8LrjsdjkpUOGReNq0BAfjU
8jWMWffVFKYD9AV5bF58tW6g8sucHq0AcnsEK1aTsOAs6PIlMeLOyuFQ75MAyQzB
N498WToCyevms1Pxbj4JBbrsBnlqfJnrAkAq4B8iswiqfwkoDdALXg+IiZTU4tbd
WbzdgZc51cCOZ7FUoeS1QtwIuN7z2KF3bG8UmeSVyFxunpwp6KQug2XH/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJqonWP69l12ynQMaAGVH/ISWafMB8GA1UdIwQY
MBaAFAIVygVDSH87cc+BT+DY1m+pURFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWhYS0JVTklmenR4ejRGUDROaldiNmxSRVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zZWQ5MDItYTA1ZC00OWFjLWE0NzYt
MTc0ZmEyNmZkNGI2LzEvQWhYS0JVTklmenR4ejRGUDROaldiNmxSRVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8zZWQ5MDItYTA1ZC00OWFjLWE0NzYtMTc0ZmEyNmZkNGI2
LzEvQWhYS0JVTklmenR4ejRGUDROaldiNmxSRVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzDNuGnP
wdsouwHaoYOxiDzzsJcXoJAWxmSHQYkym/Y9JbrOVvlc7jrWbfX8NyNB1Zm8AIaO
YrVz4X+m7DGT78R5Vn1Kjd/zVCeL9jc3KKVUXnIOzyKhxRD0uM1n5zmri8z5HkkB
cTKQqmrldlTbEroKPEYG/1K2Yzc31Rt+WZtqn38wOwgaHJjMO1GmlRGUwERUWgw2
4rdx/9kbFvKlOk9IyEK3FcG3i6WnM/qj88P1QizDk0rWjg0BOIMfJc8S1O9gJAF0
8gdJmHJG4IfI2ZLmay2SndiRC2uOPr22mg189Jj+uP9gb0kwBmx5mibRQaB2HY4t
apeCq1NR2/AMpQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:01 2025 by rpki-client