Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: pTAjSoW4A/JFGwyDAdszG4MGnZsPlzP7KU7gF5ay8iY=
Subject key identifier: 25:14:99:C1:4B:70:54:03:BC:D3:00:56:F6:CD:D8:1F:C5:C8:CF:EB
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 0194BD854D317F3660E3C1BEF8815B263C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 1446
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: 6VwRzGeN7Aw-2-kYrAIearsgeJI.roa (hash: 1RBt0EOiw+gmhCcV4qD8Gl3QveqKsX3A4AQ+JvudWRY=)
2: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: mk23bCoTmkCy9litggSYyn/CBWmow3pImhprWZwt5FQ=)
3: JCW68n0UPKZzTNycehy0nOKt_SQ.roa (hash: xagTy4CETOR7QjlY2gwlZcZ/87Osop33VWrjyllfqWE=)
4: L28NpBoao3Pa3xUMhUeIlTWycwI.roa (hash: JJ0Hw6tLmgmw+4N0PuUc739/Jd0W5Amgk51pa7BbiAk=)
5: VVRY07iRTEEycoKIAJjRSdP3o6g.roa (hash: QFJZLz+BqIPUbLAJZm4UbjmkbfUJbRCSYAqaN0ZNqjE=)
6: e423f_-NPWho20AuEAOYRpyN6jM.roa (hash: tXv/VSvWDPTQ0prFPO2ksP8QPbj+CoxENFkaBtfDf3U=)
7: nPAKjAAoFG29o9HUftfFBEfMFCA.roa (hash: GUJpwCvRmlnfqQiht/UJ9wNSb1SaXrQjJ5l7dujYT70=)
8: pOqffGGCQYYN_siJmYMpXmSRmg0.roa (hash: Acfh5YPvoqcizngQKdjsqWY7Hx9vwBTM5cRSt1VSioY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4d:31:7f:36:60:e3:c1:be:f8:81:5b:26:3c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=251499c14b705403bcd30056f6cdd81fc5c8cfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:a9:88:43:fb:22:91:b0:fb:a5:4f:3f:4d:
cb:9a:08:80:6d:ab:b7:fb:48:9a:8a:39:31:d5:8e:
18:cb:8b:05:ea:db:4e:f4:72:40:34:be:c2:8a:dd:
bc:93:c4:44:f5:2b:39:52:07:1e:8a:6e:59:0f:02:
3d:96:92:7f:1f:05:a2:68:ea:e2:f6:de:d5:ff:d3:
18:36:5c:31:e1:b2:51:95:7e:a8:39:4d:23:2b:f9:
99:a4:e9:6d:3c:ac:7f:d7:cd:b8:bd:c8:35:79:4a:
f1:a2:74:59:80:82:d1:2a:44:be:10:61:48:1c:a6:
3b:47:bd:5f:eb:f4:67:b9:e8:52:6b:dd:86:48:66:
42:d5:51:5d:0c:a8:3c:e9:02:30:75:5b:6f:bc:e3:
10:2e:0b:cd:93:d7:78:76:cd:c5:c8:82:55:a1:39:
2e:0d:2f:87:09:38:55:15:98:e9:c3:a0:12:58:17:
5a:e2:7d:1d:5e:ef:77:eb:81:c7:b3:bd:38:db:4e:
6f:b4:59:9e:cc:f5:9b:9b:c3:43:1c:b2:79:18:b3:
e6:9c:91:c3:61:d9:93:0f:92:fd:08:68:4e:a7:bb:
6c:41:d7:54:f4:0a:10:1e:ba:16:57:54:16:e4:f8:
e8:f7:6a:53:48:b9:ff:0e:2d:f8:67:5d:d4:a9:d7:
01:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:14:99:C1:4B:70:54:03:BC:D3:00:56:F6:CD:D8:1F:C5:C8:CF:EB
