Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
File: o_AJmtht2ENOUvjG_d7rLD7Wxso.mft (raw, json)
Hash identifier: iAdGwUv82SiX2+reQUnlBWc7fIklM7CEv6WWpuUlkaw=
Subject key identifier: FB:0B:3B:C6:D9:13:D9:F6:45:EC:83:F7:27:39:E4:88:A0:C6:CE:F7
Authority key identifier: A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
Certificate issuer: /CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Certificate serial: 0194BC04B63355F16FF2D474BF1A9713533F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
Manifest number: 0957
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: o_AJmtht2ENOUvjG_d7rLD7Wxso.crl (hash: 6+dCOcOJYkIcyUH/nZ/sfBXVtD2twsshvyLYymo1H1U=)
2: rwuE2HeUale_KAQK1oOeIO9teNQ.roa (hash: 1njSxFnxGZ0NzAHsH1imJbJ+hQrmgk75hjXn6T/fBr0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b6:33:55:f1:6f:f2:d4:74:bf:1a:97:13:53:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=fb0b3bc6d913d9f645ec83f72739e488a0c6cef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:50:b4:5d:09:fe:55:76:98:3c:16:6a:2b:
c2:9a:b0:3c:9f:d6:bf:1b:8e:91:a7:ab:85:ac:52:
64:59:11:3f:a6:d9:d0:88:0f:29:ac:10:a4:5f:b1:
b8:fb:bb:f1:73:00:b7:87:3e:e4:5c:c7:7e:43:6b:
a0:b4:4f:38:fa:d2:62:b2:da:8c:c0:b3:30:67:74:
71:b6:34:6a:8f:6a:b1:0c:a2:70:fc:80:1e:47:1d:
6c:2c:d8:83:89:ed:fe:a2:00:1f:26:4e:5d:b5:36:
fa:a8:41:74:63:98:97:a9:94:c3:fd:c3:7c:58:fa:
da:6c:6b:12:12:36:91:1e:8d:34:45:bb:1e:cf:d5:
88:bd:62:a8:f5:79:21:d2:1b:f6:b7:d0:b2:79:b9:
ef:af:15:ab:b4:8a:10:2c:d4:57:84:27:d0:48:45:
8e:01:81:a9:1c:ce:25:ae:67:20:55:c7:f1:cf:94:
d1:d7:91:3b:04:cc:db:12:7c:be:2d:ea:b8:08:7a:
6a:e5:6d:24:aa:f6:b9:e1:37:b5:aa:4d:23:da:c2:
0b:21:66:eb:6d:65:f1:32:8c:22:28:99:0d:cf:b5:
07:b0:95:59:2d:98:94:4a:c2:8a:f2:42:9c:eb:a7:
a1:7f:fe:e7:f4:29:6b:ff:5d:e3:02:8c:7f:c0:bf:
bb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0B:3B:C6:D9:13:D9:F6:45:EC:83:F7:27:39:E4:88:A0:C6:CE:F7
X509v3 Authority Key Identifier:
keyid:A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:60:a5:a2:4d:38:0e:e7:92:42:45:6d:53:a9:24:a6:19:5b:
39:96:e7:19:96:47:f8:fd:bb:4e:d7:81:ac:d8:3d:d6:3c:33:
3d:52:df:a4:a3:78:cb:c4:79:42:0d:ce:52:29:1c:4d:57:17:
3c:82:b7:87:3e:be:42:99:35:ca:4d:f1:50:2f:88:e9:bc:22:
ab:89:fb:69:2c:47:97:c9:2e:27:b3:8e:cd:5d:20:6a:be:45:
c9:f3:02:89:d0:f1:61:90:60:84:46:c6:a4:00:74:ae:1f:66:
a4:c2:02:06:12:c5:72:99:7b:5e:87:88:24:51:51:4a:c4:97:
89:76:22:42:cd:ed:95:0d:ca:8e:db:d6:a3:fe:6a:ef:a5:28:
1b:33:99:62:b3:6f:b4:62:6d:66:3e:e7:8a:b5:d9:ea:59:17:
30:e9:1d:b1:34:ce:3a:1a:df:fb:d2:79:e1:ef:72:53:de:7e:
fb:50:2b:a2:41:11:93:52:14:d7:54:81:02:35:04:0f:20:16:
25:10:ff:ea:a6:cf:63:88:a4:64:de:49:03:cb:64:a2:c8:86:
85:8a:66:95:0c:e4:26:52:b7:26:b4:00:e4:9e:eb:dc:38:9c:
35:af:6d:90:36:cb:ac:e7:b1:3b:55:b8:14:25:ed:99:2d:d8:
9c:72:2a:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLYzVfFv8tR0vxqXE1M/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZjAwOTlhZDg2ZGQ4NDM0ZTUyZjhjNmZkZGVlYjJjM2Vk
NmM2Y2EwHhcNMjUwMTMxMTEwMDEyWhcNMjUwMjAxMTEwMDEyWjAzMTEwLwYDVQQD
EyhmYjBiM2JjNmQ5MTNkOWY2NDVlYzgzZjcyNzM5ZTQ4OGEwYzZjZWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9JQtF0J/lV2mDwWaivCmrA8n9a/
G46Rp6uFrFJkWRE/ptnQiA8prBCkX7G4+7vxcwC3hz7kXMd+Q2ugtE84+tJistqM
wLMwZ3RxtjRqj2qxDKJw/IAeRx1sLNiDie3+ogAfJk5dtTb6qEF0Y5iXqZTD/cN8
WPrabGsSEjaRHo00Rbsez9WIvWKo9Xkh0hv2t9CyebnvrxWrtIoQLNRXhCfQSEWO
AYGpHM4lrmcgVcfxz5TR15E7BMzbEny+Leq4CHpq5W0kqva54Te1qk0j2sILIWbr
bWXxMowiKJkNz7UHsJVZLZiUSsKK8kKc66ehf/7n9Clr/13jAox/wL+7wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsLO8bZE9n2ReyD9yc55Iigxs73MB8GA1UdIwQY
MBaAFKPwCZrYbdhDTlL4xv3e6yw+1sbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jY2UwMTItMmNiOS00YmU2LWExYjYt
ZDUxNjdlNjc1NmI2LzEvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9jY2UwMTItMmNiOS00YmU2LWExYjYtZDUxNjdlNjc1NmI2
LzEvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWClok04
DueSQkVtU6kkphlbOZbnGZZH+P27TteBrNg91jwzPVLfpKN4y8R5Qg3OUikcTVcX
PIK3hz6+Qpk1yk3xUC+I6bwiq4n7aSxHl8kuJ7OOzV0gar5FyfMCidDxYZBghEbG
pAB0rh9mpMICBhLFcpl7XoeIJFFRSsSXiXYiQs3tlQ3KjtvWo/5q76UoGzOZYrNv
tGJtZj7nirXZ6lkXMOkdsTTOOhrf+9J54e9yU95++1ArokERk1IU11SBAjUEDyAW
JRD/6qbPY4ikZN5JA8tkosiGhYpmlQzkJlK3JrQA5J7r3DicNa9tkDbLrOexO1W4
FCXtmS3YnHIq2Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:21 2025 by rpki-client