Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier: MuoSUPZOY0vH4cH0MNvBeAPkEHYoUcOPh+aeCSV0m2c=
Subject key identifier: EE:A5:BE:99:35:3C:DF:D4:4F:2D:CD:67:92:17:5E:A8:75:3B:0F:73
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial: 0194BC72A1528E3811E1163393E11B7F5C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: ifCpvfAVZ1zz4wSNm3vRSxCSZv1U+3oa+CLkcCnrcSc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a1:52:8e:38:11:e1:16:33:93:e1:1b:7f:5c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=eea5be99353cdfd44f2dcd6792175ea8753b0f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9c:4c:e4:62:89:20:67:25:be:f7:9c:2a:3f:
75:1b:4a:49:39:5c:40:22:f6:2a:18:c8:5b:00:34:
5f:a4:ef:a6:af:e7:e6:e7:24:db:de:7f:aa:a6:f8:
eb:b5:b9:97:8e:7f:d4:96:d6:47:62:46:b7:bc:c9:
09:7b:4f:c9:70:0c:6c:cf:58:50:64:96:1d:5a:13:
98:2f:f7:e6:0e:3a:8b:47:4d:a7:c5:dc:3b:13:3c:
cf:42:e4:59:9e:89:49:bc:b5:ea:9e:a5:22:bc:69:
47:8c:43:54:fa:ed:79:2f:27:08:90:e4:d1:ea:3b:
1b:17:58:11:c7:18:71:db:35:bd:19:94:58:a0:c4:
28:e1:71:5f:5b:3b:78:27:03:ff:cc:ec:f2:4c:2f:
c8:ec:81:25:e4:ac:62:8c:b2:d3:97:da:83:63:72:
91:ae:a1:8a:db:24:cf:b1:b2:1d:22:90:29:f5:20:
31:7e:2b:b6:8f:f0:3a:c4:25:1a:29:c9:81:56:2f:
c3:b0:d6:fd:41:5c:f0:50:f2:26:e3:84:44:62:aa:
fe:3b:71:3e:0a:be:1e:29:64:6d:f5:05:7a:07:36:
aa:0d:84:7c:dd:f3:c6:c0:f6:57:a3:7a:f3:61:cc:
bc:f1:1f:e7:c5:f0:e6:f3:34:14:94:76:eb:ff:ba:
66:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A5:BE:99:35:3C:DF:D4:4F:2D:CD:67:92:17:5E:A8:75:3B:0F:73
X509v3 Authority Key Identifier:
keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:65:6e:f0:57:dc:3f:7c:be:a1:44:13:5f:1a:ca:ac:e2:ea:
c9:69:62:f6:1c:eb:f2:1c:5c:bb:de:15:da:e9:b7:ca:40:80:
28:9a:5b:65:76:69:c6:3c:c3:d6:1f:aa:eb:6d:68:b1:42:b9:
ba:84:55:3a:e5:2d:cc:83:54:08:f3:9e:b5:1c:e4:fb:30:fe:
30:06:0b:f1:e7:9f:d6:7b:46:70:3b:ec:7a:a1:f8:1f:12:26:
9e:e1:47:d0:04:07:82:36:6f:7b:bf:8b:d2:9f:12:2a:76:5f:
d0:c6:29:87:76:2c:21:b6:d3:01:f6:f2:e0:09:7e:0e:c5:c9:
b2:bf:cd:84:2b:5d:56:0b:75:b0:6b:08:87:89:ff:ce:d5:0c:
d6:93:19:ea:04:e2:18:bf:43:72:6c:73:5e:6f:10:0f:54:cd:
b9:4a:90:70:45:4f:4e:f0:ee:15:ac:f7:58:92:e3:8f:d2:d0:
4c:c4:93:12:86:79:5e:0e:20:61:c1:c6:3e:d0:ac:0a:77:67:
9b:73:53:24:46:16:30:33:b0:08:88:41:09:7b:b3:46:67:83:
18:b3:6f:35:f8:07:47:a7:3b:63:8d:9c:fa:2b:1f:f1:ad:75:
f9:11:8a:08:d6:d9:92:33:71:4f:63:e0:88:82:a9:99:07:dd:
ee:86:86:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqFSjjgR4RYzk+Ebf1yYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMDA2ZDVlMGMyNzkzMTFkMWE4MWZkMGJiZDIxMGQwYmRh
ZDU5NDIwHhcNMjUwMTMxMTMwMDE2WhcNMjUwMjAxMTMwMDE2WjAzMTEwLwYDVQQD
EyhlZWE1YmU5OTM1M2NkZmQ0NGYyZGNkNjc5MjE3NWVhODc1M2IwZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35xM5GKJIGclvvecKj91G0pJOVxA
IvYqGMhbADRfpO+mr+fm5yTb3n+qpvjrtbmXjn/UltZHYka3vMkJe0/JcAxsz1hQ
ZJYdWhOYL/fmDjqLR02nxdw7EzzPQuRZnolJvLXqnqUivGlHjENU+u15LycIkOTR
6jsbF1gRxxhx2zW9GZRYoMQo4XFfWzt4JwP/zOzyTC/I7IEl5KxijLLTl9qDY3KR
rqGK2yTPsbIdIpAp9SAxfiu2j/A6xCUaKcmBVi/DsNb9QVzwUPIm44REYqr+O3E+
Cr4eKWRt9QV6BzaqDYR83fPGwPZXo3rzYcy88R/nxfDm8zQUlHbr/7pmnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6lvpk1PN/UTy3NZ5IXXqh1Ow9zMB8GA1UdIwQY
MBaAFAAAbV4MJ5MR0agf0LvSENC9rVlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFCdFhnd25reEhScUJfUXU5SVEwTDJ0V1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85N2I3ZDAtODM4My00YTM3LThjY2Ut
MWY5MThkOTM3NTZmLzEvQUFCdFhnd25reEhScUJfUXU5SVEwTDJ0V1VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85N2I3ZDAtODM4My00YTM3LThjY2UtMWY5MThkOTM3NTZm
LzEvQUFCdFhnd25reEhScUJfUXU5SVEwTDJ0V1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2Vu8Ffc
P3y+oUQTXxrKrOLqyWli9hzr8hxcu94V2um3ykCAKJpbZXZpxjzD1h+q621osUK5
uoRVOuUtzINUCPOetRzk+zD+MAYL8eef1ntGcDvseqH4HxImnuFH0AQHgjZve7+L
0p8SKnZf0MYph3YsIbbTAfby4Al+DsXJsr/NhCtdVgt1sGsIh4n/ztUM1pMZ6gTi
GL9DcmxzXm8QD1TNuUqQcEVPTvDuFaz3WJLjj9LQTMSTEoZ5Xg4gYcHGPtCsCndn
m3NTJEYWMDOwCIhBCXuzRmeDGLNvNfgHR6c7Y42c+isf8a11+RGKCNbZkjNxT2Pg
iIKpmQfd7oaGKQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:17 2025 by rpki-client