Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: rbkonATXEhAuEHE7/qkzFnoP06+lszlSpanC0538/6Y=
Subject key identifier: 28:75:7B:55:80:20:5E:24:97:8E:CD:E8:2C:2D:85:DC:15:56:5F:7E
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 0194BD17EACA7D16DA22ED2AE72FE519A7B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 0C92
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: fO2gV6x8Q/2+Tx/MNPkWZJeQ2ExP5BII1HCG+1zO/D4=)
2: rcMK08AznTNl69yZpwkwANSHMTs.roa (hash: WjK6cVczVGVfAOrWdWkI76D5GTBKIyYggYnNHyTSPTM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ea:ca:7d:16:da:22:ed:2a:e7:2f:e5:19:a7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=28757b5580205e24978ecde82c2d85dc15565f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:b3:1b:6d:bf:b0:2b:19:6f:6e:ca:07:d1:
ad:22:9e:bb:fd:4a:7c:bf:e3:01:a0:1e:9f:5f:f4:
e3:8a:c0:64:94:ea:34:c6:b2:6a:d8:fc:3c:68:2f:
fe:33:89:da:f6:40:99:86:38:d8:84:a4:3a:1f:e8:
6c:72:ed:93:f5:70:99:78:9c:d6:56:2a:74:96:fd:
04:9f:d4:2e:a1:8d:99:13:bc:ea:11:ba:74:de:92:
ca:63:3b:6c:81:60:4c:30:03:95:06:ce:65:97:6e:
0a:40:84:aa:54:12:d1:2d:ac:96:c0:36:c4:58:4e:
2e:8c:80:f3:e7:8e:db:cc:45:75:74:56:45:28:0d:
d9:64:a8:56:40:18:73:1c:cd:4a:50:08:52:b8:d9:
d6:a4:52:6a:a4:47:11:21:04:28:2c:8b:ae:13:93:
0e:ab:19:aa:a6:e6:04:ac:ab:25:3d:77:9e:0e:62:
ea:26:1c:26:a2:d6:ad:bf:51:71:f4:86:3d:ee:aa:
77:3b:60:b3:63:2b:0e:94:f8:f2:91:94:6d:23:ed:
8e:4c:e5:d8:5e:0d:72:1d:4e:99:c2:d2:c5:92:17:
ca:43:7f:ee:9c:51:0e:bb:1d:63:32:cc:83:ad:09:
ef:4b:22:83:c7:99:46:91:c5:1d:2b:1a:6e:99:09:
8b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:75:7B:55:80:20:5E:24:97:8E:CD:E8:2C:2D:85:DC:15:56:5F:7E
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:7e:c7:52:e6:3f:e1:72:bb:0b:63:2e:54:3a:06:f2:dc:a3:
2b:e6:19:20:64:5c:78:bc:3e:b7:bb:ad:9b:4c:83:11:aa:bd:
f9:ba:b7:94:91:da:70:b5:52:5b:9d:fc:08:15:df:d9:2a:f6:
e9:4c:09:77:10:cb:1c:d4:0e:bd:b7:ec:50:c0:8b:14:6c:c7:
98:04:9a:74:68:87:bb:8e:ad:12:58:2a:9d:89:d7:59:31:f6:
a2:34:74:cf:d1:56:5a:38:a2:09:72:e8:b9:a6:16:7e:27:c8:
7c:67:d7:de:8a:bd:7c:a3:19:bf:8d:72:42:b4:f2:1c:36:62:
8b:f1:b0:06:8e:23:ff:c9:a1:6a:0a:a0:e9:dd:70:62:14:6a:
aa:a5:93:f1:fb:cf:9e:29:32:59:82:14:7e:75:ea:23:89:5e:
81:96:66:e5:1b:76:68:b7:77:a8:77:33:f3:7e:1c:1f:61:83:
99:d6:43:94:00:7f:d2:77:ed:96:fc:85:c9:9c:35:60:64:7b:
6d:6b:0a:8a:30:b3:73:38:54:7a:36:f0:63:68:1b:01:28:eb:
bf:d6:a3:05:d6:20:60:c0:de:79:c9:c8:90:e7:6b:aa:94:43:
8d:a3:07:1e:dd:9f:1f:0d:ec:9b:63:9b:86:60:07:11:ff:0e:
35:5e:9c:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+rKfRbaIu0q5y/lGaezMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOGIyMGZmMDk4ZTZiN2NiYzhiNmFmMGQ2ODAwNjVlNmI5
MDYwMGIwHhcNMjUwMTMxMTYwMDQ4WhcNMjUwMjAxMTYwMDQ4WjAzMTEwLwYDVQQD
EygyODc1N2I1NTgwMjA1ZTI0OTc4ZWNkZTgyYzJkODVkYzE1NTY1ZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5GzG22/sCsZb27KB9GtIp67/Up8
v+MBoB6fX/TjisBklOo0xrJq2Pw8aC/+M4na9kCZhjjYhKQ6H+hscu2T9XCZeJzW
Vip0lv0En9QuoY2ZE7zqEbp03pLKYztsgWBMMAOVBs5ll24KQISqVBLRLayWwDbE
WE4ujIDz547bzEV1dFZFKA3ZZKhWQBhzHM1KUAhSuNnWpFJqpEcRIQQoLIuuE5MO
qxmqpuYErKslPXeeDmLqJhwmotatv1Fx9IY97qp3O2CzYysOlPjykZRtI+2OTOXY
Xg1yHU6ZwtLFkhfKQ3/unFEOux1jMsyDrQnvSyKDx5lGkcUdKxpumQmLbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCh1e1WAIF4kl47N6CwthdwVVl9+MB8GA1UdIwQY
MBaAFAGLIP8Jjmt8vItq8NaABl5rkGALMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNjliNDItMGY5ZC00ZjNjLWE5MzEt
OTEyN2Y0MjlhNDhkLzEvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hNjliNDItMGY5ZC00ZjNjLWE5MzEtOTEyN2Y0MjlhNDhk
LzEvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5H7HUuY/
4XK7C2MuVDoG8tyjK+YZIGRceLw+t7utm0yDEaq9+bq3lJHacLVSW538CBXf2Sr2
6UwJdxDLHNQOvbfsUMCLFGzHmASadGiHu46tElgqnYnXWTH2ojR0z9FWWjiiCXLo
uaYWfifIfGfX3oq9fKMZv41yQrTyHDZii/GwBo4j/8mhagqg6d1wYhRqqqWT8fvP
nikyWYIUfnXqI4legZZm5Rt2aLd3qHcz834cH2GDmdZDlAB/0nftlvyFyZw1YGR7
bWsKijCzczhUejbwY2gbASjrv9ajBdYgYMDeecnIkOdrqpRDjaMHHt2fHw3sm2Ob
hmAHEf8ONV6cVw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:50 2025 by rpki-client