Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
File: AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json)
Hash identifier: hC8McW+JumzThCxiC7xCb4twQsU5sT+QZP5kL7gd/50=
Subject key identifier: 95:E5:8E:AD:BD:A3:D3:E5:39:37:0B:03:5C:43:D2:61:FB:9B:AE:2A
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Certificate issuer: /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial: 0195E0B47806EEECFF90EA3368784D1BE5BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
Manifest number: 14C5
Signing time: Sat 29 Mar 2025 07:01:18 +0000
Manifest this update: Sat 29 Mar 2025 07:01:18 +0000
Manifest next update: Sun 30 Mar 2025 07:01:18 +0000
Files and hashes: 1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: 5irHL/bbqfRo0c4qbeFCWXKoCLIgi2ivFFFEMX6X68U=)
2: dZX-Kvgl9o6BfgDGAkWUKr6z6So.roa (hash: pk+V195UpaNyzxBRisHlqyHLbz6AqZTl0n9ayxOtcCQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:78:06:ee:ec:ff:90:ea:33:68:78:4d:1b:e5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
Validity
Not Before: Mar 29 07:01:18 2025 GMT
Not After : Mar 30 07:01:18 2025 GMT
Subject: CN=95e58eadbda3d3e539370b035c43d261fb9bae2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e8:dc:6f:8b:a8:69:d1:57:fc:9a:5b:09:d1:
4a:2d:fc:f9:9c:4a:d6:79:2f:ba:72:64:04:27:69:
27:b9:c0:a3:e7:f7:d1:0e:94:5f:d3:ee:f2:48:0b:
52:62:7c:b1:15:5c:9d:48:df:0b:0c:0a:4c:06:5c:
49:fb:38:2d:c8:78:35:b5:9a:40:32:8a:04:21:9f:
04:06:fc:b5:3a:a6:64:ff:60:d9:de:0a:a6:72:aa:
06:9c:20:d0:f7:15:a4:aa:13:3f:fd:53:bf:0f:c5:
04:40:ae:b4:47:97:bd:09:c0:24:c0:65:20:55:cc:
4b:19:21:c4:b5:3b:60:56:25:ec:ad:03:e3:6d:03:
26:4e:cc:03:e5:3a:33:18:eb:cd:2b:ad:84:f4:24:
1f:cb:b3:a6:6d:9c:92:16:53:44:c9:b8:e5:80:e8:
d5:8c:92:5c:ee:9e:0e:e6:b2:d6:40:86:66:6d:d1:
92:db:ea:7e:7d:b8:08:6c:04:5c:b8:1a:77:20:ea:
af:53:37:01:48:53:26:b5:a1:72:95:e0:4a:e9:f1:
07:5a:42:68:eb:96:fc:26:47:d7:56:f3:32:fe:1e:
4c:09:ff:af:6e:b0:12:c3:fd:a8:8a:8f:73:6a:04:
60:e3:fb:3e:04:5f:de:ab:62:ac:77:47:f6:11:ad:
8d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E5:8E:AD:BD:A3:D3:E5:39:37:0B:03:5C:43:D2:61:FB:9B:AE:2A
X509v3 Authority Key Identifier:
keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:21:d2:d2:9b:e5:a1:d7:80:2d:df:75:67:56:e7:a8:b2:3d:
03:c2:09:8b:8d:2c:4a:32:98:a0:e8:e1:2e:be:b9:99:07:e6:
83:ba:1a:3f:68:6a:b7:74:d0:05:04:c5:58:80:05:6a:87:d9:
e1:f4:5d:ed:a4:64:1d:e6:cf:37:5d:8f:5c:8a:db:3c:9f:14:
64:7c:b8:ac:74:01:29:33:c1:36:80:f8:1c:35:02:36:1e:a7:
13:b7:49:40:d0:e0:ce:fe:f7:12:ac:79:8e:d2:67:ae:a8:1f:
bf:34:f3:32:b5:d6:5f:ce:84:3b:82:2d:cf:d9:e0:ef:1c:22:
a5:e1:e1:63:27:24:1a:4a:93:f9:13:ee:3c:30:ab:1e:03:d7:
00:7c:c8:9d:a1:58:00:af:1b:63:e3:2c:a7:86:0e:4d:50:4c:
62:1f:7f:ad:4f:1b:af:93:ca:64:15:af:ba:b6:e2:4d:6b:0c:
e1:a2:39:b2:4d:e7:00:e2:a2:bd:0c:59:ce:78:69:e1:83:cc:
e0:18:cc:bb:d1:d2:3e:d4:a8:8b:57:59:e3:37:64:53:74:b6:
20:36:65:92:21:b8:f8:4a:43:8d:9e:92:da:71:b7:4c:26:55:
65:12:b2:82:ec:3e:19:c0:86:63:99:a7:dd:ba:54:cf:ed:5b:
20:35:ff:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtHgG7uz/kOozaHhNG+W9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOGNjNmY0NjZhMjQxNjU3YmY1ZWM1MmE2MzBkYWViMDEy
MjJmODUwHhcNMjUwMzI5MDcwMTE4WhcNMjUwMzMwMDcwMTE4WjAzMTEwLwYDVQQD
Eyg5NWU1OGVhZGJkYTNkM2U1MzkzNzBiMDM1YzQzZDI2MWZiOWJhZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOjcb4uoadFX/JpbCdFKLfz5nErW
eS+6cmQEJ2knucCj5/fRDpRf0+7ySAtSYnyxFVydSN8LDApMBlxJ+zgtyHg1tZpA
MooEIZ8EBvy1OqZk/2DZ3gqmcqoGnCDQ9xWkqhM//VO/D8UEQK60R5e9CcAkwGUg
VcxLGSHEtTtgViXsrQPjbQMmTswD5TozGOvNK62E9CQfy7OmbZySFlNEybjlgOjV
jJJc7p4O5rLWQIZmbdGS2+p+fbgIbARcuBp3IOqvUzcBSFMmtaFyleBK6fEHWkJo
65b8JkfXVvMy/h5MCf+vbrASw/2oio9zagRg4/s+BF/eq2Ksd0f2Ea2NOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXljq29o9PlOTcLA1xD0mH7m64qMB8GA1UdIwQY
MBaAFAGMxvRmokFle/XsUqYw2usBIi+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zY2YyZmItY2Y0My00YzUyLWEyYTEt
YmU4ZDhjNjdkZjk1LzEvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zY2YyZmItY2Y0My00YzUyLWEyYTEtYmU4ZDhjNjdkZjk1
LzEvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiHS0pvl
odeALd91Z1bnqLI9A8IJi40sSjKYoOjhLr65mQfmg7oaP2hqt3TQBQTFWIAFaofZ
4fRd7aRkHebPN12PXIrbPJ8UZHy4rHQBKTPBNoD4HDUCNh6nE7dJQNDgzv73Eqx5
jtJnrqgfvzTzMrXWX86EO4Itz9ng7xwipeHhYyckGkqT+RPuPDCrHgPXAHzInaFY
AK8bY+Msp4YOTVBMYh9/rU8br5PKZBWvurbiTWsM4aI5sk3nAOKivQxZznhp4YPM
4BjMu9HSPtSoi1dZ4zdkU3S2IDZlkiG4+EpDjZ6S2nG3TCZVZRKyguw+GcCGY5mn
3bpUz+1bIDX/XA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:11:08 2025 by rpki-client