Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: CcUIgnihpWvHINT1OVzNAzk4tMb7VA2/jYaGs230YaI=
Subject key identifier: 70:A7:EF:F5:2A:40:75:17:8E:77:6B:14:BA:87:DF:EE:E1:9F:41:EB
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 0194BD17D04D5BEE55E527ADAB2732C5642C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 04F1
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: DHztT4aMnvMvVdCoCyC2egahtTfcepTjt2gXxDylMQk=)
2: F2c_uapmp4EWBvth9YsoExmggYE.roa (hash: F+OHkAH0cbjuGBPEpniF6/AR3wbSHhM+96aLypnHnng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d0:4d:5b:ee:55:e5:27:ad:ab:27:32:c5:64:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=70a7eff52a4075178e776b14ba87dfeee19f41eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:99:27:e1:be:46:6e:1c:fe:47:50:7e:43:
55:96:f0:27:54:c5:e7:5f:3f:f2:a6:9f:e1:a3:f5:
be:98:b9:b6:d7:75:3f:14:29:d8:c4:ca:37:5b:78:
b7:04:23:21:d0:3f:b5:79:75:5d:66:76:73:3b:f4:
64:8c:1c:f9:64:2a:c1:5d:e9:d6:28:19:f9:dd:f1:
29:ea:6c:6b:d3:57:2e:de:a1:7b:2c:fb:19:31:59:
56:f0:fc:14:4c:0e:4d:05:74:bb:2c:7f:fd:84:58:
31:30:c5:a3:e1:b1:f4:40:99:58:80:1c:85:68:f1:
82:7a:c7:48:b7:ca:1c:93:0c:23:37:eb:84:93:0e:
24:b4:f8:86:bc:97:b7:8d:fe:d6:48:3a:5b:99:40:
44:d2:f5:7b:2c:3a:2a:d0:b0:21:7b:a4:05:df:1e:
1b:e2:aa:0e:84:71:86:4d:b9:25:6f:dd:e2:06:20:
fc:37:c5:5a:50:f4:74:77:eb:64:ed:9c:4f:a8:5d:
fb:03:2c:fa:bb:2d:2e:4b:ed:82:59:1d:b2:1b:fd:
42:60:5a:c2:3d:bc:f2:29:98:78:ab:b3:e0:ce:1e:
c3:9c:17:3d:a3:25:38:7b:65:c0:73:13:15:9a:c2:
30:0c:17:cd:f9:85:3a:09:6d:42:6c:8d:16:25:93:
36:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A7:EF:F5:2A:40:75:17:8E:77:6B:14:BA:87:DF:EE:E1:9F:41:EB
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ff:f0:0d:e7:37:a4:30:d2:8a:37:90:02:98:7b:67:34:0e:
09:6c:04:e7:8a:09:6b:74:07:15:07:b0:1f:99:a6:6c:f7:ba:
3b:fd:0d:35:58:ff:75:ab:54:2b:c3:34:a5:a4:b2:ad:d0:6e:
b0:6c:79:2b:44:04:27:e2:5f:9d:ac:7b:d1:cf:be:66:ea:fd:
9d:57:ba:ed:33:ea:a7:1b:a6:38:32:9e:08:9d:e4:44:f6:bf:
e4:1e:14:91:07:68:56:c8:16:4f:09:d1:73:5b:53:cc:50:9e:
2b:e9:78:0c:e9:82:d3:80:df:e9:d4:6c:8f:08:3c:81:59:13:
78:fc:2b:9c:8e:cb:49:ee:ea:92:77:39:a1:f8:e4:18:37:9a:
ae:de:ae:7f:19:3e:29:f1:a6:25:40:22:93:b5:2f:7d:59:00:
43:3d:5a:0c:d9:22:ae:ff:99:57:15:61:06:da:35:b8:8e:7a:
9b:29:b1:69:d8:91:37:92:8d:0e:9d:f1:b5:ef:73:5f:7a:cd:
e6:e7:25:3b:d9:fd:57:a3:0f:ac:9c:e4:2f:84:6d:f5:76:8f:
cc:cf:a7:2c:0f:9c:f7:87:eb:e9:80:c9:d1:09:4c:18:53:01:
83:48:74:6a:5d:c9:d5:61:f0:67:11:01:2a:8f:8d:37:c6:b1:
f2:02:90:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F9BNW+5V5SetqycyxWQsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMmU3NmU4OTk0YjY2NjEzNzQ4ZTAyMWI1ZjQwMDdmMDFi
NTRkNGYwHhcNMjUwMTMxMTYwMDQxWhcNMjUwMjAxMTYwMDQxWjAzMTEwLwYDVQQD
Eyg3MGE3ZWZmNTJhNDA3NTE3OGU3NzZiMTRiYTg3ZGZlZWUxOWY0MWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AGZJ+G+Rm4c/kdQfkNVlvAnVMXn
Xz/ypp/ho/W+mLm213U/FCnYxMo3W3i3BCMh0D+1eXVdZnZzO/RkjBz5ZCrBXenW
KBn53fEp6mxr01cu3qF7LPsZMVlW8PwUTA5NBXS7LH/9hFgxMMWj4bH0QJlYgByF
aPGCesdIt8ockwwjN+uEkw4ktPiGvJe3jf7WSDpbmUBE0vV7LDoq0LAhe6QF3x4b
4qoOhHGGTbklb93iBiD8N8VaUPR0d+tk7ZxPqF37Ayz6uy0uS+2CWR2yG/1CYFrC
PbzyKZh4q7Pgzh7DnBc9oyU4e2XAcxMVmsIwDBfN+YU6CW1CbI0WJZM2jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCn7/UqQHUXjndrFLqH3+7hn0HrMB8GA1UdIwQY
MBaAFAIuduiZS2ZhN0jgIbX0AH8BtU1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjIt
OTcxYjBjMDY1NDYwLzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjItOTcxYjBjMDY1NDYw
LzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABv/wDec3
pDDSijeQAph7ZzQOCWwE54oJa3QHFQewH5mmbPe6O/0NNVj/datUK8M0paSyrdBu
sGx5K0QEJ+Jfnax70c++Zur9nVe67TPqpxumODKeCJ3kRPa/5B4UkQdoVsgWTwnR
c1tTzFCeK+l4DOmC04Df6dRsjwg8gVkTePwrnI7LSe7qknc5ofjkGDeart6ufxk+
KfGmJUAik7UvfVkAQz1aDNkirv+ZVxVhBto1uI56mymxadiRN5KNDp3xte9zX3rN
5uclO9n9V6MPrJzkL4Rt9XaPzM+nLA+c94fr6YDJ0QlMGFMBg0h0al3J1WHwZxEB
Ko+NN8ax8gKQUw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:30 2025 by rpki-client