Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
File: AyHqOVCODhemUf6SrCnqOIMtC_8.mft (raw, json)
Hash identifier: E9Emm5xaECVz5g764GwdxZHNc6hBRMSBo/jRpF0cG8Q=
Subject key identifier: 87:C1:07:F5:A0:67:D1:BE:E6:7E:7F:0E:05:EA:F6:60:D9:C0:7E:20
Authority key identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
Certificate issuer: /CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Certificate serial: 0194BC3C7389C6B4B29A26BF680B700E681D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
Manifest number: 12C8
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: AyHqOVCODhemUf6SrCnqOIMtC_8.crl (hash: eBnxLT5yP03j80pywoaUFwAlRQ8eZZMsz0LVG+kBw8k=)
2: bOONrlZHdROoIahZ7NmIjgIdExM.roa (hash: 1aT2l6/v3aO2MOldiF+P6gsdMx47ItIcMI7fEC/C0L0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:73:89:c6:b4:b2:9a:26:bf:68:0b:70:0e:68:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=87c107f5a067d1bee67e7f0e05eaf660d9c07e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:64:c7:5f:53:87:4a:89:a3:14:2a:cb:5f:
5d:30:07:dd:09:2c:18:98:5b:a7:93:f8:6f:2e:41:
48:e2:f1:e2:a8:f0:77:cd:7b:ee:12:de:77:03:ff:
6d:ed:50:08:46:0c:3d:73:a7:05:c2:d6:52:9d:06:
2c:07:73:00:58:6d:9f:ce:41:b1:6d:b5:a6:45:8d:
c9:0f:e7:72:43:5e:b9:9f:d7:60:27:2c:f2:e8:da:
9c:39:3f:a6:f8:d9:19:bf:04:6c:40:de:c0:85:e8:
9e:e1:e5:bb:35:21:36:a7:54:36:fa:19:b0:b5:5a:
14:e9:08:84:d6:b9:61:6f:aa:54:9e:ac:78:f7:f6:
c3:81:14:53:86:f9:0a:86:fc:4e:9d:59:a3:ad:06:
93:05:e2:ae:18:e9:fe:91:3a:13:df:0e:65:75:ad:
e9:6f:0e:d5:2a:07:36:98:f5:f2:af:2a:e2:c3:fc:
cc:7d:ea:a3:30:94:37:33:8d:36:bf:8d:3c:47:9a:
7c:e2:d9:db:3d:90:85:48:49:f2:7c:84:da:6e:0c:
3d:65:0d:52:66:7a:b9:5d:42:3e:fb:2c:41:60:4b:
f9:62:f8:b1:b4:9a:98:6c:62:72:38:0b:dd:f7:39:
1e:80:c2:d1:24:16:0e:38:41:75:36:bb:3b:41:bc:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C1:07:F5:A0:67:D1:BE:E6:7E:7F:0E:05:EA:F6:60:D9:C0:7E:20
X509v3 Authority Key Identifier:
keyid:03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:fd:d3:98:72:22:e6:59:26:46:a8:e8:89:15:af:bf:9c:c8:
ef:64:f1:2c:d5:99:3f:58:f2:f1:b5:05:90:9c:d4:44:d4:75:
c1:71:c2:eb:4b:31:e6:0b:a5:bb:7b:ea:f4:a9:4a:02:ad:cf:
e2:76:d7:47:8b:36:c3:15:4a:9d:c7:46:d3:33:3d:05:17:67:
85:ef:54:d6:36:96:09:04:d7:4a:90:19:36:e9:58:a1:dc:bd:
92:a4:d3:26:c6:7a:f8:71:13:ef:0a:bd:af:1d:16:84:55:75:
ed:c7:18:cd:31:fc:07:d7:b8:b4:92:fe:43:27:8b:bc:b3:ad:
aa:de:62:79:dd:6a:e1:ec:7d:45:0b:8e:4a:d7:72:4d:79:90:
91:dc:4d:52:e6:f2:4f:0b:b5:89:1e:94:cb:0d:1a:5d:57:04:
08:72:7b:44:b7:2e:3e:e7:46:a4:37:29:ff:be:bf:da:d4:84:
e2:2f:f4:8e:74:ce:70:93:24:8c:ef:c7:9c:74:a5:57:01:85:
3c:e0:e8:bc:29:df:bb:4f:3b:8e:a1:2f:2d:3e:59:15:2c:3a:
d9:5a:1e:22:c0:9e:49:e9:e2:7a:75:ba:cc:83:2f:17:06:d0:
ee:66:0c:1c:55:d2:50:c1:7b:df:32:e0:0a:e1:18:3b:9b:c0:
8f:d7:25:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PHOJxrSymia/aAtwDmgdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjFlYTM5NTA4ZTBlMTdhNjUxZmU5MmFjMjllYTM4ODMy
ZDBiZmYwHhcNMjUwMTMxMTIwMTA1WhcNMjUwMjAxMTIwMTA1WjAzMTEwLwYDVQQD
Eyg4N2MxMDdmNWEwNjdkMWJlZTY3ZTdmMGUwNWVhZjY2MGQ5YzA3ZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ1kx19Th0qJoxQqy19dMAfdCSwY
mFunk/hvLkFI4vHiqPB3zXvuEt53A/9t7VAIRgw9c6cFwtZSnQYsB3MAWG2fzkGx
bbWmRY3JD+dyQ165n9dgJyzy6NqcOT+m+NkZvwRsQN7Aheie4eW7NSE2p1Q2+hmw
tVoU6QiE1rlhb6pUnqx49/bDgRRThvkKhvxOnVmjrQaTBeKuGOn+kToT3w5lda3p
bw7VKgc2mPXyryriw/zMfeqjMJQ3M402v408R5p84tnbPZCFSEnyfITabgw9ZQ1S
Znq5XUI++yxBYEv5YvixtJqYbGJyOAvd9zkegMLRJBYOOEF1Nrs7QbxruQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfBB/WgZ9G+5n5/DgXq9mDZwH4gMB8GA1UdIwQY
MBaAFAMh6jlQjg4XplH+kqwp6jiDLQv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlIcU9WQ09EaGVtVWY2U3JDbnFPSU10Q184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDgxN2UtODI4MS00MmY3LTlmNGQt
OGNmODA1NTExMDAyLzEvQXlIcU9WQ09EaGVtVWY2U3JDbnFPSU10Q184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNDgxN2UtODI4MS00MmY3LTlmNGQtOGNmODA1NTExMDAy
LzEvQXlIcU9WQ09EaGVtVWY2U3JDbnFPSU10Q184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvf3TmHIi
5lkmRqjoiRWvv5zI72TxLNWZP1jy8bUFkJzURNR1wXHC60sx5gulu3vq9KlKAq3P
4nbXR4s2wxVKncdG0zM9BRdnhe9U1jaWCQTXSpAZNulYody9kqTTJsZ6+HET7wq9
rx0WhFV17ccYzTH8B9e4tJL+QyeLvLOtqt5ied1q4ex9RQuOStdyTXmQkdxNUuby
Twu1iR6Uyw0aXVcECHJ7RLcuPudGpDcp/76/2tSE4i/0jnTOcJMkjO/HnHSlVwGF
PODovCnfu087jqEvLT5ZFSw62VoeIsCeSenienW6zIMvFwbQ7mYMHFXSUMF73zLg
CuEYO5vAj9cl7g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:16 2025 by rpki-client