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7a:b9:32:b7:8c:e3:07:c7:a1:b2:a8:e5:a4:c4:3c:6f:4d:
d8:ac:29:26:e1:da:33:81:c0:31:9f:70:df:2b:92:6b:27:4c:
20:31:7a:dd:a0:62:28:77:0e:fa:bf:e0:65:f7:7c:5d:23:dd:
2f:7a:d9:7a:95:4b:6f:89:80:11:e1:61:18:78:1c:de:ca:06:
40:40:75:50:7f:59:22:db:51:2d:9c:e1:3d:63:de:d3:c5:42:
78:0b:fc:53:b6:d3:21:8f:a1:f8:1c:70:ed:38:56:fb:fe:5a:
4a:7d:39:77:4e:28:85:79:38:64:c3:c0:94:9f:dd:dd:c6:65:
43:53:5c:dd:60:ac:67:22:c3:57:1a:88:a0:7e:05:6b:a7:93:
d3:09:a8:39:1e:33:5e:57:9e:f2:2e:6d:04:2f:7f:c1:c4:07:
9e:f0:47:f6:b1:9d:b8:a8:58:64:a9:48:4c:ad:62:00:d0:fc:
be:ce:d9:71:70:1b:72:70:d5:75:99:9d:83:39:35:4c:d8:72:
50:62:55:55:fd:1b:61:6d:3b:99:75:11:a9:47:3f:2f:d2:2e:
57:bd:d7:1d:20:0d:b0:e7:06:44:f7:51:f0:6d:7f:d3:c4:7f:
31:28:ef:91:b5:3b:83:59:ac:b0:a9:59:2a:59:c2:47:9b:42:
0f:06:65:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hU0xfzZg48G++IFbJjxwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNzBhMTY5YjZjZDQxMTAyMjI3OWU5ZmY5OTdmMTM0ZmY1
NGFiMWMwHhcNMjUwMTMxMTgwMDE3WhcNMjUwMjAxMTgwMDE3WjAzMTEwLwYDVQQD
EygyNTE0OTljMTRiNzA1NDAzYmNkMzAwNTZmNmNkZDgxZmM1YzhjZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy6piEP7IpGw+6VPP03LmgiAbau3
+0iaijkx1Y4Yy4sF6ttO9HJANL7Cit28k8RE9Ss5Ugceim5ZDwI9lpJ/HwWiaOri
9t7V/9MYNlwx4bJRlX6oOU0jK/mZpOltPKx/1824vcg1eUrxonRZgILRKkS+EGFI
HKY7R71f6/RnuehSa92GSGZC1VFdDKg86QIwdVtvvOMQLgvNk9d4ds3FyIJVoTku
DS+HCThVFZjpw6ASWBda4n0dXu9364HHs704205vtFmezPWbm8NDHLJ5GLPmnJHD
YdmTD5L9CGhOp7tsQddU9AoQHroWV1QW5Pjo92pTSLn/Di34Z13UqdcBhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUUmcFLcFQDvNMAVvbN2B/FyM/rMB8GA1UdIwQY
MBaAFAFwoWm2zUEQIieen/mX8TT/VKscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEt
N2Q0YmIyMzgwNDg3LzEvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEtN2Q0YmIyMzgwNDg3
LzEvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHq5MreM
4wfHobKo5aTEPG9N2KwpJuHaM4HAMZ9w3yuSaydMIDF63aBiKHcO+r/gZfd8XSPd
L3rZepVLb4mAEeFhGHgc3soGQEB1UH9ZIttRLZzhPWPe08VCeAv8U7bTIY+h+Bxw
7ThW+/5aSn05d04ohXk4ZMPAlJ/d3cZlQ1Nc3WCsZyLDVxqIoH4Fa6eT0wmoOR4z
Xlee8i5tBC9/wcQHnvBH9rGduKhYZKlITK1iAND8vs7ZcXAbcnDVdZmdgzk1TNhy
UGJVVf0bYW07mXURqUc/L9IuV73XHSANsOcGRPdR8G1/08R/MSjvkbU7g1mssKlZ
KlnCR5tCDwZlVQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:35:25 2025 by rpki-client