Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier: KB9YzYNJKlAGXrkG+RlUNULDmsEiiZiXUkOTOmNFFGc=
Subject key identifier: 74:07:F3:E4:F1:27:62:02:09:47:79:03:67:4F:32:D9:92:20:BA:D2
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial: 0195E00FABD004925CF3E2F9D4312F16B5F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number: 0DFD
Signing time: Sat 29 Mar 2025 04:01:18 +0000
Manifest this update: Sat 29 Mar 2025 04:01:18 +0000
Manifest next update: Sun 30 Mar 2025 04:01:18 +0000
Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: RtnrxnNmI9KB2ri+PHc68CdN2oSVbJjYKlXYiTk91Sw=)
2: qHgPIcF0pz9j4TEEkIAHX7Dd0Xs.roa (hash: +F3TXNG5tHAq0c+WeS6vtqr5NrxVAYlw9IQBeKyvga0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:ab:d0:04:92:5c:f3:e2:f9:d4:31:2f:16:b5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Validity
Not Before: Mar 29 04:01:18 2025 GMT
Not After : Mar 30 04:01:18 2025 GMT
Subject: CN=7407f3e4f127620209477903674f32d99220bad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:51:1f:22:e7:69:62:7f:a2:5b:3c:26:4b:
e1:f2:42:bc:06:ae:b1:b3:0d:d2:05:6a:a5:0d:02:
75:cf:34:d8:f0:48:05:8b:c3:45:30:73:7a:43:5a:
dc:d8:51:7e:09:a1:5f:67:e1:50:78:8b:b5:34:ff:
c2:91:09:4b:de:39:10:96:da:63:2a:1c:19:fd:96:
63:9f:f0:2d:91:28:47:9e:d2:6b:3d:dc:98:88:cc:
c5:67:79:be:03:03:e4:68:59:50:f8:5d:88:33:d0:
2d:4b:79:d4:fa:4a:1a:c2:2c:b1:b0:fb:6c:d8:0a:
26:56:89:18:43:78:10:f6:a0:fc:3f:0e:a1:02:6c:
96:03:8d:67:19:31:a0:ac:3b:10:80:41:c3:1a:66:
b2:1d:ee:4a:2d:83:de:fe:5f:ae:da:9a:84:76:f9:
e5:04:1b:be:a2:d2:8d:2f:c1:46:3d:c2:dc:e0:fb:
e0:5e:4f:91:7a:ca:46:18:32:00:53:c7:a0:85:91:
a2:21:9d:b7:7c:ab:c9:61:1d:2a:0e:79:66:a7:e5:
4d:1f:d3:6c:6e:32:bf:41:c9:80:03:d7:da:83:1d:
bb:54:5d:7b:0b:3c:fe:d9:68:0a:8e:9f:c2:22:4c:
6f:4c:8f:f8:9a:dc:3e:b7:e7:2f:42:45:33:7e:0c:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:07:F3:E4:F1:27:62:02:09:47:79:03:67:4F:32:D9:92:20:BA:D2
X509v3 Authority Key Identifier:
keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6c:cd:51:f0:7f:7a:f9:2f:a5:b8:ef:f1:3f:8d:14:a5:81:
a9:ef:7c:bb:0f:64:e6:56:fe:ec:c5:14:c1:f6:ff:7e:5e:1f:
61:0b:83:72:dd:d3:5f:c4:fc:72:5c:14:4b:43:8a:3b:11:b3:
ce:d5:5d:56:de:f8:b7:46:78:15:22:d5:b0:85:1f:76:a3:5c:
f3:92:f0:ed:b4:02:7e:03:c6:0a:d1:19:8a:1a:fd:e0:89:ee:
ec:38:fc:aa:c3:57:13:70:95:6c:6b:a3:87:82:42:9b:4a:b6:
6b:97:7c:3f:38:bd:b2:8e:e9:28:04:cc:8e:a1:ef:03:77:2f:
21:cf:5f:57:0e:1d:b1:92:a5:8b:78:07:3e:c2:91:21:f1:91:
45:3f:81:1b:bc:21:88:3d:a0:64:ae:64:f8:ba:e0:8c:c4:62:
87:da:d2:d8:ea:9c:c8:e6:82:c1:27:bc:1d:5a:2f:09:d3:1b:
32:09:bb:2d:ef:00:25:18:4a:f1:cb:93:c7:f6:c5:d1:d3:90:
40:2d:05:2d:47:36:3f:fe:c0:9f:5b:57:9c:9c:62:7d:1c:77:
f7:b8:23:b8:eb:6a:c2:84:b6:c3:ac:1c:2a:41:ce:af:06:73:
16:fe:e7:f8:77:13:53:e6:d2:74:cd:d8:f9:92:b1:ca:9a:1d:
e6:79:07:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD6vQBJJc8+L51DEvFrX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMDEyYmY4ZjU3MjQ4NGE2ZjYwNjg1NjJjYTk5MTljNmRh
NTQ0NmYwHhcNMjUwMzI5MDQwMTE4WhcNMjUwMzMwMDQwMTE4WjAzMTEwLwYDVQQD
Eyg3NDA3ZjNlNGYxMjc2MjAyMDk0Nzc5MDM2NzRmMzJkOTkyMjBiYWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/lRHyLnaWJ/ols8Jkvh8kK8Bq6x
sw3SBWqlDQJ1zzTY8EgFi8NFMHN6Q1rc2FF+CaFfZ+FQeIu1NP/CkQlL3jkQltpj
KhwZ/ZZjn/AtkShHntJrPdyYiMzFZ3m+AwPkaFlQ+F2IM9AtS3nU+koawiyxsPts
2AomVokYQ3gQ9qD8Pw6hAmyWA41nGTGgrDsQgEHDGmayHe5KLYPe/l+u2pqEdvnl
BBu+otKNL8FGPcLc4PvgXk+RespGGDIAU8eghZGiIZ23fKvJYR0qDnlmp+VNH9Ns
bjK/QcmAA9fagx27VF17Czz+2WgKjp/CIkxvTI/4mtw+t+cvQkUzfgyOBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQH8+TxJ2ICCUd5A2dPMtmSILrSMB8GA1UdIwQY
MBaAFNABK/j1ckhKb2BoViypkZxtpURvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQt
ODQ3N2I2NjM4ZjMxLzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQtODQ3N2I2NjM4ZjMx
LzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWzNUfB/
evkvpbjv8T+NFKWBqe98uw9k5lb+7MUUwfb/fl4fYQuDct3TX8T8clwUS0OKOxGz
ztVdVt74t0Z4FSLVsIUfdqNc85Lw7bQCfgPGCtEZihr94Inu7Dj8qsNXE3CVbGuj
h4JCm0q2a5d8Pzi9so7pKATMjqHvA3cvIc9fVw4dsZKli3gHPsKRIfGRRT+BG7wh
iD2gZK5k+LrgjMRih9rS2OqcyOaCwSe8HVovCdMbMgm7Le8AJRhK8cuTx/bF0dOQ
QC0FLUc2P/7An1tXnJxifRx397gjuOtqwoS2w6wcKkHOrwZzFv7n+HcTU+bSdM3Y
+ZKxypod5nkHgg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:24:02 2025 by rpki-client