Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
File: AW5eMfqHFqqlThj83P7T_JTbkLU.mft (raw, json)
Hash identifier: 94PkND4xWF5F73bMj+piMj4bvmaSvrFkduzveWaRtg0=
Subject key identifier: 25:52:CF:49:D0:B5:4F:EB:03:8D:59:A7:35:7C:8B:2C:F9:74:09:46
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Certificate issuer: /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial: 0194BBCE09C84F0D97136A3E344309FCF749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: AW5eMfqHFqqlThj83P7T_JTbkLU.crl (hash: lsrkP6OKG3GANnl9QzXAfwuGpaV6I9FIRUkh1gQpQAA=)
2: Rgcekkes1KhkPm-geec6ef8_SvQ.roa (hash: 0N6GYLdc56+kVBGDj5O5jPTIUR3nKttL77HbNqyqtCs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:09:c8:4f:0d:97:13:6a:3e:34:43:09:fc:f7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=2552cf49d0b54feb038d59a7357c8b2cf9740946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:60:d4:fd:d6:34:ff:95:1e:82:15:16:12:48:
08:33:22:d0:12:03:a3:58:34:af:e2:f5:91:a9:4d:
aa:90:50:36:0f:08:fb:76:3f:58:3f:79:bc:f7:4b:
3b:cf:3d:03:40:09:bf:74:0b:69:32:f2:61:93:08:
bd:c0:ee:5a:82:b8:76:5b:59:5c:b3:b5:35:2d:76:
c7:50:89:50:f4:08:72:b6:a2:d9:d3:9a:fc:a9:3d:
29:ca:06:97:9b:9a:29:25:3e:27:36:2a:41:74:c7:
49:ac:47:21:5e:a3:a7:60:c4:6e:c6:30:c4:32:61:
94:9d:a1:fb:16:6c:15:54:d2:f0:87:83:64:4e:47:
1d:73:f2:a5:f5:7f:19:19:69:fd:c2:b5:74:a7:08:
f7:de:41:80:4a:91:2d:95:56:9b:8c:52:1b:65:ae:
91:9d:4f:66:42:2b:7e:8d:ff:a8:55:cb:90:6d:8b:
b6:d3:8a:23:10:94:ee:b2:cf:c5:52:db:61:61:21:
f6:28:8b:db:d0:f1:15:55:3e:a4:73:39:d4:7a:6b:
f2:95:d9:25:66:e0:16:d2:6e:ef:c3:df:b1:fe:e2:
78:16:54:db:2f:e1:c3:43:00:96:7d:e1:bc:a5:1c:
8c:3f:10:b4:d7:8c:17:fb:5f:1e:fe:d5:77:0b:22:
9c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:52:CF:49:D0:B5:4F:EB:03:8D:59:A7:35:7C:8B:2C:F9:74:09:46
X509v3 Authority Key Identifier:
keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:19:dd:2a:f8:95:a2:7a:58:b2:d0:4e:2e:59:28:b2:97:8b:
be:f3:61:b1:aa:02:58:8d:85:43:89:e1:88:f6:8b:9c:10:86:
05:21:eb:f0:fe:9e:bb:0e:61:3b:a6:ba:ba:51:f6:81:5f:05:
1e:70:6d:f9:a3:10:1e:4b:81:93:88:50:70:21:9b:c8:3c:12:
48:3f:5b:6d:40:a8:46:b2:c9:d1:48:4b:ed:ad:6a:e6:2c:d1:
48:70:61:b4:87:fa:90:85:ce:16:66:ad:da:56:0c:aa:3e:cc:
41:e6:eb:d8:26:d3:11:2b:66:0a:4c:92:cf:55:c8:96:85:b6:
ee:45:02:c4:1f:14:37:f4:a6:92:77:88:0e:53:0c:29:bb:54:
3b:28:0c:69:74:1b:11:aa:32:6c:6c:a6:0b:2c:05:58:2d:4d:
21:85:82:0b:cd:b4:e9:e9:20:96:a9:6c:12:99:8b:5c:66:bc:
99:3a:c1:b4:65:24:fa:37:37:3a:fc:d3:53:4d:f2:c9:1f:16:
94:c7:d4:37:92:3c:66:fb:4c:1a:00:e2:3b:e9:d1:33:46:97:
fa:2f:21:ab:9e:59:62:e0:89:db:f9:84:4f:5a:de:ad:17:a8:
01:2f:2c:be:a5:1c:a4:31:2f:28:0f:69:e1:94:f4:4c:8d:45:
f1:9e:bc:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgnITw2XE2o+NEMJ/PdJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNmU1ZTMxZmE4NzE2YWFhNTRlMThmY2RjZmVkM2ZjOTRk
YjkwYjUwHhcNMjUwMTMxMTAwMDI5WhcNMjUwMjAxMTAwMDI5WjAzMTEwLwYDVQQD
EygyNTUyY2Y0OWQwYjU0ZmViMDM4ZDU5YTczNTdjOGIyY2Y5NzQwOTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WDU/dY0/5UeghUWEkgIMyLQEgOj
WDSv4vWRqU2qkFA2Dwj7dj9YP3m890s7zz0DQAm/dAtpMvJhkwi9wO5agrh2W1lc
s7U1LXbHUIlQ9AhytqLZ05r8qT0pygaXm5opJT4nNipBdMdJrEchXqOnYMRuxjDE
MmGUnaH7FmwVVNLwh4NkTkcdc/Kl9X8ZGWn9wrV0pwj33kGASpEtlVabjFIbZa6R
nU9mQit+jf+oVcuQbYu204ojEJTuss/FUtthYSH2KIvb0PEVVT6kcznUemvyldkl
ZuAW0m7vw9+x/uJ4FlTbL+HDQwCWfeG8pRyMPxC014wX+18e/tV3CyKcqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVSz0nQtU/rA41ZpzV8iyz5dAlGMB8GA1UdIwQY
MBaAFAFuXjH6hxaqpU4Y/Nz+0/yU25C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVc1ZU1mcUhGcXFsVGhqODNQN1RfSlRia0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9hZjRlZjgtZWQwNy00YWNkLWE0MmYt
Yzk2YzJjZTg1OWU1LzEvQVc1ZU1mcUhGcXFsVGhqODNQN1RfSlRia0xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9hZjRlZjgtZWQwNy00YWNkLWE0MmYtYzk2YzJjZTg1OWU1
LzEvQVc1ZU1mcUhGcXFsVGhqODNQN1RfSlRia0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBndKviV
onpYstBOLlkospeLvvNhsaoCWI2FQ4nhiPaLnBCGBSHr8P6euw5hO6a6ulH2gV8F
HnBt+aMQHkuBk4hQcCGbyDwSSD9bbUCoRrLJ0UhL7a1q5izRSHBhtIf6kIXOFmat
2lYMqj7MQebr2CbTEStmCkySz1XIloW27kUCxB8UN/SmkneIDlMMKbtUOygMaXQb
EaoybGymCywFWC1NIYWCC8206ekglqlsEpmLXGa8mTrBtGUk+jc3OvzTU03yyR8W
lMfUN5I8ZvtMGgDiO+nRM0aX+i8hq55ZYuCJ2/mET1rerReoAS8svqUcpDEvKA9p
4ZT0TI1F8Z68FA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:09 2025 by rpki-client