Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/408033-1af5-4669-9480-d676dc6e875e/1/AoOaQaHyrbuNW2yth5V1ZAb8Stg.mft
File: AoOaQaHyrbuNW2yth5V1ZAb8Stg.mft (raw, json)
Hash identifier: dclfVLE6V0DK0U9LlidX+XlJPR7Q0ko3s1Gki2qtNRQ=
Subject key identifier: B6:6C:A9:0F:90:56:C1:DE:97:51:9D:D7:C9:20:A0:58:0D:28:23:39
Authority key identifier: 02:83:9A:41:A1:F2:AD:BB:8D:5B:6C:AD:87:95:75:64:06:FC:4A:D8
Certificate issuer: /CN=02839a41a1f2adbb8d5b6cad8795756406fc4ad8
Certificate serial: 018C396C8B7C75F4A5FA94853DAA1C3CBA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOaQaHyrbuNW2yth5V1ZAb8Stg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/408033-1af5-4669-9480-d676dc6e875e/1/AoOaQaHyrbuNW2yth5V1ZAb8Stg.mft
Manifest number: 01B7
Signing time: Tue 05 Dec 2023 10:01:03 +0000
Manifest this update: Tue 05 Dec 2023 10:01:03 +0000
Manifest next update: Wed 06 Dec 2023 10:01:03 +0000
Files and hashes: 1: AoOaQaHyrbuNW2yth5V1ZAb8Stg.crl (hash: Usfgar1sq8Wdy0/5O39C8VGTH912veMqgRZPPdq440E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:6c:8b:7c:75:f4:a5:fa:94:85:3d:aa:1c:3c:ba:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02839a41a1f2adbb8d5b6cad8795756406fc4ad8
Validity
Not Before: Dec 5 10:01:03 2023 GMT
Not After : Dec 6 10:01:03 2023 GMT
Subject: CN=b66ca90f9056c1de97519dd7c920a0580d282339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:db:47:0e:f4:9b:5e:e4:08:28:d4:dd:e4:
89:d5:0d:fd:3e:00:a2:f5:0c:49:19:eb:c1:2b:7e:
e7:91:84:aa:74:8e:37:b6:cd:ca:25:00:08:12:d1:
fc:79:ed:64:e5:8d:61:84:a9:94:81:d9:2c:66:da:
49:b1:b4:da:d5:d7:02:af:d2:05:33:ea:35:95:3f:
d5:60:9d:ae:c2:fd:2c:e3:03:d4:42:ee:94:cf:6f:
e4:ee:08:c3:21:23:1c:f7:ab:04:81:ec:64:3c:65:
8b:64:73:60:cf:13:e5:53:c8:3c:0a:8c:6c:45:20:
79:47:d0:b1:3e:65:ee:2c:39:bc:28:a0:5b:4e:b6:
90:5a:68:b2:85:86:53:08:f7:5e:6c:41:42:a2:4c:
eb:de:44:6a:50:20:f2:97:b4:2f:1a:13:4c:41:fa:
66:38:93:a2:3e:23:79:82:79:62:f5:35:d7:62:9e:
d4:f9:e7:fb:08:57:67:3e:94:7f:4b:c0:a6:72:8c:
b3:a2:23:ed:5b:6e:79:0d:1c:6c:26:7e:98:10:7d:
ef:69:38:57:87:ea:54:68:35:1a:b7:c9:37:3e:05:
bc:51:b0:6c:37:f8:96:6e:00:41:d1:7f:8a:b9:3a:
9c:6a:71:2d:6a:01:a5:8e:0d:b0:38:73:66:ce:40:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6C:A9:0F:90:56:C1:DE:97:51:9D:D7:C9:20:A0:58:0D:28:23:39
X509v3 Authority Key Identifier:
keyid:02:83:9A:41:A1:F2:AD:BB:8D:5B:6C:AD:87:95:75:64:06:FC:4A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOaQaHyrbuNW2yth5V1ZAb8Stg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/408033-1af5-4669-9480-d676dc6e875e/1/AoOaQaHyrbuNW2yth5V1ZAb8Stg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/408033-1af5-4669-9480-d676dc6e875e/1/AoOaQaHyrbuNW2yth5V1ZAb8Stg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f5:7b:ba:29:24:5e:09:bf:f9:0a:4f:81:57:dd:43:da:1c:
