Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7be2e9-0cc4-4ec2-8934-6506eff3d354/1/AleOlpdsgr6RLAZzVbyJczn8s6Q.mft
File: AleOlpdsgr6RLAZzVbyJczn8s6Q.mft (raw, json)
Hash identifier: imzApVUD3e2v75sNc8AyFoWSADy22+/qcC5Q4E1Jmhk=
Subject key identifier: 1A:B5:CF:D1:57:0D:8C:E8:3B:81:C2:26:06:24:D0:65:30:19:A1:18
Authority key identifier: 02:57:8E:96:97:6C:82:BE:91:2C:06:73:55:BC:89:73:39:FC:B3:A4
Certificate issuer: /CN=02578e96976c82be912c067355bc897339fcb3a4
Certificate serial: 019510C74502FD8B93DA5338D3C7317DF29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AleOlpdsgr6RLAZzVbyJczn8s6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7be2e9-0cc4-4ec2-8934-6506eff3d354/1/AleOlpdsgr6RLAZzVbyJczn8s6Q.mft
Manifest number: 0688
Signing time: Sun 16 Feb 2025 22:00:49 +0000
Manifest this update: Sun 16 Feb 2025 22:00:49 +0000
Manifest next update: Mon 17 Feb 2025 22:00:49 +0000
Files and hashes: 1: AleOlpdsgr6RLAZzVbyJczn8s6Q.crl (hash: s3nQxTWeRNmrFp103LHGfovXb4Ot4u2oapuTgoC1scw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:45:02:fd:8b:93:da:53:38:d3:c7:31:7d:f2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02578e96976c82be912c067355bc897339fcb3a4
Validity
Not Before: Feb 16 22:00:49 2025 GMT
Not After : Feb 17 22:00:49 2025 GMT
Subject: CN=1ab5cfd1570d8ce83b81c2260624d0653019a118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:9c:d3:de:09:48:63:ba:6e:d8:1f:e5:f1:
a6:97:2d:c2:fb:ba:95:77:25:7a:78:93:02:aa:24:
94:da:15:10:d0:0c:67:03:dc:46:9e:dd:ca:ea:56:
da:24:9b:39:fa:70:1b:74:f3:bb:67:7b:81:f1:d9:
2e:ba:bc:7a:fd:f3:fb:e1:aa:f0:95:6e:bc:e7:c0:
36:e8:b2:a4:20:1a:b9:ac:03:5b:d3:c7:0b:0d:cb:
87:f9:bf:43:29:1e:90:60:f2:88:74:bc:bb:aa:f8:
00:64:f2:0e:36:e0:e4:b9:22:26:60:d5:7c:a1:f4:
fe:77:6a:70:7b:ad:0b:1d:84:e6:82:df:4e:f4:3d:
c8:fa:87:06:f6:8d:fe:a9:1f:cd:2d:fd:fb:b4:59:
d9:19:f7:57:64:e2:0f:7f:d0:7c:c0:3e:39:e6:27:
10:7b:6e:62:a2:df:8e:2f:c5:31:d0:ba:fa:03:90:
12:b0:fb:1f:9a:08:62:ef:8b:28:3d:c8:15:dc:b6:
38:2c:7f:ef:05:26:a9:39:2b:74:04:23:9d:c8:8b:
56:3d:7f:a2:82:2c:0b:4d:e6:bd:17:d3:5d:95:43:
b3:67:43:c7:de:b6:80:73:0f:9d:d1:e7:87:67:32:
ac:90:d9:aa:99:47:b4:65:4d:03:9b:60:54:35:c2:
28:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B5:CF:D1:57:0D:8C:E8:3B:81:C2:26:06:24:D0:65:30:19:A1:18
X509v3 Authority Key Identifier:
keyid:02:57:8E:96:97:6C:82:BE:91:2C:06:73:55:BC:89:73:39:FC:B3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AleOlpdsgr6RLAZzVbyJczn8s6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7be2e9-0cc4-4ec2-8934-6506eff3d354/1/AleOlpdsgr6RLAZzVbyJczn8s6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7be2e9-0cc4-4ec2-8934-6506eff3d354/1/AleOlpdsgr6RLAZzVbyJczn8s6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:19:ce:50:93:62:90:a9:48:57:3e:5d:a7:69:95:ad:73:3c:
