Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier: hl+ze4DGvJ7Tf0RvkgLyWYcqHYJv+YQ07LahHbZa/RY=
Subject key identifier: 85:43:A8:9F:7F:D1:E3:29:9F:C7:40:82:8C:40:58:77:8A:9C:09:4F
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 0195E122702F1FCDB846DD92AB55108E799F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number: 0E75
Signing time: Sat 29 Mar 2025 09:01:25 +0000
Manifest this update: Sat 29 Mar 2025 09:01:25 +0000
Manifest next update: Sun 30 Mar 2025 09:01:25 +0000
Files and hashes: 1: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: zHeJDaznVzmq0cP0c90ounCqb9iL7X7cZS7ZFlUgv4c=)
2: p59K7aev36ERUItnhS5Mz1k5-Bc.roa (hash: yncXPcPIvJo8NAHq8Y//lz3+TC6bWI59QGBmAMQf5A8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:70:2f:1f:cd:b8:46:dd:92:ab:55:10:8e:79:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Mar 29 09:01:25 2025 GMT
Not After : Mar 30 09:01:25 2025 GMT
Subject: CN=8543a89f7fd1e3299fc740828c4058778a9c094f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:73:53:7c:34:53:ad:52:d9:3f:58:d3:f1:df:
95:43:7e:1f:e0:8f:46:87:8b:90:88:83:f9:10:b8:
25:bf:f0:2d:c1:0e:d2:82:ce:55:58:c8:c9:bc:9c:
39:34:a9:1c:f9:37:d0:bf:db:f5:3e:92:35:4a:2b:
07:92:81:ec:6a:43:0f:f1:01:0c:5e:87:3d:57:c5:
69:b8:46:07:49:bc:da:2c:42:99:16:d8:ab:d3:a7:
d4:b9:52:7f:ce:46:fa:ef:91:33:10:e8:a5:dc:1c:
60:6f:f8:8b:45:2b:d4:9b:21:dc:59:bd:0c:0d:ca:
26:b6:b9:fb:31:55:fb:72:81:9e:e7:f6:da:ff:13:
05:4d:27:6c:1c:12:b2:b5:6d:30:d1:35:fe:1b:6d:
03:b5:fa:ce:3d:5d:79:7c:20:44:c1:e1:09:ed:b5:
43:29:06:05:44:da:86:65:ae:d6:64:06:93:2f:fe:
dd:51:06:34:3e:5a:87:57:3d:a7:bc:70:16:89:08:
5e:56:83:6a:41:d7:dc:ad:95:5b:ac:92:b5:73:33:
ea:7e:19:7f:e9:d0:38:09:df:5d:66:cb:42:fa:b2:
fd:0b:76:d9:72:64:c3:83:a3:3f:66:5a:78:c4:42:
87:91:83:84:28:43:39:1c:ca:92:18:64:09:2b:75:
fd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:43:A8:9F:7F:D1:E3:29:9F:C7:40:82:8C:40:58:77:8A:9C:09:4F
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:77:01:3d:ce:1a:38:51:56:b9:81:eb:99:c2:56:4d:d3:8d:
d2:90:b6:ab:60:11:80:04:89:08:88:e8:7c:87:d5:21:22:2f:
01:6c:5b:bf:48:70:46:af:dc:b3:ae:46:29:32:eb:43:9f:09:
e2:16:cb:27:58:80:66:0d:02:53:e0:28:e0:21:a7:c8:ae:02:
95:5b:fb:54:02:c7:42:7e:0d:71:cd:dc:13:d9:5f:a6:09:28:
b7:b7:db:67:a9:60:06:ec:10:a4:2f:73:20:55:4c:43:f4:08:
12:ad:c3:9a:7e:66:b5:86:2d:f9:95:8a:66:a3:f4:61:47:b2:
a7:9f:6d:6a:e4:79:d2:4e:f4:14:2c:bd:5c:ed:18:c0:e5:08:
28:a7:59:47:27:61:e1:ff:c2:be:d4:d1:12:7e:2a:a3:bd:bf:
8b:7b:a6:53:4b:c7:59:db:c0:4e:a3:2f:49:65:dc:22:e7:16:
93:54:91:ce:3f:4d:fa:aa:b7:7f:e0:2c:18:d8:dc:b6:ba:fa:
b6:da:81:ff:f1:e0:b0:fe:79:ab:22:17:ab:40:b3:eb:79:28:
70:78:ab:2e:8f:5d:98:62:db:d6:39:05:74:79:36:b2:ee:b9:
85:0b:68:3e:4b:67:b0:02:f4:e9:b4:be:1f:36:4a:83:d7:39:
3f:28:54:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhInAvH824Rt2Sq1UQjnmfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMzFiODdlOTFlYTI3MTA0NmQzMTk5NWU3YTZjMDM4YmYx
YjE0N2MwHhcNMjUwMzI5MDkwMTI1WhcNMjUwMzMwMDkwMTI1WjAzMTEwLwYDVQQD
Eyg4NTQzYTg5ZjdmZDFlMzI5OWZjNzQwODI4YzQwNTg3NzhhOWMwOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73NTfDRTrVLZP1jT8d+VQ34f4I9G
h4uQiIP5ELglv/AtwQ7Sgs5VWMjJvJw5NKkc+TfQv9v1PpI1SisHkoHsakMP8QEM
Xoc9V8VpuEYHSbzaLEKZFtir06fUuVJ/zkb675EzEOil3Bxgb/iLRSvUmyHcWb0M
Dcomtrn7MVX7coGe5/ba/xMFTSdsHBKytW0w0TX+G20DtfrOPV15fCBEweEJ7bVD
KQYFRNqGZa7WZAaTL/7dUQY0PlqHVz2nvHAWiQheVoNqQdfcrZVbrJK1czPqfhl/
6dA4Cd9dZstC+rL9C3bZcmTDg6M/Zlp4xEKHkYOEKEM5HMqSGGQJK3X9twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVDqJ9/0eMpn8dAgoxAWHeKnAlPMB8GA1UdIwQY
MBaAFAMxuH6R6icQRtMZleemwDi/GxR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYTI0ZjYtYzVhMC00MGJmLWFiYjYt
OGRhNTM3M2E2YTZkLzEvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xYTI0ZjYtYzVhMC00MGJmLWFiYjYtOGRhNTM3M2E2YTZk
LzEvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHcBPc4a
OFFWuYHrmcJWTdON0pC2q2ARgASJCIjofIfVISIvAWxbv0hwRq/cs65GKTLrQ58J
4hbLJ1iAZg0CU+Ao4CGnyK4ClVv7VALHQn4Ncc3cE9lfpgkot7fbZ6lgBuwQpC9z
IFVMQ/QIEq3Dmn5mtYYt+ZWKZqP0YUeyp59tauR50k70FCy9XO0YwOUIKKdZRydh
4f/CvtTREn4qo72/i3umU0vHWdvATqMvSWXcIucWk1SRzj9N+qq3f+AsGNjctrr6
ttqB//HgsP55qyIXq0Cz63kocHirLo9dmGLb1jkFdHk2su65hQtoPktnsAL06bS+
HzZKg9c5PyhUlA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:03:02 2025 by rpki-client