Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
File: aWoG5FR9oBpci177cQQOXt0Qnuc.mft (raw, json)
Hash identifier: b++nPxPoula9XtXNXPLW4Mu3Y352Ym5U07+wOWeDK+o=
Subject key identifier: 9E:DF:CB:F0:3E:E4:CF:7D:27:E7:34:D6:CF:3F:26:EF:3B:7D:0F:6F
Authority key identifier: 69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
Certificate issuer: /CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Certificate serial: 0194BBCDEC71745B0C1DF6690B9044B7956B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
Manifest number: 0EA0
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: aWoG5FR9oBpci177cQQOXt0Qnuc.crl (hash: 9J2FpZhdTg8CRyhpMdyHSGYrejgvGhyZn8YXo9ew8LY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ec:71:74:5b:0c:1d:f6:69:0b:90:44:b7:95:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=9edfcbf03ee4cf7d27e734d6cf3f26ef3b7d0f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2e:ce:29:b9:2c:a3:c1:fc:e0:63:65:3d:57:
5c:fd:66:17:21:35:0a:0c:b9:c3:88:3b:66:f4:d5:
21:fa:09:b4:29:2f:55:44:3a:67:9e:1d:4f:e7:d2:
e2:4b:03:2e:aa:8c:41:71:7c:6d:37:fe:67:a3:ee:
38:25:08:ba:55:f1:6b:9e:e2:a6:3f:f3:74:d2:ac:
81:dd:90:8c:2e:1a:51:00:7e:72:05:15:25:aa:74:
e5:ed:d0:a9:e6:1f:c2:7f:d5:db:cd:93:aa:4f:47:
20:82:6f:bf:3f:fd:eb:63:99:ec:ce:df:dd:b8:8c:
b0:dc:f8:30:78:9a:f5:0f:1f:2a:88:26:b6:fb:f2:
d3:32:cd:f9:2c:4a:77:5d:a4:7f:a4:52:9e:8a:b8:
f9:85:50:0d:f1:7a:d4:33:ef:4b:81:08:1f:3c:2c:
8b:67:a3:4d:e5:87:e3:cf:14:11:a1:bf:ab:28:22:
e2:45:bf:13:5f:f8:79:b2:75:31:46:a7:df:dd:96:
f9:c3:6c:ff:d7:b8:fa:79:2e:f4:00:46:7e:ff:e1:
63:bb:f3:c0:45:54:95:8e:ae:b4:63:b6:f1:6b:9f:
f8:21:dc:0d:98:55:d6:49:1b:b4:df:a3:3a:ec:b8:
78:16:38:56:52:3d:39:e6:5f:13:0d:f6:8c:0b:42:
1f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DF:CB:F0:3E:E4:CF:7D:27:E7:34:D6:CF:3F:26:EF:3B:7D:0F:6F
X509v3 Authority Key Identifier:
keyid:69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4e:95:05:48:29:18:cd:16:ac:40:1f:03:0a:f1:db:38:a8:
bb:50:af:78:3e:1f:16:27:53:4f:29:ad:5f:a4:44:47:9a:66:
c5:51:33:4f:33:07:45:b5:2b:ee:7f:d1:60:e8:77:e6:db:44:
eb:ac:22:00:d1:c2:ee:10:38:3e:d0:1c:93:46:2e:84:e7:f9:
c3:6c:c8:e1:c1:ad:56:62:62:14:eb:e3:82:3e:7d:2c:b0:5c:
8a:8a:76:42:1d:69:a4:c9:2b:53:ef:3f:32:d8:8c:41:d3:5e:
ed:c8:e1:4a:85:0d:b9:91:6b:f5:6f:02:ce:a0:38:22:e3:88:
f6:5b:b7:45:49:82:3e:af:34:83:3b:26:ef:5e:35:13:2e:ec:
fe:57:2c:d3:8c:b7:d5:f8:a5:04:3f:b3:50:bc:5f:90:7e:ea:
16:2e:78:c4:8b:1c:5c:dc:e0:48:82:00:1d:bc:33:d3:b6:e4:
c0:41:35:60:b2:ad:9d:9d:dc:dc:19:26:b7:a9:d5:64:60:ff:
c4:14:bf:e8:47:c1:66:d6:91:1d:53:dc:47:3f:1c:b3:5b:42:
ef:32:b5:a0:97:ee:34:37:62:75:c4:2b:2f:a5:9a:66:f7:c7:
e1:64:f7:ff:dd:bb:4d:b4:9f:e0:53:97:0b:46:2f:1d:55:ad:
f5:37:81:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zexxdFsMHfZpC5BEt5VrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NmEwNmU0NTQ3ZGEwMWE1YzhiNWVmYjcxMDQwZTVlZGQx
MDllZTcwHhcNMjUwMTMxMTAwMDIyWhcNMjUwMjAxMTAwMDIyWjAzMTEwLwYDVQQD
Eyg5ZWRmY2JmMDNlZTRjZjdkMjdlNzM0ZDZjZjNmMjZlZjNiN2QwZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly7OKbkso8H84GNlPVdc/WYXITUK
DLnDiDtm9NUh+gm0KS9VRDpnnh1P59LiSwMuqoxBcXxtN/5no+44JQi6VfFrnuKm
P/N00qyB3ZCMLhpRAH5yBRUlqnTl7dCp5h/Cf9XbzZOqT0cggm+/P/3rY5nszt/d
uIyw3PgweJr1Dx8qiCa2+/LTMs35LEp3XaR/pFKeirj5hVAN8XrUM+9LgQgfPCyL
Z6NN5YfjzxQRob+rKCLiRb8TX/h5snUxRqff3Zb5w2z/17j6eS70AEZ+/+Fju/PA
RVSVjq60Y7bxa5/4IdwNmFXWSRu036M67Lh4FjhWUj055l8TDfaMC0IfswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7fy/A+5M99J+c01s8/Ju87fQ9vMB8GA1UdIwQY
MBaAFGlqBuRUfaAaXIte+3EEDl7dEJ7nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdvRzVGUjlvQnBjaTE3N2NRUU9YdDBRbnVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85MDAzODUtZDg1Mi00ZmYzLWEyYTIt
NjJkZjkzYmM2NGRjLzEvYVdvRzVGUjlvQnBjaTE3N2NRUU9YdDBRbnVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS85MDAzODUtZDg1Mi00ZmYzLWEyYTItNjJkZjkzYmM2NGRj
LzEvYVdvRzVGUjlvQnBjaTE3N2NRUU9YdDBRbnVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIk6VBUgp
GM0WrEAfAwrx2ziou1CveD4fFidTTymtX6RER5pmxVEzTzMHRbUr7n/RYOh35ttE
66wiANHC7hA4PtAck0YuhOf5w2zI4cGtVmJiFOvjgj59LLBciop2Qh1ppMkrU+8/
MtiMQdNe7cjhSoUNuZFr9W8CzqA4IuOI9lu3RUmCPq80gzsm7141Ey7s/lcs04y3
1filBD+zULxfkH7qFi54xIscXNzgSIIAHbwz07bkwEE1YLKtnZ3c3Bkmt6nVZGD/
xBS/6EfBZtaRHVPcRz8cs1tC7zK1oJfuNDdidcQrL6WaZvfH4WT3/927TbSf4FOX
C0YvHVWt9TeByg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:43 2025 by rpki-client