Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier: KtN6niONhqNkICyVkJBjBa+qsatqCwB6dkf0HoaxWRc=
Subject key identifier: C0:BA:F3:3C:C0:05:E9:B4:9D:15:BC:C0:31:AA:75:08:8D:B6:4C:BA
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 0194BC051E7CA967E291EA0734EC8A0D9BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: s52GWi8Tz8USQQh9Fgsd1XyeBwxbsxa3UiRMvg+vpaI=)
2: gvJBtDmrBY4y1m9tVe-S6ndjy20.roa (hash: e9qz/rQIxQf43DTjLpdblCilaun5V9rCKHAnrG6oKJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1e:7c:a9:67:e2:91:ea:07:34:ec:8a:0d:9b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=c0baf33cc005e9b49d15bcc031aa75088db64cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:ee:99:89:1a:f4:ad:8e:2a:30:af:73:49:
46:55:e9:4a:a1:51:8d:1c:2e:83:4a:7f:45:fe:f0:
91:a7:5e:4e:d4:a0:35:19:e2:cb:30:44:5b:c7:2a:
c3:24:e2:5c:7a:c0:e3:ee:0e:1b:16:29:83:64:b7:
db:d7:3f:40:8b:45:f0:90:65:cc:24:fd:e9:b3:da:
45:30:53:16:9b:bb:74:95:d3:12:05:21:d2:a3:4e:
bf:c2:8c:ad:63:e5:fa:87:f0:fd:79:11:71:02:a1:
c7:69:17:4f:01:a5:f1:2c:6c:2d:a4:46:9a:05:97:
c7:5e:07:73:26:56:2a:fb:a0:fc:57:b7:da:dd:17:
da:22:7f:fd:31:cd:7d:68:24:da:79:1c:be:41:03:
e4:43:d4:db:ea:aa:22:2a:e6:cf:f8:d9:99:c4:f3:
a6:56:51:ec:1c:b4:73:fb:e4:e5:1f:ed:a9:ab:d3:
64:c2:90:9b:34:75:26:51:29:ca:38:42:86:91:ca:
6c:8e:96:86:c7:a9:52:79:ff:e0:d8:e9:a6:24:c3:
43:4d:da:18:eb:6b:bb:c0:dd:3e:d0:ef:94:6c:e0:
d5:6a:0f:b6:16:15:7c:bd:3d:f1:a3:6e:ae:7a:ac:
7d:41:dc:79:eb:61:dd:79:09:87:b9:d0:1c:92:b9:
33:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BA:F3:3C:C0:05:E9:B4:9D:15:BC:C0:31:AA:75:08:8D:B6:4C:BA
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ff:55:18:cd:e7:5c:db:48:b5:b4:d5:fc:b0:64:7d:49:52:
9a:d5:7e:83:6f:ed:d9:32:a3:fc:fe:80:58:0a:a2:e1:a4:5a:
4d:80:63:d7:23:e3:5f:66:5c:dc:52:30:3b:6d:4b:54:02:ab:
b9:c3:48:cd:ca:e8:5a:c1:55:ad:01:7f:e0:b8:79:fa:63:3a:
9a:bb:c0:6d:4d:15:53:4f:47:fb:d4:16:cd:a8:d6:1a:0e:09:
ce:dd:a6:db:c0:93:85:8e:a1:46:80:a7:9e:9b:7f:da:4e:c8:
bf:a2:3e:7a:96:99:dd:b1:62:32:69:71:e0:9a:97:27:7f:9a:
35:01:80:e7:b2:bc:53:ae:63:c6:09:e9:ef:46:c9:21:ef:d4:
c1:3d:3d:a8:95:ba:db:7c:79:8b:51:ec:55:c1:74:c8:fb:5f:
bd:6d:6c:a9:8c:8b:0f:e4:ce:56:4f:35:f4:58:2c:76:f2:a7:
9b:0e:86:e4:2d:09:4d:20:05:9a:bb:59:cc:56:d0:2c:79:86:
02:45:23:c5:c5:64:9f:3c:7e:14:9b:87:a5:ce:77:7a:87:10:
f2:5b:78:dd:73:3e:6b:4a:5d:1b:7f:05:e4:2e:88:b4:45:7e:
60:91:a3:f9:59:c6:86:ba:3f:57:d9:a8:88:cf:ab:99:16:2a:
4e:5a:5d:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BR58qWfikeoHNOyKDZvPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTUxZDQ0NWI3NjdhYjliNjYyNzcwMmU0YTJiMzkwNGQy
MDNmNzcwHhcNMjUwMTMxMTEwMDM5WhcNMjUwMjAxMTEwMDM5WjAzMTEwLwYDVQQD
EyhjMGJhZjMzY2MwMDVlOWI0OWQxNWJjYzAzMWFhNzUwODhkYjY0Y2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFPumYka9K2OKjCvc0lGVelKoVGN
HC6DSn9F/vCRp15O1KA1GeLLMERbxyrDJOJcesDj7g4bFimDZLfb1z9Ai0XwkGXM
JP3ps9pFMFMWm7t0ldMSBSHSo06/woytY+X6h/D9eRFxAqHHaRdPAaXxLGwtpEaa
BZfHXgdzJlYq+6D8V7fa3RfaIn/9Mc19aCTaeRy+QQPkQ9Tb6qoiKubP+NmZxPOm
VlHsHLRz++TlH+2pq9NkwpCbNHUmUSnKOEKGkcpsjpaGx6lSef/g2OmmJMNDTdoY
62u7wN0+0O+UbODVag+2FhV8vT3xo26ueqx9Qdx562HdeQmHudAckrkzrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMC68zzABem0nRW8wDGqdQiNtky6MB8GA1UdIwQY
MBaAFGmlHURbdnq5tmJ3AuSis5BNID93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDkt
NzA1MjBlYTc2MzY5LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDktNzA1MjBlYTc2MzY5
LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtP9VGM3n
XNtItbTV/LBkfUlSmtV+g2/t2TKj/P6AWAqi4aRaTYBj1yPjX2Zc3FIwO21LVAKr
ucNIzcroWsFVrQF/4Lh5+mM6mrvAbU0VU09H+9QWzajWGg4Jzt2m28CThY6hRoCn
npt/2k7Iv6I+epaZ3bFiMmlx4JqXJ3+aNQGA57K8U65jxgnp70bJIe/UwT09qJW6
23x5i1HsVcF0yPtfvW1sqYyLD+TOVk819FgsdvKnmw6G5C0JTSAFmrtZzFbQLHmG
AkUjxcVknzx+FJuHpc53eocQ8lt43XM+a0pdG38F5C6ItEV+YJGj+VnGhro/V9mo
iM+rmRYqTlpdbw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:01:54 2025 by rpki-client