1a:a9:42:5d:b6:0b:36:fc:22:76:c4:08:68:db:c7:d6:c1:d8:
c4:cc:1e:db:7a:44:4c:f7:0b:20:cc:78:cb:a2:0b:1b:7a:5f:
c1:f3:d6:f3:9a:2a:36:ae:a7:94:b9:89:04:ec:de:2e:82:9b:
f9:40:99:87:a4:00:93:42:95:02:2d:31:32:7a:13:86:fc:0d:
ff:93:2d:62:a8:75:d3:3b:f0:1c:a4:ba:41:85:eb:dc:59:3e:
12:1a:5c:05:7c:82:2a:ea:5b:22:d5:84:49:8a:ff:41:c2:20:
d6:6d:39:48:02:e3:4f:1e:82:9d:1f:33:a9:a9:87:ec:90:07:
c3:63:a8:ce:1b:81:91:d9:d4:c7:43:6c:a2:2e:fb:6d:c5:84:
64:8e:22:fa:9e:05:2b:f1:19:57:27:1f:ea:90:1d:c9:52:59:
24:c0:ae:8a:05:5e:05:1f:52:5b:79:d9:67:4a:42:df:ad:40:
ff:38:43:56:b6:7c:2a:52:de:af:b4:2c:04:7d:d2:3f:f1:f5:
ff:12:d5:ac:a9:e0:15:f8:52:87:ee:85:a0:6e:7f:5d:cd:04:
db:a0:29:fc:fa:d5:06:e7:cb:17:df:4e:b3:f3:b1:7f:70:63:
7b:dd:aa:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx0UC/YuT2lM408cxffKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNTc4ZTk2OTc2YzgyYmU5MTJjMDY3MzU1YmM4OTczMzlm
Y2IzYTQwHhcNMjUwMjE2MjIwMDQ5WhcNMjUwMjE3MjIwMDQ5WjAzMTEwLwYDVQQD
EygxYWI1Y2ZkMTU3MGQ4Y2U4M2I4MWMyMjYwNjI0ZDA2NTMwMTlhMTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOmc094JSGO6btgf5fGmly3C+7qV
dyV6eJMCqiSU2hUQ0AxnA9xGnt3K6lbaJJs5+nAbdPO7Z3uB8dkuurx6/fP74arw
lW6858A26LKkIBq5rANb08cLDcuH+b9DKR6QYPKIdLy7qvgAZPIONuDkuSImYNV8
ofT+d2pwe60LHYTmgt9O9D3I+ocG9o3+qR/NLf37tFnZGfdXZOIPf9B8wD455icQ
e25iot+OL8Ux0Lr6A5ASsPsfmghi74soPcgV3LY4LH/vBSapOSt0BCOdyItWPX+i
giwLTea9F9NdlUOzZ0PH3raAcw+d0eeHZzKskNmqmUe0ZU0Dm2BUNcIopwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBq1z9FXDYzoO4HCJgYk0GUwGaEYMB8GA1UdIwQY
MBaAFAJXjpaXbIK+kSwGc1W8iXM5/LOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWxlT2xwZHNncjZSTEFaelZieUpjem44czZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83YmUyZTktMGNjNC00ZWMyLTg5MzQt
NjUwNmVmZjNkMzU0LzEvQWxlT2xwZHNncjZSTEFaelZieUpjem44czZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83YmUyZTktMGNjNC00ZWMyLTg5MzQtNjUwNmVmZjNkMzU0
LzEvQWxlT2xwZHNncjZSTEFaelZieUpjem44czZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThnOUJNi
kKlIVz5dp2mVrXM8GqlCXbYLNvwidsQIaNvH1sHYxMwe23pETPcLIMx4y6ILG3pf
wfPW85oqNq6nlLmJBOzeLoKb+UCZh6QAk0KVAi0xMnoThvwN/5MtYqh10zvwHKS6
QYXr3Fk+EhpcBXyCKupbItWESYr/QcIg1m05SALjTx6CnR8zqamH7JAHw2OozhuB
kdnUx0Nsoi77bcWEZI4i+p4FK/EZVycf6pAdyVJZJMCuigVeBR9SW3nZZ0pC361A
/zhDVrZ8KlLer7QsBH3SP/H1/xLVrKngFfhSh+6FoG5/Xc0E26Ap/PrVBufLF99O
s/Oxf3Bje92qBw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:28:40 2025 by rpki-client