Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
File: aQMR37ZbZZViGO_0cZep65akB9s.mft (raw, json)
Hash identifier: dQ8GOi/yoreSGq4WgXxXi2Eb1hHhaEaM+Qgrk6vge2M=
Subject key identifier: CC:41:70:6E:4A:EF:15:7C:8E:DA:CF:64:BD:02:CC:32:3B:A6:6B:EC
Authority key identifier: 69:03:11:DF:B6:5B:65:95:62:18:EF:F4:71:97:A9:EB:96:A4:07:DB
Certificate issuer: /CN=690311dfb65b65956218eff47197a9eb96a407db
Certificate serial: 0194BBCE69A35714BFD588A09AD7A29E45D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: aQMR37ZbZZViGO_0cZep65akB9s.crl (hash: qN85qIxKpRbo8YZJ36kgt2ZP0/rgwckb6BGno5/VXJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:69:a3:57:14:bf:d5:88:a0:9a:d7:a2:9e:45:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690311dfb65b65956218eff47197a9eb96a407db
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=cc41706e4aef157c8edacf64bd02cc323ba66bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:88:2e:79:be:94:21:3d:6d:1e:68:a6:83:07:
92:fe:76:6f:ed:eb:e4:9a:bd:33:c7:0e:5a:24:0f:
d2:48:52:dc:60:a0:84:ab:72:1a:91:10:31:95:4c:
0c:ab:2d:8b:41:1f:46:f5:49:7d:c4:e2:77:df:3b:
33:0b:00:86:44:1d:3f:d8:67:20:67:59:66:7f:38:
ea:7b:49:0d:6c:ca:9b:64:61:b9:77:17:81:71:ea:
f5:8d:06:dc:f1:37:78:55:31:ca:5e:d3:1a:f5:ef:
8a:7d:84:d6:74:b5:bb:c0:12:89:d0:d4:c1:43:2e:
52:52:71:55:fb:13:8e:df:7e:ea:94:54:a9:53:74:
ad:0b:78:29:5a:9e:d2:f4:8f:1a:d3:fa:4c:d8:39:
81:04:25:c5:ac:71:ad:c9:bc:5f:61:30:5d:92:9e:
07:c7:02:9e:a4:6d:81:50:43:49:d0:e3:6d:b0:b3:
cb:b5:49:27:7d:eb:41:6c:aa:df:b4:c2:65:22:64:
b5:97:ad:32:bb:49:9e:65:24:89:3d:aa:37:58:74:
e0:9c:44:86:cd:ed:a5:b3:e3:c1:cf:4a:df:8e:8b:
6f:93:1e:12:71:43:1c:00:16:b4:5c:93:93:42:18:
bc:98:fb:0c:b3:4d:65:45:e1:55:c5:6b:93:37:2e:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:41:70:6E:4A:EF:15:7C:8E:DA:CF:64:BD:02:CC:32:3B:A6:6B:EC
X509v3 Authority Key Identifier:
keyid:69:03:11:DF:B6:5B:65:95:62:18:EF:F4:71:97:A9:EB:96:A4:07:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e8:bc:e2:0d:15:96:e1:84:12:32:1a:17:be:fc:8f:82:62:
76:d2:a0:db:c2:09:fe:fd:19:96:63:ff:b9:bd:5f:0e:06:7f:
17:45:c9:38:5c:bd:39:17:1e:99:37:38:21:f4:4c:ba:6a:a7:
1b:ed:c1:55:52:ce:e9:14:c6:be:b6:99:a2:a0:1d:d2:bb:90:
d1:c5:70:15:ea:39:bf:6b:ca:39:d0:c2:fc:58:76:f6:15:ee:
b5:ad:ed:3f:d3:b7:6f:fe:84:af:d5:6b:b7:4f:a6:af:7b:60:
00:39:23:00:bb:84:db:e9:fb:c7:02:52:b3:a2:84:03:86:85:
7d:c1:d2:b6:b9:78:f2:9b:75:de:7e:6c:b9:91:d7:04:45:b3:
c3:9c:82:09:be:10:62:fa:30:95:bb:74:26:06:26:83:c4:20:
a3:c5:93:02:3e:7a:93:3f:76:b7:df:ac:29:5c:55:3c:32:65:
73:b8:fc:93:bb:35:13:46:6c:3e:fe:56:72:86:22:7e:6f:e7:
56:7f:ec:1b:cc:8f:04:99:0d:36:2f:31:4c:24:13:58:a5:13:
04:50:2e:0d:10:9a:b5:1d:14:ac:df:6f:cb:98:7b:3d:fc:27:
6e:8f:64:d3:f3:14:5a:10:b4:6f:29:29:75:6f:d0:22:93:29:
c5:09:98:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zmmjVxS/1YigmteinkXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MDMxMWRmYjY1YjY1OTU2MjE4ZWZmNDcxOTdhOWViOTZh
NDA3ZGIwHhcNMjUwMTMxMTAwMDU0WhcNMjUwMjAxMTAwMDU0WjAzMTEwLwYDVQQD
EyhjYzQxNzA2ZTRhZWYxNTdjOGVkYWNmNjRiZDAyY2MzMjNiYTY2YmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74gueb6UIT1tHmimgweS/nZv7evk
mr0zxw5aJA/SSFLcYKCEq3IakRAxlUwMqy2LQR9G9Ul9xOJ33zszCwCGRB0/2Gcg
Z1lmfzjqe0kNbMqbZGG5dxeBcer1jQbc8Td4VTHKXtMa9e+KfYTWdLW7wBKJ0NTB
Qy5SUnFV+xOO337qlFSpU3StC3gpWp7S9I8a0/pM2DmBBCXFrHGtybxfYTBdkp4H
xwKepG2BUENJ0ONtsLPLtUknfetBbKrftMJlImS1l60yu0meZSSJPao3WHTgnESG
ze2ls+PBz0rfjotvkx4ScUMcABa0XJOTQhi8mPsMs01lReFVxWuTNy74EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxBcG5K7xV8jtrPZL0CzDI7pmvsMB8GA1UdIwQY
MBaAFGkDEd+2W2WVYhjv9HGXqeuWpAfbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFNUjM3WmJaWlZpR09fMGNaZXA2NWFrQjlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84MjY2YTYtMzlmMi00YTlmLWE0ZGQt
YTQ1NmUzNjRjYjBlLzEvYVFNUjM3WmJaWlZpR09fMGNaZXA2NWFrQjlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS84MjY2YTYtMzlmMi00YTlmLWE0ZGQtYTQ1NmUzNjRjYjBl
LzEvYVFNUjM3WmJaWlZpR09fMGNaZXA2NWFrQjlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+i84g0V
luGEEjIaF778j4JidtKg28IJ/v0ZlmP/ub1fDgZ/F0XJOFy9ORcemTc4IfRMumqn
G+3BVVLO6RTGvraZoqAd0ruQ0cVwFeo5v2vKOdDC/Fh29hXuta3tP9O3b/6Er9Vr
t0+mr3tgADkjALuE2+n7xwJSs6KEA4aFfcHStrl48pt13n5suZHXBEWzw5yCCb4Q
Yvowlbt0JgYmg8Qgo8WTAj56kz92t9+sKVxVPDJlc7j8k7s1E0ZsPv5WcoYifm/n
Vn/sG8yPBJkNNi8xTCQTWKUTBFAuDRCatR0UrN9vy5h7Pfwnbo9k0/MUWhC0bykp
dW/QIpMpxQmYCQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:43 2025 by rpki-client