Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
File: aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft (raw, json)
Hash identifier: LvlMjzh4vB8RPglLyM1XCMOe8VzCS3UXxXwGs+QLORc=
Subject key identifier: 74:9E:85:ED:4E:B9:4D:E9:E7:3C:7E:8A:71:D0:DB:6F:24:8A:ED:E6
Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Certificate issuer: /CN=699710a1693710ac835f0b6745f90d2d680a1200
Certificate serial: 0194BD857AAF44D1A58F6A7C27D847992F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl (hash: loxdOkk76TWwl+1GL2HHn5XfaQS9xSRqpDJPgO4gyeA=)
2: koGXGlmTeestynS-D79F1iRgKe8.roa (hash: t/wGg6Ba4t68swMex8wPDhVXcBtDTQUAFrp4xf0H+oE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7a:af:44:d1:a5:8f:6a:7c:27:d8:47:99:2f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=749e85ed4eb94de9e73c7e8a71d0db6f248aede6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:4c:cb:42:4b:cf:3c:7d:73:e9:99:fc:ef:
61:b5:12:3f:80:73:69:d5:94:22:d8:76:8d:e8:67:
d1:dc:ed:e7:a6:33:4a:12:e9:7f:8f:ca:2d:a8:e2:
37:17:f9:46:74:2d:a3:76:b6:88:e2:75:b9:d2:10:
4c:0f:c4:7a:9e:09:60:e3:b1:10:d7:7e:71:c5:61:
5a:2b:ab:94:cb:4b:da:79:04:40:bd:09:a2:2c:85:
d2:a2:a9:07:d1:07:b4:80:4c:08:fe:8b:92:3d:db:
9b:54:bc:a4:1a:61:30:2f:dd:71:ca:77:d7:60:5e:
f5:0b:55:48:32:be:c8:6d:05:04:17:c0:32:5d:92:
91:98:50:a2:77:09:18:66:1d:2b:2e:e8:98:25:e6:
dc:e2:08:77:3b:ad:c9:61:d5:c7:b2:bc:70:2c:6b:
0e:45:29:30:8f:a5:ea:00:9b:39:32:54:a1:33:2b:
c6:eb:dc:e6:13:13:d4:db:95:6b:02:d8:7e:ad:f5:
7a:1e:a9:41:be:bb:71:a2:ed:f0:4d:b4:ab:a8:de:
23:b7:22:86:00:9d:78:bb:76:bf:92:01:f9:1d:7f:
e1:53:4a:2b:08:eb:5a:44:b1:4d:bc:57:ac:88:f9:
86:97:af:7d:3d:b0:ff:8d:fb:35:30:2a:58:e8:ba:
4c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9E:85:ED:4E:B9:4D:E9:E7:3C:7E:8A:71:D0:DB:6F:24:8A:ED:E6
X509v3 Authority Key Identifier:
keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:64:95:f3:b5:87:39:f4:5d:47:7c:93:21:7e:1f:1e:87:16:
0f:90:97:4d:f5:77:bf:41:12:e3:8a:d1:73:e8:56:22:b4:b3:
39:a3:9d:d9:ea:f9:64:67:d3:39:45:cc:fc:d9:42:f7:16:02:
16:77:98:17:80:31:f5:bd:fd:7e:87:ba:e0:0b:ca:b5:26:f0:
4d:57:fa:cd:9d:7d:95:e1:9c:7e:7e:30:03:40:ff:32:46:ca:
a6:81:42:27:98:de:6d:be:2c:1c:9d:e0:78:91:0f:73:b4:ee:
d8:9a:79:c7:d4:69:34:a1:e6:2c:5f:ff:88:04:60:db:bf:d2:
a0:a0:3b:a1:9c:81:c2:55:07:db:c7:63:55:d6:4c:f7:98:12:
88:ab:d0:b8:4c:b5:58:de:a1:93:16:1d:da:1f:d9:6d:f8:58:
6a:66:89:c5:06:96:fa:fb:31:a1:e9:c8:7b:54:ac:1d:97:58:
38:b8:5c:a9:1f:a9:e6:bb:5b:41:c9:b4:28:03:57:75:89:d3:
19:38:10:22:4a:75:0f:3e:ec:64:47:e5:47:48:ff:7d:a5:23:
bb:c2:8e:ed:73:45:86:a7:ca:51:54:12:4b:68:c1:96:f5:a2:
cc:5f:0b:94:ae:96:59:ac:80:6f:c0:9f:17:53:75:25:f2:5f:
cf:0e:77:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXqvRNGlj2p8J9hHmS9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTcxMGExNjkzNzEwYWM4MzVmMGI2NzQ1ZjkwZDJkNjgw
YTEyMDAwHhcNMjUwMTMxMTgwMDI4WhcNMjUwMjAxMTgwMDI4WjAzMTEwLwYDVQQD
Eyg3NDllODVlZDRlYjk0ZGU5ZTczYzdlOGE3MWQwZGI2ZjI0OGFlZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaZMy0JLzzx9c+mZ/O9htRI/gHNp
1ZQi2HaN6GfR3O3npjNKEul/j8otqOI3F/lGdC2jdraI4nW50hBMD8R6nglg47EQ
135xxWFaK6uUy0vaeQRAvQmiLIXSoqkH0Qe0gEwI/ouSPdubVLykGmEwL91xynfX
YF71C1VIMr7IbQUEF8AyXZKRmFCidwkYZh0rLuiYJebc4gh3O63JYdXHsrxwLGsO
RSkwj6XqAJs5MlShMyvG69zmExPU25VrAth+rfV6HqlBvrtxou3wTbSrqN4jtyKG
AJ14u3a/kgH5HX/hU0orCOtaRLFNvFesiPmGl699PbD/jfs1MCpY6LpM3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSehe1OuU3p5zx+inHQ228kiu3mMB8GA1UdIwQY
MBaAFGmXEKFpNxCsg18LZ0X5DS1oChIAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpjUW9XazNFS3lEWHd0blJma05MV2dLRWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wNzc0NWMtNDdjMS00MDAyLTk1MGYt
MjliOThlY2RmZjEyLzEvYVpjUW9XazNFS3lEWHd0blJma05MV2dLRWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8wNzc0NWMtNDdjMS00MDAyLTk1MGYtMjliOThlY2RmZjEy
LzEvYVpjUW9XazNFS3lEWHd0blJma05MV2dLRWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2SV87WH
OfRdR3yTIX4fHocWD5CXTfV3v0ES44rRc+hWIrSzOaOd2er5ZGfTOUXM/NlC9xYC
FneYF4Ax9b39foe64AvKtSbwTVf6zZ19leGcfn4wA0D/MkbKpoFCJ5jebb4sHJ3g
eJEPc7Tu2Jp5x9RpNKHmLF//iARg27/SoKA7oZyBwlUH28djVdZM95gSiKvQuEy1
WN6hkxYd2h/ZbfhYamaJxQaW+vsxoenIe1SsHZdYOLhcqR+p5rtbQcm0KANXdYnT
GTgQIkp1Dz7sZEflR0j/faUju8KO7XNFhqfKUVQSS2jBlvWizF8LlK6WWayAb8Cf
F1N1JfJfzw536Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:07 2025 by rpki-client