Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
File: aBFGMD9XUewN_C71R6qyR69OaB8.mft (raw, json)
Hash identifier: lA6GGUm3upTt93qN42C3VtHbrQK7kfCKzcVO2TFyuTA=
Subject key identifier: 27:5E:CB:47:E5:EF:83:3D:2A:9D:81:C6:D6:27:A6:6A:9F:91:67:31
Authority key identifier: 68:11:46:30:3F:57:51:EC:0D:FC:2E:F5:47:AA:B2:47:AF:4E:68:1F
Certificate issuer: /CN=681146303f5751ec0dfc2ef547aab247af4e681f
Certificate serial: 0194BBCEFE24F2B61AE02B6A7591C615D46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: aBFGMD9XUewN_C71R6qyR69OaB8.crl (hash: Aw6OOXLFym7yGLmfgokxq+BAWmuQLSrlFN9BJWdM19c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fe:24:f2:b6:1a:e0:2b:6a:75:91:c6:15:d4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=681146303f5751ec0dfc2ef547aab247af4e681f
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=275ecb47e5ef833d2a9d81c6d627a66a9f916731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:3e:4c:c9:7d:60:dc:cb:fd:8c:af:61:3a:
88:47:c6:a9:5c:3d:71:2b:44:f7:ba:56:de:3d:35:
30:0d:8b:4f:f0:3e:21:dd:e3:ac:90:0a:92:57:8b:
bf:13:67:80:b7:d0:41:ed:12:af:50:5f:15:27:e8:
43:47:77:02:34:61:cd:25:8e:06:35:22:3c:74:65:
33:a1:c0:b9:be:ce:44:d6:3e:9f:9a:ba:46:bd:ab:
dc:06:66:99:90:9a:43:46:10:53:1b:46:f9:79:f7:
7e:df:cd:db:03:5c:fe:9f:d8:61:6a:f8:f2:41:cd:
22:9a:d7:c1:3d:60:e2:f3:60:f8:3f:48:d3:ed:be:
a6:03:27:cd:4f:cd:c6:bf:e0:77:78:46:3b:d4:d6:
a0:cc:c6:8d:0c:e9:db:42:43:69:01:4e:f5:a6:04:
06:a7:28:2b:eb:5d:5b:7f:5b:47:a1:75:01:95:c9:
28:66:78:e6:b5:20:d7:98:68:bf:42:82:0c:7b:14:
af:30:79:eb:0e:9c:c1:9f:6f:46:ed:e2:04:e1:c7:
c6:cc:25:38:ac:ae:a3:74:2c:2c:01:60:b0:56:62:
c1:7d:10:a7:c0:fc:47:1c:78:a2:40:06:9c:b6:0d:
cd:c0:44:e8:8f:9b:00:b3:5e:18:69:be:97:22:59:
af:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5E:CB:47:E5:EF:83:3D:2A:9D:81:C6:D6:27:A6:6A:9F:91:67:31
X509v3 Authority Key Identifier:
keyid:68:11:46:30:3F:57:51:EC:0D:FC:2E:F5:47:AA:B2:47:AF:4E:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBFGMD9XUewN_C71R6qyR69OaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d938dc-00c4-4680-9944-4a3733f4722b/1/aBFGMD9XUewN_C71R6qyR69OaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1f:73:69:37:27:04:17:f3:5a:d2:23:63:28:85:af:9c:d3:
c1:87:9a:6c:87:6e:bb:f0:37:8d:93:31:21:2f:9f:5d:f8:31:
04:17:82:1e:24:ce:45:01:f1:a1:83:d5:3e:86:93:f1:6d:aa:
