Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft
File: aEdQ3w66d01LTWROyOM1CPj1OP4.mft (raw, json)
Hash identifier: FhOELLGEmYB3EtxDtJQpE3fxCJzDUdZATdbXjwcC86E=
Subject key identifier: 72:DA:C7:B1:35:68:84:65:A7:DD:3A:54:11:6C:8C:7C:EA:1E:A1:54
Authority key identifier: 68:47:50:DF:0E:BA:77:4D:4B:4D:64:4E:C8:E3:35:08:F8:F5:38:FE
Certificate issuer: /CN=684750df0eba774d4b4d644ec8e33508f8f538fe
Certificate serial: 0194BC729A41E505C8CEECDF177E0A896905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEdQ3w66d01LTWROyOM1CPj1OP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft
Manifest number: 04D3
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: aEdQ3w66d01LTWROyOM1CPj1OP4.crl (hash: s/TuJHKfo/UCKwfB1MzQUNf+2YTQPpu4HfVdPgpUQ7w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9a:41:e5:05:c8:ce:ec:df:17:7e:0a:89:69:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684750df0eba774d4b4d644ec8e33508f8f538fe
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=72dac7b135688465a7dd3a54116c8c7cea1ea154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:dd:d6:a1:a4:67:9e:0d:b5:8c:1e:d4:57:
54:03:bc:fc:61:a8:4c:1d:0a:43:ba:86:71:d4:c3:
c1:2e:43:8a:b5:d7:d4:98:db:08:5e:2a:9e:6b:59:
39:6c:ef:d3:fb:92:70:15:d0:1c:09:00:31:e6:43:
5b:7d:4e:3b:22:dc:c4:67:96:82:2b:3b:9a:5c:0f:
91:3f:5f:eb:7f:d8:83:76:60:c1:b9:e2:49:c9:d9:
5f:c2:11:04:2c:af:c0:a2:94:ce:c3:cb:28:9c:51:
f7:c5:22:a6:06:ae:53:c8:0e:2f:3c:b4:68:38:bb:
aa:fe:21:d1:21:51:97:8a:3c:66:98:63:94:f6:9c:
31:56:7b:20:17:1c:a4:15:22:69:ee:fb:69:d7:b1:
d8:3e:93:8c:47:b8:e2:05:b6:35:b4:22:3b:7a:4c:
34:50:ec:5a:89:8f:34:f8:d0:c4:d1:ec:c5:c1:a2:
9f:e2:de:98:a5:6c:87:07:9a:d3:e7:c9:7c:2b:82:
fb:67:ee:cd:92:47:43:d1:f9:7f:5c:3c:29:9e:23:
b3:b0:f7:00:05:56:f5:97:72:36:54:3a:7d:bf:ab:
60:d9:c8:b2:47:31:9a:0e:e9:3e:fe:1e:77:01:41:
d6:38:ba:e3:4c:cf:20:c4:48:7a:c3:a3:b1:f0:9b:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DA:C7:B1:35:68:84:65:A7:DD:3A:54:11:6C:8C:7C:EA:1E:A1:54
X509v3 Authority Key Identifier:
keyid:68:47:50:DF:0E:BA:77:4D:4B:4D:64:4E:C8:E3:35:08:F8:F5:38:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEdQ3w66d01LTWROyOM1CPj1OP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:25:5c:75:71:b0:1e:f3:52:19:47:1a:22:d8:c2:98:ff:ed:
49:35:7d:19:75:7c:80:b5:11:4d:73:5a:b4:8b:c9:39:78:1e:
