Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
File: AvvY1yv_u813B2pqbMmU02QoSRY.mft (raw, json)
Hash identifier: NQAqPuMrzde7jIkrUuKMGWQNeneNRl7Aku+HakVe5VY=
Subject key identifier: F7:FA:E6:D3:38:9B:56:11:76:96:06:14:41:C0:6F:0F:AA:A4:7A:53
Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
Certificate issuer: /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Certificate serial: 0194BCE074D1143F62959E57340CBD3D5ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: AvvY1yv_u813B2pqbMmU02QoSRY.crl (hash: o9UI/FsCM5ISpnZ7vTI61qop9vgdct2SAOp67j+tBUA=)
2: TqE9tgmDpOyBnvYdZVmUJ-gUA3Q.roa (hash: g8rbpukbCZfVIUEVymsKLu6cA0WLzRwtCu3mx9X0/mM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:74:d1:14:3f:62:95:9e:57:34:0c:bd:3d:5a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=f7fae6d3389b56117696061441c06f0faaa47a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:16:d1:24:a9:51:71:6b:34:35:67:93:b8:
09:9e:b1:3c:77:2f:d6:3a:ca:4f:17:79:71:90:11:
74:97:e4:0a:a2:7c:3f:55:7f:16:49:fd:56:67:9a:
76:f6:a7:98:ab:17:a3:4b:dc:fb:16:d4:8a:ec:dc:
31:35:c8:aa:0b:49:85:77:d4:d8:6f:0c:a6:dd:78:
f7:a7:8c:bf:ce:8a:cd:87:2f:c0:c3:cf:85:1c:57:
8c:61:91:d2:27:b0:45:be:d1:1e:01:6d:44:47:ba:
66:6a:1d:ef:0b:c1:2d:ee:ea:c9:16:c9:4d:d5:65:
f1:dc:f6:e4:91:98:ec:02:39:96:1f:37:5e:f0:09:
b2:3a:13:38:54:b7:06:b7:85:6a:95:2a:e3:ff:bc:
60:d3:e0:69:3e:15:2c:27:e8:df:46:9c:76:ab:85:
cb:7e:8a:15:85:79:65:69:41:d2:25:78:3a:79:8f:
6b:77:5e:ba:67:36:af:0d:ea:b4:ca:be:0c:e1:5e:
0c:94:3b:50:02:5e:57:59:c9:d7:82:22:95:a2:15:
8d:4e:e9:01:e4:0b:5e:b9:2e:11:96:44:82:a2:08:
6c:ea:f3:84:61:8d:3d:5b:35:5a:92:a2:7b:33:56:
bc:d2:aa:94:b4:70:99:29:5b:d0:29:19:90:58:25:
b2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FA:E6:D3:38:9B:56:11:76:96:06:14:41:C0:6F:0F:AA:A4:7A:53
X509v3 Authority Key Identifier:
keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9f:6e:2f:a5:3d:01:0c:fc:60:0a:6d:e1:fd:f6:4d:a6:6a:
e8:d3:c5:82:52:fb:c9:11:2d:40:c7:b1:09:d6:7d:5c:91:31:
ff:a2:39:08:9b:b8:48:85:0b:13:54:a2:d0:73:4b:b0:fb:e6:
ab:c3:dc:60:27:9a:01:75:3b:3a:bd:06:10:2c:5c:52:77:95:
00:38:c2:67:66:6b:39:1f:2d:77:19:9d:71:1b:d4:ab:54:29:
21:8c:7e:1c:4d:17:70:c5:f5:d4:fe:62:91:89:8c:83:50:e7:
58:09:78:40:2f:3a:e6:43:83:91:a0:ae:2c:3b:1d:dd:b7:22:
f4:51:fc:7f:62:72:48:ce:e1:6e:16:7c:cc:8d:5a:a3:80:34:
49:5c:03:37:69:34:00:f6:d7:bf:ca:85:5e:2c:6a:8d:43:ae:
46:db:25:22:95:55:5e:44:db:12:f8:72:36:73:9e:ab:e2:59:
43:77:db:28:90:4e:7c:77:fa:3e:41:a5:7d:bf:d2:40:da:7f:
40:d0:50:8e:1e:ca:8f:c1:fb:1e:44:2e:93:60:70:03:70:a6:
45:cb:58:6b:8f:2d:f9:f5:de:00:22:93:d4:3b:22:dd:cc:aa:
c3:d0:5b:3d:ea:1b:4f:8d:ad:9b:ce:68:e3:ad:3f:aa:8c:63:
2c:11:75:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84HTRFD9ilZ5XNAy9PVrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZmJkOGQ3MmJmZmJiY2Q3NzA3NmE2YTZjYzk5NGQzNjQy
ODQ5MTYwHhcNMjUwMTMxMTUwMDE0WhcNMjUwMjAxMTUwMDE0WjAzMTEwLwYDVQQD
EyhmN2ZhZTZkMzM4OWI1NjExNzY5NjA2MTQ0MWMwNmYwZmFhYTQ3YTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlwW0SSpUXFrNDVnk7gJnrE8dy/W
OspPF3lxkBF0l+QKonw/VX8WSf1WZ5p29qeYqxejS9z7FtSK7NwxNciqC0mFd9TY
bwym3Xj3p4y/zorNhy/Aw8+FHFeMYZHSJ7BFvtEeAW1ER7pmah3vC8Et7urJFslN
1WXx3PbkkZjsAjmWHzde8AmyOhM4VLcGt4VqlSrj/7xg0+BpPhUsJ+jfRpx2q4XL
fooVhXllaUHSJXg6eY9rd166ZzavDeq0yr4M4V4MlDtQAl5XWcnXgiKVohWNTukB
5AteuS4RlkSCoghs6vOEYY09WzVakqJ7M1a80qqUtHCZKVvQKRmQWCWy8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPf65tM4m1YRdpYGFEHAbw+qpHpTMB8GA1UdIwQY
MBaAFAL72Ncr/7vNdwdqamzJlNNkKEkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hZWNhYjEtMWRlOS00YmRmLTlhMTAt
MjNhZjU1ZTAxOTBkLzEvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hZWNhYjEtMWRlOS00YmRmLTlhMTAtMjNhZjU1ZTAxOTBk
LzEvQXZ2WTF5dl91ODEzQjJwcWJNbVUwMlFvU1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArp9uL6U9
AQz8YApt4f32TaZq6NPFglL7yREtQMexCdZ9XJEx/6I5CJu4SIULE1Si0HNLsPvm
q8PcYCeaAXU7Or0GECxcUneVADjCZ2ZrOR8tdxmdcRvUq1QpIYx+HE0XcMX11P5i
kYmMg1DnWAl4QC865kODkaCuLDsd3bci9FH8f2JySM7hbhZ8zI1ao4A0SVwDN2k0
APbXv8qFXixqjUOuRtslIpVVXkTbEvhyNnOeq+JZQ3fbKJBOfHf6PkGlfb/SQNp/
QNBQjh7Kj8H7HkQuk2BwA3CmRctYa48t+fXeACKT1Dsi3cyqw9BbPeobT42tm85o
460/qoxjLBF1aA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:13:44 2025 by rpki-client