Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/ag9YMNvEu6u2gnd-vThD11BInsg.mft
File: ag9YMNvEu6u2gnd-vThD11BInsg.mft (raw, json)
Hash identifier: uboI2/xIMKecOI6csJFCnGQjG8FB6bta01dyqGn3x1U=
Subject key identifier: 05:D9:C0:B2:5B:59:45:CA:01:D0:E3:F0:70:1B:86:4D:08:49:EB:3F
Authority key identifier: 6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8
Certificate issuer: /CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
Certificate serial: 0193AA38C373859A64B46F4C3E01197A8F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/ag9YMNvEu6u2gnd-vThD11BInsg.mft
Manifest number: 13BA
Signing time: Mon 09 Dec 2024 07:01:06 +0000
Manifest this update: Mon 09 Dec 2024 07:01:06 +0000
Manifest next update: Tue 10 Dec 2024 07:01:06 +0000
Files and hashes: 1: ag9YMNvEu6u2gnd-vThD11BInsg.crl (hash: 2IwDBlvRRiWKJXL+D9N8UE9G7+FBKkEWuFB0Ayhde8k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:38:c3:73:85:9a:64:b4:6f:4c:3e:01:19:7a:8f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
Validity
Not Before: Dec 9 07:01:06 2024 GMT
Not After : Dec 10 07:01:06 2024 GMT
Subject: CN=05d9c0b25b5945ca01d0e3f0701b864d0849eb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:ca:f6:fb:ba:a7:95:81:28:bf:f0:20:28:
e9:8d:4c:28:07:7e:10:72:6f:6a:2e:7d:1f:78:0a:
d0:cb:c7:21:b1:64:60:f5:81:68:ca:fe:42:f4:1e:
7f:b3:74:60:d3:c3:a5:20:83:f4:38:0c:5f:f9:e9:
23:d1:2f:42:e2:5f:1a:fb:bf:8a:fe:ea:19:6f:6d:
20:17:8e:48:0c:25:cc:aa:c0:50:97:d0:4e:b6:de:
67:a4:ea:f2:48:54:c9:dd:a9:6e:78:41:85:d4:e0:
ad:85:ca:c0:42:cc:55:5b:d5:38:35:97:e7:a2:3b:
66:09:5c:db:34:80:72:b1:1b:58:06:da:06:90:95:
a7:80:e5:48:19:07:30:da:89:3b:74:f4:75:42:f2:
f6:f1:1d:9f:e0:ab:80:41:08:e0:d8:e0:18:67:76:
02:bb:68:f6:4d:af:f5:a4:6b:91:f0:de:f0:df:4f:
32:09:4c:1b:2a:b3:44:01:99:1d:d4:72:2f:87:6b:
58:17:01:18:27:87:aa:91:7a:aa:9f:63:d7:23:13:
0b:23:56:cf:f3:87:1d:43:f6:4b:6d:04:3f:72:14:
8e:ac:df:9b:12:02:3c:c1:c7:17:ca:6f:34:e5:53:
a3:7d:07:45:7a:fe:fa:a5:1c:65:da:8a:e9:61:c8:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D9:C0:B2:5B:59:45:CA:01:D0:E3:F0:70:1B:86:4D:08:49:EB:3F
X509v3 Authority Key Identifier:
keyid:6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/ag9YMNvEu6u2gnd-vThD11BInsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/ag9YMNvEu6u2gnd-vThD11BInsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1e:4f:3e:64:49:63:03:a3:8c:9b:39:3b:22:4c:c6:cb:56:
