Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
File: aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft (raw, json)
Hash identifier: heB8SgMKgv1LuIB8UAmEIlr4JOhtVXvFPQXbOj2B8d8=
Subject key identifier: B6:AC:92:6E:87:83:39:4E:1C:C4:4A:76:CC:68:1C:91:8F:A8:32:28
Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
Certificate issuer: /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Certificate serial: 0194BC04C6A4875EBECB57801F40BFA3407D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl (hash: q3ZGPDw/PYqYEOyF1uIAIP2iY6wW7Q1TmBmT+rzYaU4=)
2: dUqyD5dBwTvJ_qoTBxGI93eGedY.roa (hash: u/v6Ya7ReNYFR+FOK7OzZoy9GOIB91+hBxT7UAGsW1U=)
3: xf5euvYwoNkCugSTZpIpZIs6gdQ.roa (hash: TROZHBrJUwOEntOqJDRdHWhVUC4xDktW9XYJSjQLr0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c6:a4:87:5e:be:cb:57:80:1f:40:bf:a3:40:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=b6ac926e8783394e1cc44a76cc681c918fa83228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3f:d3:11:dd:de:13:d4:fa:46:b0:41:70:44:
2f:31:1e:a9:e4:5b:97:55:6a:9b:e3:4f:aa:11:9a:
86:77:8b:57:d3:b1:74:25:11:cc:a3:d4:4b:d3:2e:
31:d6:30:8e:d9:27:e3:c1:19:8b:33:1c:8d:90:71:
64:de:20:ca:b8:79:7e:77:36:d4:2f:34:5c:d3:07:
31:58:69:71:bd:22:ba:7d:bd:d6:2a:91:bc:c1:7c:
fd:57:4c:b2:c9:e4:e3:c3:eb:a9:e3:f6:8f:33:e8:
94:3e:c5:fc:ee:e1:24:56:c7:c3:0e:c3:b0:0e:c7:
0f:a0:30:7c:6d:c3:ce:ac:27:02:c6:9e:fb:13:5b:
6c:26:6b:69:1c:6c:01:02:b9:32:30:18:4d:de:ff:
6c:12:00:9b:1d:21:e4:74:21:36:16:70:b0:99:b1:
e4:f7:6c:79:09:31:0d:f3:4a:cf:17:24:79:a8:82:
1c:2c:af:37:43:bc:4b:09:63:6e:dc:08:f2:8e:e8:
ba:41:12:dd:b6:3d:ee:16:e2:0e:5c:bc:7f:3c:cf:
5a:03:d9:16:f2:60:5e:fd:04:63:7e:6b:cd:38:5e:
cd:90:0b:6e:dd:f9:10:2b:72:e2:d3:82:e8:6b:2f:
87:85:d2:39:0d:a4:9a:f1:55:d0:ce:01:ce:a0:3a:
a2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AC:92:6E:87:83:39:4E:1C:C4:4A:76:CC:68:1C:91:8F:A8:32:28
X509v3 Authority Key Identifier:
keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c8:a9:12:09:fe:4c:b7:d4:67:72:97:45:ff:d0:fa:27:2e:
1b:43:93:87:b1:79:06:2f:ef:60:89:0e:ac:b9:09:03:92:2c:
da:4d:7f:07:3d:5d:b3:f4:44:0f:50:c4:d4:53:21:18:a9:91:
18:e6:fe:c5:4f:38:3a:1f:e8:c2:62:ff:e5:cb:39:77:ce:40:
85:d7:62:ef:96:7d:10:c3:81:5e:7d:85:3a:cc:95:5a:0c:48:
f8:bf:03:8f:b9:00:de:4e:a6:64:7c:ba:ca:50:b5:e0:33:62:
94:b9:1d:49:a2:0b:44:96:95:a8:4d:24:5c:68:95:8d:40:e6:
6e:4b:20:c8:ee:7e:0b:0c:89:aa:8c:1e:4f:fd:b5:31:41:b4:
01:f4:1c:33:22:17:17:06:87:7b:78:48:a4:ee:63:1a:5c:1a:
c6:59:dd:be:b2:30:c1:75:ea:02:6b:96:49:c2:3e:f3:d3:28:
b9:95:af:d7:05:3e:8c:ac:c4:da:5f:13:bf:cc:0f:0b:ec:52:
88:53:85:1e:9f:09:93:17:c0:5c:ba:07:f1:58:72:29:78:29:
f1:86:48:2a:a0:ff:d6:73:92:28:57:8d:30:02:9c:4b:2a:6c:
98:a7:1f:eb:7e:ed:ef:67:7a:13:66:6f:5c:07:76:fb:db:8a:
b5:5a:e9:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BMakh16+y1eAH0C/o0B9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTRlMWI4ZGE4MGNhYzJhZDFhMmYzZjA5YmY5ZGI1YTEy
NDg2YTQwHhcNMjUwMTMxMTEwMDE3WhcNMjUwMjAxMTEwMDE3WjAzMTEwLwYDVQQD
EyhiNmFjOTI2ZTg3ODMzOTRlMWNjNDRhNzZjYzY4MWM5MThmYTgzMjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D/TEd3eE9T6RrBBcEQvMR6p5FuX
VWqb40+qEZqGd4tX07F0JRHMo9RL0y4x1jCO2SfjwRmLMxyNkHFk3iDKuHl+dzbU
LzRc0wcxWGlxvSK6fb3WKpG8wXz9V0yyyeTjw+up4/aPM+iUPsX87uEkVsfDDsOw
DscPoDB8bcPOrCcCxp77E1tsJmtpHGwBArkyMBhN3v9sEgCbHSHkdCE2FnCwmbHk
92x5CTEN80rPFyR5qIIcLK83Q7xLCWNu3Ajyjui6QRLdtj3uFuIOXLx/PM9aA9kW
8mBe/QRjfmvNOF7NkAtu3fkQK3Li04Loay+HhdI5DaSa8VXQzgHOoDqiVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaskm6HgzlOHMRKdsxoHJGPqDIoMB8GA1UdIwQY
MBaAFGiU4bjagMrCrRovPwm/nbWhJIakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpUaHVOcUF5c0t0R2k4X0NiLWR0YUVraHFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yY2FiMWEtZGY2Ni00MTg3LWIxODIt
NzAzY2FiNGQwNTk4LzEvYUpUaHVOcUF5c0t0R2k4X0NiLWR0YUVraHFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yY2FiMWEtZGY2Ni00MTg3LWIxODItNzAzY2FiNGQwNTk4
LzEvYUpUaHVOcUF5c0t0R2k4X0NiLWR0YUVraHFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMipEgn+
TLfUZ3KXRf/Q+icuG0OTh7F5Bi/vYIkOrLkJA5Is2k1/Bz1ds/RED1DE1FMhGKmR
GOb+xU84Oh/owmL/5cs5d85Ahddi75Z9EMOBXn2FOsyVWgxI+L8Dj7kA3k6mZHy6
ylC14DNilLkdSaILRJaVqE0kXGiVjUDmbksgyO5+CwyJqoweT/21MUG0AfQcMyIX
FwaHe3hIpO5jGlwaxlndvrIwwXXqAmuWScI+89MouZWv1wU+jKzE2l8Tv8wPC+xS
iFOFHp8JkxfAXLoH8VhyKXgp8YZIKqD/1nOSKFeNMAKcSypsmKcf637t72d6E2Zv
XAd2+9uKtVrpaw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:01 2025 by rpki-client