Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier: kOve4ADmqYnrWAnCWRkuCdEmwjXPShMCGAZLIyyNNa8=
Subject key identifier: 7D:CC:41:98:26:AC:46:EE:EB:E0:32:E0:44:A6:68:6A:85:85:A5:D3
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 0194BC3BF4581DEAFDBB33CA2117D7090094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number: 058C
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: pXNVTOMdvkUaki4gVtzWr8r9LwcNu8rJw64NdCAaF/4=)
2: F0fLEPNHCyvyIlmIFcsqkPyplGA.roa (hash: km4WfLRxUHxr5HonrrBoTZPZXAmt4eVnZ393OPRJNmw=)
3: I52JmxS8ms2LXewaNvexpBIItdM.roa (hash: wE72dqwKEdun5Ic36ck9eG0u4nkqju4VoFB4cJuV7v0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f4:58:1d:ea:fd:bb:33:ca:21:17:d7:09:00:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=7dcc419826ac46eeebe032e044a6686a8585a5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:77:5d:dc:e0:33:9a:8b:d7:14:f9:f8:7b:a7:
42:4f:ef:bd:f1:58:aa:e2:57:03:3a:af:3b:8f:96:
ff:8a:13:d2:e6:87:fd:96:2a:58:4e:de:88:c6:f8:
a4:82:27:f4:11:e4:b4:32:f3:a0:19:74:36:7d:ca:
1b:ec:66:4e:cb:43:e0:31:e6:2f:fe:90:65:40:31:
cf:52:1b:eb:0e:60:15:be:29:6a:ff:92:5a:f3:3a:
8d:54:80:27:8e:f0:90:e7:28:99:d0:fe:05:d9:08:
42:45:ae:6a:c9:44:f7:50:4f:51:ca:af:7d:81:fb:
65:e2:1e:10:83:a4:28:8e:12:09:57:e7:28:44:6e:
e1:21:d6:f8:c0:b8:04:a4:cd:01:fc:0f:13:0d:3c:
64:ca:e5:ea:2d:e1:c3:29:e5:c9:93:15:da:65:5e:
e3:94:9d:df:fb:10:d8:16:0e:d4:05:40:5a:e2:19:
d6:a4:db:c4:e6:ef:d1:55:90:4c:94:e3:3c:d1:4f:
ed:85:5f:98:63:50:38:f6:b2:a2:0b:d6:bb:13:07:
8b:5c:6e:2e:46:9c:33:32:13:06:c1:07:44:ac:2d:
e4:fc:ad:7c:44:3f:dd:96:e3:57:02:19:f9:5b:fd:
a4:88:42:81:e0:32:7f:03:c6:02:3b:cf:43:81:b2:
fa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CC:41:98:26:AC:46:EE:EB:E0:32:E0:44:A6:68:6A:85:85:A5:D3
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bd:9c:6a:d5:9b:c0:ba:a0:0b:b0:a5:48:05:22:b1:b3:ba:
fd:0b:03:78:b6:a4:6e:27:dd:b3:26:16:d6:42:46:98:52:d3:
e4:c8:f7:d9:c8:be:f1:57:73:7b:de:d1:6f:08:3d:f6:b4:f4:
fd:76:cd:e6:43:4d:6e:3d:73:b5:97:cf:4c:9d:52:fd:e8:6e:
e0:2b:db:f4:2b:4e:e0:39:09:5c:5b:19:8b:c9:bb:b8:ad:d7:
37:13:1c:4e:23:db:f1:00:6a:97:cd:33:f7:07:6e:44:e6:ad:
1d:42:2d:23:15:78:e3:a7:f3:65:f0:bf:2d:79:42:03:18:35:
a1:39:f6:c3:82:7a:b2:4c:16:3d:de:1c:a1:cb:3e:68:00:16:
13:0f:fe:c9:79:25:93:6a:70:ba:da:ef:72:67:be:b5:1d:df:
65:6e:b2:19:93:45:eb:5c:27:8d:5a:1b:2a:f7:4f:96:ab:ab:
2c:34:59:bd:5e:ba:e6:9c:f8:87:f0:94:1a:ee:c3:46:21:88:
ef:ae:c9:f4:51:71:f7:be:97:f7:e8:60:6b:e2:7b:8a:24:00:
06:29:08:25:14:f2:c2:91:f9:50:28:a3:fe:36:7e:f1:e3:61:
94:af:6f:96:7e:87:b5:d0:86:14:e7:b4:97:a6:dc:18:b5:96:
c2:a4:57:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/RYHer9uzPKIRfXCQCUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDExNTQ0NjJlNWFkY2NhOWQyYmNiZDE0NDNmY2M2Mzc4
Nzk1MzcwHhcNMjUwMTMxMTIwMDMzWhcNMjUwMjAxMTIwMDMzWjAzMTEwLwYDVQQD
Eyg3ZGNjNDE5ODI2YWM0NmVlZWJlMDMyZTA0NGE2Njg2YTg1ODVhNWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXdd3OAzmovXFPn4e6dCT++98Viq
4lcDOq87j5b/ihPS5of9lipYTt6Ixvikgif0EeS0MvOgGXQ2fcob7GZOy0PgMeYv
/pBlQDHPUhvrDmAVvilq/5Ja8zqNVIAnjvCQ5yiZ0P4F2QhCRa5qyUT3UE9Ryq99
gftl4h4Qg6QojhIJV+coRG7hIdb4wLgEpM0B/A8TDTxkyuXqLeHDKeXJkxXaZV7j
lJ3f+xDYFg7UBUBa4hnWpNvE5u/RVZBMlOM80U/thV+YY1A49rKiC9a7EweLXG4u
RpwzMhMGwQdErC3k/K18RD/dluNXAhn5W/2kiEKB4DJ/A8YCO89DgbL69QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3MQZgmrEbu6+Ay4ESmaGqFhaXTMB8GA1UdIwQY
MBaAFAJBFURi5a3MqdK8vRRD/MY3h5U3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wOTc2MWQtNmU1Yy00NTFiLThlOGEt
ZTkyZWU1ZWVkMjI2LzEvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wOTc2MWQtNmU1Yy00NTFiLThlOGEtZTkyZWU1ZWVkMjI2
LzEvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM72catWb
wLqgC7ClSAUisbO6/QsDeLakbifdsyYW1kJGmFLT5Mj32ci+8Vdze97Rbwg99rT0
/XbN5kNNbj1ztZfPTJ1S/ehu4Cvb9CtO4DkJXFsZi8m7uK3XNxMcTiPb8QBql80z
9wduROatHUItIxV446fzZfC/LXlCAxg1oTn2w4J6skwWPd4cocs+aAAWEw/+yXkl
k2pwutrvcme+tR3fZW6yGZNF61wnjVobKvdPlqurLDRZvV665pz4h/CUGu7DRiGI
767J9FFx976X9+hga+J7iiQABikIJRTywpH5UCij/jZ+8eNhlK9vln6HtdCGFOe0
l6bcGLWWwqRXBw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:04 2025 by rpki-client