67:42:a8:aa:0d:51:22:a0:ac:2a:3c:43:a8:ea:6b:5d:5d:68:
5e:77:7d:38:6c:a6:a5:42:a1:be:6d:1a:45:ca:80:3d:85:6a:
f6:00:6c:2f:f6:19:4a:f5:b5:94:b5:0e:c8:99:44:55:53:a5:
a4:e1:11:e4:44:20:4e:81:0f:16:70:c5:48:ad:53:da:ca:ce:
33:5c:60:35:bf:a6:7e:1d:fe:8c:8b:49:f5:e1:ed:fb:69:c3:
e8:40:ec:b7:02:3b:cc:3f:22:b4:f1:d5:ba:75:5b:33:d1:a0:
08:d4:41:b0:49:25:e7:e5:e4:62:ab:b7:27:34:95:20:b4:9a:
97:4c:49:87:2f:19:b8:e4:2a:89:e3:ab:84:8e:fa:f5:3e:2b:
88:d4:c8:9e:d4:d2:85:78:82:50:ea:01:dc:dc:bd:27:4a:83:
3b:f7:cb:87:4f:15:7c:55:38:6c:97:2e:a9:69:f3:58:36:78:
d4:7c:4f:84:12:a9:df:1c:89:c2:22:5d:6b:90:90:ba:d3:e3:
eb:47:25:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zv4k8rYa4CtqdZHGFdRtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTE0NjMwM2Y1NzUxZWMwZGZjMmVmNTQ3YWFiMjQ3YWY0
ZTY4MWYwHhcNMjUwMTMxMTAwMTMyWhcNMjUwMjAxMTAwMTMyWjAzMTEwLwYDVQQD
EygyNzVlY2I0N2U1ZWY4MzNkMmE5ZDgxYzZkNjI3YTY2YTlmOTE2NzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy0+TMl9YNzL/YyvYTqIR8apXD1x
K0T3ulbePTUwDYtP8D4h3eOskAqSV4u/E2eAt9BB7RKvUF8VJ+hDR3cCNGHNJY4G
NSI8dGUzocC5vs5E1j6fmrpGvavcBmaZkJpDRhBTG0b5efd+383bA1z+n9hhavjy
Qc0imtfBPWDi82D4P0jT7b6mAyfNT83Gv+B3eEY71NagzMaNDOnbQkNpAU71pgQG
pygr611bf1tHoXUBlckoZnjmtSDXmGi/QoIMexSvMHnrDpzBn29G7eIE4cfGzCU4
rK6jdCwsAWCwVmLBfRCnwPxHHHiiQAactg3NwEToj5sAs14Yab6XIlmvxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdey0fl74M9Kp2BxtYnpmqfkWcxMB8GA1UdIwQY
MBaAFGgRRjA/V1HsDfwu9UeqskevTmgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJGR01EOVhVZXdOX0M3MVI2cXlSNjlPYUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9kOTM4ZGMtMDBjNC00NjgwLTk5NDQt
NGEzNzMzZjQ3MjJiLzEvYUJGR01EOVhVZXdOX0M3MVI2cXlSNjlPYUI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9kOTM4ZGMtMDBjNC00NjgwLTk5NDQtNGEzNzMzZjQ3MjJi
LzEvYUJGR01EOVhVZXdOX0M3MVI2cXlSNjlPYUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATR9zaTcn
BBfzWtIjYyiFr5zTwYeabIduu/A3jZMxIS+fXfgxBBeCHiTORQHxoYPVPoaT8W2q
Z0Koqg1RIqCsKjxDqOprXV1oXnd9OGympUKhvm0aRcqAPYVq9gBsL/YZSvW1lLUO
yJlEVVOlpOER5EQgToEPFnDFSK1T2srOM1xgNb+mfh3+jItJ9eHt+2nD6EDstwI7
zD8itPHVunVbM9GgCNRBsEkl5+XkYqu3JzSVILSal0xJhy8ZuOQqieOrhI769T4r
iNTIntTShXiCUOoB3Ny9J0qDO/fLh08VfFU4bJcuqWnzWDZ41HxPhBKp3xyJwiJd
a5CQutPj60clGw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:34:44 2025 by rpki-client