Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier: 2+OXF8ej9puKqpBFf3zqavriaggI4YQHRzmix6zfFTg=
Subject key identifier: 24:3D:A3:0B:F7:9C:2D:A2:14:D1:1C:24:2F:65:D0:9F:29:D3:31:E0
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 0194BD4EA744353FD551F5F40A6146CE0274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number: 071C
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: n+qSjb5eOGQuJkA0QlN+v1Tntt2FJxVYoHI8r+TI8ZY=)
2: b5qYlj2pGelCE8iMTZgVzkLgjZ4.roa (hash: Q1LSediVZtUJxlECrGud2jZUPviShybaGQ27nBC5c2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a7:44:35:3f:d5:51:f5:f4:0a:61:46:ce:02:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=243da30bf79c2da214d11c242f65d09f29d331e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d9:a5:03:4a:de:61:91:8b:39:e2:0a:40:e7:
74:3d:47:28:b4:62:dc:02:ce:39:3d:85:63:9e:e0:
dd:53:5c:fd:8b:1d:5a:6f:3e:76:13:53:bb:7b:84:
33:ac:1c:4c:ad:2a:c6:bb:3c:96:a5:c4:af:4e:a0:
d1:4f:da:d4:f6:86:af:f1:66:a0:b0:4f:b0:d3:9e:
0c:2d:b6:05:71:bf:8a:06:17:49:2b:f8:29:73:22:
13:02:94:b8:78:62:ac:33:a2:72:95:ab:0d:03:a0:
76:6e:20:9e:79:a9:56:7c:d4:0b:df:30:57:5e:cc:
57:a5:24:e7:22:c1:7c:f1:7d:7a:1e:bf:fa:4b:fb:
6f:e1:f3:f0:82:e1:62:11:6c:41:2b:dd:66:67:d8:
ec:a7:3d:c6:b4:81:42:e8:11:01:96:97:87:30:11:
c1:a1:a5:8d:e1:21:02:2d:0c:31:d1:ac:c5:36:d2:
3d:e7:af:bb:9a:58:10:07:e7:2c:57:6a:f2:25:a3:
17:39:cb:62:8a:d6:5e:8b:01:11:7a:f4:84:ab:1a:
dc:dd:cf:84:91:9b:61:5f:b6:5d:2f:08:c8:47:3d:
4b:fb:93:38:92:03:af:15:b8:66:68:e5:a6:fc:b9:
14:70:bc:0c:13:04:95:26:64:d0:d4:e1:39:8f:30:
4e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3D:A3:0B:F7:9C:2D:A2:14:D1:1C:24:2F:65:D0:9F:29:D3:31:E0
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a8:f7:bb:a9:ad:ec:5b:2a:8a:82:82:41:ca:b8:89:e4:48:
95:31:23:e8:2e:14:1a:b8:45:88:a5:49:46:52:96:25:e2:90:
1d:99:c6:a4:f0:14:6c:18:45:f8:6a:65:80:e1:14:ee:df:be:
bb:10:83:43:29:98:61:7d:b8:d7:c3:4f:77:55:71:5a:b5:8a:
30:4b:d1:c3:b5:b2:fb:61:64:d0:f1:ff:a8:26:c2:80:63:2b:
3f:bd:14:9d:b9:51:47:57:5f:9e:40:d8:c1:28:a6:cc:bb:d0:
b0:d0:1d:99:18:e2:d3:fd:89:79:86:67:b2:2e:05:50:61:d9:
ca:2f:04:48:b3:fd:2a:05:02:4d:60:fb:82:f6:08:7f:fd:c3:
ae:f5:6b:a8:84:7a:48:4d:37:fe:8c:5e:43:23:d2:53:dc:4a:
51:1c:f6:ff:49:a1:e9:f3:b0:4a:31:d1:37:16:92:a9:db:74:
eb:e0:7e:33:7d:e3:09:89:f2:ee:e0:e2:4d:5f:ed:74:8b:5d:
19:1f:58:8b:a1:5f:c8:77:4f:1b:2f:f2:4b:63:60:a1:af:ca:
d6:7c:b8:a7:87:6d:6a:f8:09:a8:93:30:86:71:50:35:f2:8f:
dc:46:17:4c:f2:41:fb:0d:4f:c9:ad:41:93:e6:5b:ee:85:94:
c2:66:72:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TqdENT/VUfX0CmFGzgJ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMGM5ZDU1NDJhNWFhOGNkNWUwMTk4YWI4M2ZjZTBmOTQ3
MmE0NjEwHhcNMjUwMTMxMTcwMDM1WhcNMjUwMjAxMTcwMDM1WjAzMTEwLwYDVQQD
EygyNDNkYTMwYmY3OWMyZGEyMTRkMTFjMjQyZjY1ZDA5ZjI5ZDMzMWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49mlA0reYZGLOeIKQOd0PUcotGLc
As45PYVjnuDdU1z9ix1abz52E1O7e4QzrBxMrSrGuzyWpcSvTqDRT9rU9oav8Wag
sE+w054MLbYFcb+KBhdJK/gpcyITApS4eGKsM6JylasNA6B2biCeealWfNQL3zBX
XsxXpSTnIsF88X16Hr/6S/tv4fPwguFiEWxBK91mZ9jspz3GtIFC6BEBlpeHMBHB
oaWN4SECLQwx0azFNtI956+7mlgQB+csV2ryJaMXOctiitZeiwERevSEqxrc3c+E
kZthX7ZdLwjIRz1L+5M4kgOvFbhmaOWm/LkUcLwMEwSVJmTQ1OE5jzBOJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQ9owv3nC2iFNEcJC9l0J8p0zHgMB8GA1UdIwQY
MBaAFAAMnVVCpaqM1eAZirg/zg+UcqRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUF5ZFZVS2xxb3pWNEJtS3VEX09ENVJ5cEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xOWQ4NjctZmQzOS00MDllLWIyMGEt
ZGRjYzI1ODgxMTI4LzEvQUF5ZFZVS2xxb3pWNEJtS3VEX09ENVJ5cEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xOWQ4NjctZmQzOS00MDllLWIyMGEtZGRjYzI1ODgxMTI4
LzEvQUF5ZFZVS2xxb3pWNEJtS3VEX09ENVJ5cEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACaj3u6mt
7FsqioKCQcq4ieRIlTEj6C4UGrhFiKVJRlKWJeKQHZnGpPAUbBhF+GplgOEU7t++
uxCDQymYYX2418NPd1VxWrWKMEvRw7Wy+2Fk0PH/qCbCgGMrP70UnblRR1dfnkDY
wSimzLvQsNAdmRji0/2JeYZnsi4FUGHZyi8ESLP9KgUCTWD7gvYIf/3DrvVrqIR6
SE03/oxeQyPSU9xKURz2/0mh6fOwSjHRNxaSqdt06+B+M33jCYny7uDiTV/tdItd
GR9Yi6FfyHdPGy/yS2Ngoa/K1ny4p4dtavgJqJMwhnFQNfKP3EYXTPJB+w1Pya1B
k+Zb7oWUwmZy2A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:25 2025 by rpki-client