ce:0b:2a:55:d0:52:c9:c9:54:e0:4c:5c:7b:6d:ff:66:e3:a3:
57:03:d9:01:ce:04:08:42:30:bb:b4:ff:17:6a:ad:72:55:08:
5e:82:0c:d1:0d:61:54:5b:19:af:2d:ec:28:5d:78:45:b5:20:
15:51:11:0a:b1:f2:98:6e:3b:f2:f6:1e:00:cb:e2:a8:09:0d:
55:2f:92:9e:ca:6b:cb:5a:8c:e3:98:35:3b:05:e4:82:27:b1:
0c:1d:58:95:91:79:91:d8:5e:9b:12:8b:31:fa:3c:3e:db:40:
61:c7:a3:0f:79:ec:0f:ba:c1:c6:ac:a2:4b:e1:af:35:7b:96:
ea:2c:37:26:69:be:13:c9:ff:bd:e0:c7:de:31:51:c3:93:37:
aa:90:e6:93:d5:35:92:c2:82:c9:cf:5a:b4:c5:88:78:28:7b:
20:8e:c7:ea:2e:d1:f5:b5:fa:9e:90:fb:36:6f:1b:5b:01:5f:
3f:72:a5:52:be:33:07:29:50:c6:a2:b1:b4:f7:26:f3:c0:3d:
91:50:b8:bc:aa:3d:c3:eb:43:fe:a4:e3:89:9f:08:9b:87:a7:
c7:bd:00:9b:f6:ce:22:a6:a7:c7:07:07:18:f7:71:80:7b:6a:
c6:1d:92:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYw5bIt8dfSl+pSFPaocPLpyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODM5YTQxYTFmMmFkYmI4ZDViNmNhZDg3OTU3NTY0MDZm
YzRhZDgwHhcNMjMxMjA1MTAwMTAzWhcNMjMxMjA2MTAwMTAzWjAzMTEwLwYDVQQD
EyhiNjZjYTkwZjkwNTZjMWRlOTc1MTlkZDdjOTIwYTA1ODBkMjgyMzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDLbRw70m17kCCjU3eSJ1Q39PgCi
9QxJGevBK37nkYSqdI43ts3KJQAIEtH8ee1k5Y1hhKmUgdksZtpJsbTa1dcCr9IF
M+o1lT/VYJ2uwv0s4wPUQu6Uz2/k7gjDISMc96sEgexkPGWLZHNgzxPlU8g8Coxs
RSB5R9CxPmXuLDm8KKBbTraQWmiyhYZTCPdebEFCokzr3kRqUCDyl7QvGhNMQfpm
OJOiPiN5gnli9TXXYp7U+ef7CFdnPpR/S8CmcoyzoiPtW255DRxsJn6YEH3vaThX
h+pUaDUat8k3PgW8UbBsN/iWbgBB0X+KuTqcanEtagGljg2wOHNmzkDk+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZsqQ+QVsHel1Gd18kgoFgNKCM5MB8GA1UdIwQY
MBaAFAKDmkGh8q27jVtsrYeVdWQG/ErYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9PYVFhSHlyYnVOVzJ5dGg1VjFaQWI4U3RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MDgwMzMtMWFmNS00NjY5LTk0ODAt
ZDY3NmRjNmU4NzVlLzEvQW9PYVFhSHlyYnVOVzJ5dGg1VjFaQWI4U3RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS80MDgwMzMtMWFmNS00NjY5LTk0ODAtZDY3NmRjNmU4NzVl
LzEvQW9PYVFhSHlyYnVOVzJ5dGg1VjFaQWI4U3RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/V7uikk
Xgm/+QpPgVfdQ9oczgsqVdBSyclU4Exce23/ZuOjVwPZAc4ECEIwu7T/F2qtclUI
XoIM0Q1hVFsZry3sKF14RbUgFVERCrHymG478vYeAMviqAkNVS+Snspry1qM45g1
OwXkgiexDB1YlZF5kdhemxKLMfo8PttAYcejD3nsD7rBxqyiS+GvNXuW6iw3Jmm+
E8n/veDH3jFRw5M3qpDmk9U1ksKCyc9atMWIeCh7II7H6i7R9bX6npD7Nm8bWwFf
P3KlUr4zBylQxqKxtPcm88A9kVC4vKo9w+tD/qTjiZ8Im4enx70Am/bOIqanxwcH
GPdxgHtqxh2SIw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:52:39 2025 by rpki-client