52:df:a2:2c:bc:73:49:d4:cc:1c:0f:e5:67:ad:5f:66:ed:8a:
98:fc:97:27:7b:4c:4a:f5:24:fc:9e:d0:c8:03:a0:eb:1d:8a:
1e:25:2c:03:de:99:e9:af:e4:4a:37:6f:43:4c:43:66:34:b4:
bd:2a:66:58:ba:88:c0:db:48:40:ed:a1:77:89:1b:cc:e3:f8:
58:dc:78:1d:e1:01:b0:a3:43:e6:25:ef:92:ff:e1:5e:98:6b:
c7:06:7d:f0:5b:f4:28:97:89:1b:78:16:00:9c:5c:d8:48:e1:
1a:b4:0c:c2:e5:95:bf:73:db:9a:bf:1e:81:52:f6:0f:4b:5e:
a9:da:09:cf:9c:30:5d:9f:cd:de:22:d5:c6:62:ba:91:17:47:
c9:52:53:d6:58:bc:89:46:2e:83:75:fd:cc:b6:41:bc:1b:f3:
2e:b1:08:e1:1a:10:ac:d9:26:38:6a:42:15:95:3a:cd:61:94:
37:7f:ae:60:a3:1e:4b:5d:49:71:50:c0:39:07:b3:f8:96:b5:
bb:63:cb:07:eb:27:ff:46:ab:c9:f0:0a:5a:a5:00:27:e7:36:
99:3c:e2:5c:fe:a4:a4:6b:8f:d3:47:00:5f:10:2a:6f:2d:18:
5e:29:3e:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZOqOMNzhZpktG9MPgEZeo91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMGY1ODMwZGJjNGJiYWJiNjgyNzc3ZWJkMzg0M2Q3NTA0
ODllYzgwHhcNMjQxMjA5MDcwMTA2WhcNMjQxMjEwMDcwMTA2WjAzMTEwLwYDVQQD
EygwNWQ5YzBiMjViNTk0NWNhMDFkMGUzZjA3MDFiODY0ZDA4NDllYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6DK9vu6p5WBKL/wICjpjUwoB34Q
cm9qLn0feArQy8chsWRg9YFoyv5C9B5/s3Rg08OlIIP0OAxf+ekj0S9C4l8a+7+K
/uoZb20gF45IDCXMqsBQl9BOtt5npOrySFTJ3alueEGF1OCthcrAQsxVW9U4NZfn
ojtmCVzbNIBysRtYBtoGkJWngOVIGQcw2ok7dPR1QvL28R2f4KuAQQjg2OAYZ3YC
u2j2Ta/1pGuR8N7w308yCUwbKrNEAZkd1HIvh2tYFwEYJ4eqkXqqn2PXIxMLI1bP
84cdQ/ZLbQQ/chSOrN+bEgI8wccXym805VOjfQdFev76pRxl2orpYciC4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXZwLJbWUXKAdDj8HAbhk0ISes/MB8GA1UdIwQY
MBaAFGoPWDDbxLurtoJ3fr04Q9dQSJ7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWc5WU1OdkV1NnUyZ25kLXZUaEQxMUJJbnNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84YTMwYjgtMWMxZC00MWMyLTk5NGUt
NTY2NmMyODNiMzA2LzEvYWc5WU1OdkV1NnUyZ25kLXZUaEQxMUJJbnNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84YTMwYjgtMWMxZC00MWMyLTk5NGUtNTY2NmMyODNiMzA2
LzEvYWc5WU1OdkV1NnUyZ25kLXZUaEQxMUJJbnNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARh5PPmRJ
YwOjjJs5OyJMxstWUt+iLLxzSdTMHA/lZ61fZu2KmPyXJ3tMSvUk/J7QyAOg6x2K
HiUsA96Z6a/kSjdvQ0xDZjS0vSpmWLqIwNtIQO2hd4kbzOP4WNx4HeEBsKND5iXv
kv/hXphrxwZ98Fv0KJeJG3gWAJxc2EjhGrQMwuWVv3Pbmr8egVL2D0teqdoJz5ww
XZ/N3iLVxmK6kRdHyVJT1li8iUYug3X9zLZBvBvzLrEI4RoQrNkmOGpCFZU6zWGU
N3+uYKMeS11JcVDAOQez+Ja1u2PLB+sn/0aryfAKWqUAJ+c2mTziXP6kpGuP00cA
XxAqby0YXik+Dw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 01:28:15 2025 by rpki-client