Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File: Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier: DbMEEfHwNOh9RdxnzuTaNLh9h6oXdObEkdO4GaFa99U=
Subject key identifier: C6:D5:80:CC:A1:33:73:F7:7B:82:CA:C4:E9:66:5B:9B:30:5F:6A:9D
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer: /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial: 0194BD85992DF643160B94F470F05B357A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number: 0236
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: Gz5tQsm/mNMv8E1vHxxIIl46vFp/BdY4r2iFE1RUxGI=)
2: q-0tOhbXBE8z7Hlp7AMLHyIkH0o.roa (hash: clCq9CQNeepLFI/InJwVfW2jsbdMuqRrXN6npNkjGNE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:99:2d:f6:43:16:0b:94:f4:70:f0:5b:35:7a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=c6d580cca13373f77b82cac4e9665b9b305f6a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:15:1d:dc:fc:30:d6:38:62:b5:67:da:8a:
31:d1:be:43:64:a5:ea:94:ed:12:37:b3:08:8b:a9:
1b:53:72:41:d9:1d:66:c1:2c:9c:5b:a9:da:c0:75:
ce:21:65:76:fa:c3:2e:7d:67:82:37:21:7b:cf:e2:
6b:0d:ad:c9:fd:14:d9:68:d8:5e:dd:4a:f4:47:41:
ee:b9:38:97:f1:c0:52:b3:9e:02:16:fb:ee:0a:a8:
07:93:69:c5:9a:d8:90:cd:9b:e7:e4:90:ef:5a:ee:
dc:30:34:af:f0:6b:6a:75:d8:10:4d:28:f1:7f:b3:
a6:23:f9:bf:d7:1e:11:0b:48:e3:ee:d9:2e:52:92:
6a:a6:f3:42:8e:f4:41:ca:a7:35:7d:18:08:dd:8d:
dd:7a:c5:9d:c8:ee:58:e0:2e:50:44:f0:45:9d:4f:
3a:0e:29:e4:b7:08:ef:b0:82:bc:13:2f:11:97:28:
ac:3d:34:e6:29:32:33:26:0c:90:01:b6:9a:de:82:
9d:54:ae:07:31:c9:8b:e3:a1:34:0e:a3:c4:ab:b9:
10:73:5d:e7:74:b2:3d:f1:b8:02:64:b2:61:84:6a:
da:ff:d6:92:54:d2:7c:68:f7:ce:c3:bc:39:8f:42:
ad:1f:a7:5d:9f:bd:a7:72:9c:95:ec:ec:2f:f3:85:
c4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D5:80:CC:A1:33:73:F7:7B:82:CA:C4:E9:66:5B:9B:30:5F:6A:9D
X509v3 Authority Key Identifier:
keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f6:2f:46:02:ab:e1:eb:2b:2b:32:12:55:6c:02:01:42:25:
46:e7:8c:8c:8a:32:a2:52:db:c0:d6:79:a5:40:3b:b0:62:f3:
d3:d8:1c:c1:41:57:b7:59:e8:29:9f:89:ac:6d:78:ec:2d:1a:
bd:9e:e4:6e:1f:01:23:dc:33:59:b8:c4:f0:3e:f9:94:84:fd:
a2:f0:9b:70:8c:a5:bc:b7:6d:3e:a8:7e:a8:41:7e:a3:0d:3d:
29:17:8a:0f:c8:63:35:88:71:fd:91:47:0a:e9:7c:10:2f:70:
32:6e:02:43:1b:06:48:dd:2b:72:4f:e3:54:5a:97:eb:45:30:
d5:c3:57:d4:05:58:3d:d3:ae:a4:49:fa:b7:0d:0c:84:4d:d0:
7c:0b:f6:fd:32:af:98:ec:c2:7b:d8:c1:2f:8c:ed:91:07:97:
52:b3:88:f9:a1:0c:1b:a3:c4:62:ff:9a:0c:06:8a:3d:20:6e:
07:5d:0f:a1:23:10:25:6a:96:b0:25:de:a7:21:27:eb:67:a6:
50:08:c7:e3:a2:14:1e:40:e7:c3:f7:07:3f:5c:3a:33:d2:a7:
7a:11:f8:17:93:41:70:1e:23:42:ec:3e:06:36:28:a8:e1:d2:
58:6b:21:51:2a:d2:ab:df:bf:f1:89:4f:52:70:74:a6:63:f0:
75:50:e7:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZkt9kMWC5T0cPBbNXozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyM2Y2M2ZiMmJmYzYzMWM0NGY0YmI2ZDk0YmRmMjhiM2Vj
OWRmZjcwHhcNMjUwMTMxMTgwMDM2WhcNMjUwMjAxMTgwMDM2WjAzMTEwLwYDVQQD
EyhjNmQ1ODBjY2ExMzM3M2Y3N2I4MmNhYzRlOTY2NWI5YjMwNWY2YTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzQVHdz8MNY4YrVn2oox0b5DZKXq
lO0SN7MIi6kbU3JB2R1mwSycW6nawHXOIWV2+sMufWeCNyF7z+JrDa3J/RTZaNhe
3Ur0R0HuuTiX8cBSs54CFvvuCqgHk2nFmtiQzZvn5JDvWu7cMDSv8GtqddgQTSjx
f7OmI/m/1x4RC0jj7tkuUpJqpvNCjvRByqc1fRgI3Y3desWdyO5Y4C5QRPBFnU86
DinktwjvsIK8Ey8RlyisPTTmKTIzJgyQAbaa3oKdVK4HMcmL46E0DqPEq7kQc13n
dLI98bgCZLJhhGra/9aSVNJ8aPfOw7w5j0KtH6ddn72ncpyV7Owv84XEPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbVgMyhM3P3e4LKxOlmW5swX2qdMB8GA1UdIwQY
MBaAFAI/Y/sr/GMcRPS7bZS98os+yd/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jZjExYjQtNzk3Yi00ODIwLWJmZWEt
NTNjZDkxYjI4YzRmLzEvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9jZjExYjQtNzk3Yi00ODIwLWJmZWEtNTNjZDkxYjI4YzRm
LzEvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvYvRgKr
4esrKzISVWwCAUIlRueMjIoyolLbwNZ5pUA7sGLz09gcwUFXt1noKZ+JrG147C0a
vZ7kbh8BI9wzWbjE8D75lIT9ovCbcIylvLdtPqh+qEF+ow09KReKD8hjNYhx/ZFH
Cul8EC9wMm4CQxsGSN0rck/jVFqX60Uw1cNX1AVYPdOupEn6tw0MhE3QfAv2/TKv
mOzCe9jBL4ztkQeXUrOI+aEMG6PEYv+aDAaKPSBuB10PoSMQJWqWsCXepyEn62em
UAjH46IUHkDnw/cHP1w6M9KnehH4F5NBcB4jQuw+BjYoqOHSWGshUSrSq9+/8YlP
UnB0pmPwdVDn4g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:01 2025 by rpki-client