Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
File: 10AeAklBizV1RyaIJPYkSSXY2zk.mft (raw, json)
Hash identifier: SUQ70PvyaxtG1GCI3Ib/NibR/lf76BDPd3sTlrPAgR4=
Subject key identifier: AB:C2:90:24:84:01:51:0C:83:9E:7D:44:23:E2:F2:F8:4C:37:0F:10
Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
Certificate issuer: /CN=d7401e0249418b357547268824f6244925d8db39
Certificate serial: 0194BD17D8D77BB15592544ED65BB894ED8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
Manifest number: 05AA
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: 10AeAklBizV1RyaIJPYkSSXY2zk.crl (hash: sOc/ADrRUqQ5YzZxWLN+S5qS7KrDUz0g2jvb6fFvf7s=)
2: Jj1HHZ3M2IWqEVr2BMPp4ypDwcI.roa (hash: cgzJBvOGYHM0ug0D/FFBZa1jcNvWqnCErJy8L2Lko1U=)
3: cBlGJ5bNODNILYzK1oNt3QzAw7M.roa (hash: 7wWvEWZaVuq+kybNFqA4kbf75m0LmBkO8WIx9pDUDFw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d8:d7:7b:b1:55:92:54:4e:d6:5b:b8:94:ed:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7401e0249418b357547268824f6244925d8db39
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=abc290248401510c839e7d4423e2f2f84c370f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f3:5f:14:d0:53:4c:ae:4f:b3:a5:8d:93:56:
28:cd:95:f7:47:ad:2e:4a:98:7e:01:dd:c8:70:0e:
46:32:3f:de:e6:07:87:f1:87:68:6a:3f:e9:03:e7:
ef:90:e0:b0:e5:b7:95:b3:f7:a0:54:c6:52:aa:a9:
be:42:c4:af:ba:37:11:3f:28:22:b0:d1:df:a9:93:
48:8c:ef:a3:bf:de:da:49:65:72:53:48:85:89:72:
f5:62:84:6b:00:bb:b3:69:11:5d:5c:1d:45:60:2c:
ba:84:ab:5a:a5:0a:94:b2:79:cf:55:7f:18:29:d5:
41:0c:53:9d:d9:c3:d0:17:47:7c:f6:1f:ee:ec:32:
d7:90:cb:8a:47:e5:0b:80:42:2c:9f:62:45:05:6f:
b1:b3:22:4a:8f:df:c4:cb:ea:e4:ab:b1:09:0e:4a:
26:b8:60:77:5b:f8:de:d2:31:66:4e:cc:e4:1f:7e:
de:5d:d7:95:b1:c2:5f:17:73:b2:db:fc:f7:4b:d6:
da:6a:77:55:bd:cc:1e:27:22:c1:50:4a:c9:da:42:
aa:1a:f2:35:d9:68:83:0c:55:ae:9a:47:97:8f:b8:
41:1b:dc:07:13:8b:d0:39:00:dd:19:75:ed:0e:f2:
8d:82:36:0d:03:26:c3:1c:24:26:10:db:78:5e:06:
50:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C2:90:24:84:01:51:0C:83:9E:7D:44:23:E2:F2:F8:4C:37:0F:10
X509v3 Authority Key Identifier:
keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:9a:e7:05:aa:2b:79:29:7c:07:fc:d6:28:a5:17:28:e2:af:
49:64:a2:fe:fb:0e:ee:be:c6:cf:ab:f7:a7:e6:ad:24:b5:2e:
e7:06:03:6d:75:b6:27:66:24:22:16:5d:40:8c:fa:ea:16:fd:
da:89:e0:ad:64:5c:21:41:17:2c:48:63:70:c0:f4:e4:43:6d:
4c:4e:4f:aa:67:22:5f:54:d0:8d:4a:8e:c9:2e:fc:5a:7e:38:
be:75:46:db:44:70:c0:4f:ae:7d:dc:bb:12:65:fb:03:99:f1:
c0:4f:a1:e1:f7:43:3f:66:29:52:11:d9:b3:b0:91:82:0b:67:
b2:b7:58:78:98:98:b0:09:f9:2c:3b:46:a1:87:8f:53:c3:a4:
f8:c9:fb:01:af:1e:3d:db:07:1a:a2:50:f3:5b:5c:58:e2:27:
48:ce:7b:e9:43:6f:76:ff:52:59:c7:eb:62:f4:2b:94:ce:93:
1c:46:2a:ca:03:5d:28:41:0b:6c:4f:2c:99:2d:33:d3:18:c4:
e5:26:2d:d1:e1:18:3d:42:75:4a:2f:87:b0:3e:bf:8d:eb:9e:
62:87:54:50:ec:0c:fb:c9:31:98:90:f2:be:2d:8f:c3:e1:c2:
90:00:53:d1:35:b2:1b:42:bd:0e:b4:09:fb:8f:cc:52:78:f5:
2b:0a:65:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F9jXe7FVklRO1lu4lO2PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDAxZTAyNDk0MThiMzU3NTQ3MjY4ODI0ZjYyNDQ5MjVk
OGRiMzkwHhcNMjUwMTMxMTYwMDQ0WhcNMjUwMjAxMTYwMDQ0WjAzMTEwLwYDVQQD
EyhhYmMyOTAyNDg0MDE1MTBjODM5ZTdkNDQyM2UyZjJmODRjMzcwZjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PNfFNBTTK5Ps6WNk1YozZX3R60u
Sph+Ad3IcA5GMj/e5geH8Ydoaj/pA+fvkOCw5beVs/egVMZSqqm+QsSvujcRPygi
sNHfqZNIjO+jv97aSWVyU0iFiXL1YoRrALuzaRFdXB1FYCy6hKtapQqUsnnPVX8Y
KdVBDFOd2cPQF0d89h/u7DLXkMuKR+ULgEIsn2JFBW+xsyJKj9/Ey+rkq7EJDkom
uGB3W/je0jFmTszkH37eXdeVscJfF3Oy2/z3S9baandVvcweJyLBUErJ2kKqGvI1
2WiDDFWumkeXj7hBG9wHE4vQOQDdGXXtDvKNgjYNAybDHCQmENt4XgZQ1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvCkCSEAVEMg559RCPi8vhMNw8QMB8GA1UdIwQY
MBaAFNdAHgJJQYs1dUcmiCT2JEkl2Ns5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kNzMxMzctYjA4OS00ZGI0LWI2YjIt
NTA3ODkxMzk1NDE3LzEvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9kNzMxMzctYjA4OS00ZGI0LWI2YjItNTA3ODkxMzk1NDE3
LzEvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA05rnBaor
eSl8B/zWKKUXKOKvSWSi/vsO7r7Gz6v3p+atJLUu5wYDbXW2J2YkIhZdQIz66hb9
2ongrWRcIUEXLEhjcMD05ENtTE5PqmciX1TQjUqOyS78Wn44vnVG20RwwE+ufdy7
EmX7A5nxwE+h4fdDP2YpUhHZs7CRggtnsrdYeJiYsAn5LDtGoYePU8Ok+Mn7Aa8e
PdsHGqJQ81tcWOInSM576UNvdv9SWcfrYvQrlM6THEYqygNdKEELbE8smS0z0xjE
5SYt0eEYPUJ1Si+HsD6/jeueYodUUOwM+8kxmJDyvi2Pw+HCkABT0TWyG0K9DrQJ
+4/MUnj1Kwpl4A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:45 2025 by rpki-client