60:c7:66:24:e0:28:e2:1e:c2:83:9a:1f:64:e4:1e:98:e9:80:
0b:8c:8d:a4:c8:95:a3:4c:97:34:f9:fa:b4:58:ec:5d:c5:8c:
35:e4:4c:8d:9f:a1:b2:ba:b9:71:14:86:bc:d5:30:fb:6c:42:
d6:94:0a:96:b3:62:d3:35:6b:df:de:a9:9b:d0:09:ae:58:34:
42:d8:9b:c7:da:bd:9a:28:27:44:28:91:8b:38:74:70:d7:b0:
e1:cf:09:78:2a:42:43:d8:db:2a:74:92:e2:aa:15:68:4e:1c:
0d:4d:00:5d:09:51:9c:9b:81:b0:bd:4e:46:7c:64:2b:9b:bf:
2f:bb:80:4d:89:da:38:ac:6d:76:03:02:32:e4:c0:67:e8:5a:
31:32:23:51:0d:26:9c:24:a3:a3:bb:2d:a4:1b:2e:07:b7:a5:
21:0f:1d:d7:92:d5:55:13:fc:ff:ec:17:f2:dd:02:1b:0d:dc:
6f:96:98:fa:82:11:5c:e3:25:76:45:6b:a8:54:d4:7f:67:ea:
22:22:5e:d4:b5:19:c0:fa:b9:ab:e8:c5:0a:b5:89:bb:1f:6a:
c0:e8:d5:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cppB5QXIzuzfF34KiWkFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NDc1MGRmMGViYTc3NGQ0YjRkNjQ0ZWM4ZTMzNTA4Zjhm
NTM4ZmUwHhcNMjUwMTMxMTMwMDE0WhcNMjUwMjAxMTMwMDE0WjAzMTEwLwYDVQQD
Eyg3MmRhYzdiMTM1Njg4NDY1YTdkZDNhNTQxMTZjOGM3Y2VhMWVhMTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTjd1qGkZ54NtYwe1FdUA7z8YahM
HQpDuoZx1MPBLkOKtdfUmNsIXiqea1k5bO/T+5JwFdAcCQAx5kNbfU47ItzEZ5aC
KzuaXA+RP1/rf9iDdmDBueJJydlfwhEELK/AopTOw8sonFH3xSKmBq5TyA4vPLRo
OLuq/iHRIVGXijxmmGOU9pwxVnsgFxykFSJp7vtp17HYPpOMR7jiBbY1tCI7ekw0
UOxaiY80+NDE0ezFwaKf4t6YpWyHB5rT58l8K4L7Z+7NkkdD0fl/XDwpniOzsPcA
BVb1l3I2VDp9v6tg2ciyRzGaDuk+/h53AUHWOLrjTM8gxEh6w6Ox8JufUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLax7E1aIRlp906VBFsjHzqHqFUMB8GA1UdIwQY
MBaAFGhHUN8OundNS01kTsjjNQj49Tj+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUVkUTN3NjZkMDFMVFdST3lPTTFDUGoxT1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85OTAxZmUtNTJjMS00ZDViLTllMGYt
ZDMyNWY2ODYzMzQzLzEvYUVkUTN3NjZkMDFMVFdST3lPTTFDUGoxT1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85OTAxZmUtNTJjMS00ZDViLTllMGYtZDMyNWY2ODYzMzQz
LzEvYUVkUTN3NjZkMDFMVFdST3lPTTFDUGoxT1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSVcdXGw
HvNSGUcaItjCmP/tSTV9GXV8gLURTXNatIvJOXgeYMdmJOAo4h7Cg5ofZOQemOmA
C4yNpMiVo0yXNPn6tFjsXcWMNeRMjZ+hsrq5cRSGvNUw+2xC1pQKlrNi0zVr396p
m9AJrlg0Qtibx9q9mignRCiRizh0cNew4c8JeCpCQ9jbKnSS4qoVaE4cDU0AXQlR
nJuBsL1ORnxkK5u/L7uATYnaOKxtdgMCMuTAZ+haMTIjUQ0mnCSjo7stpBsuB7el
IQ8d15LVVRP8/+wX8t0CGw3cb5aY+oIRXOMldkVrqFTUf2fqIiJe1LUZwPq5q+jF
CrWJux9qwOjV3A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:38:05 2025 by rpki-client