Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/271c6b-19d0-40b5-b58d-0de393171622/1/poMdDvWlnjTWIdYTto-b_7Upj80.mft
File: poMdDvWlnjTWIdYTto-b_7Upj80.mft (raw, json)
Hash identifier: +aBXD3OfgqzGVnk2OnmcUwskeC5i49qpZ+EUEHPZAPk=
Subject key identifier: AF:BD:ED:8C:78:43:B6:6B:83:29:58:F8:18:22:99:5A:39:A5:F2:CD
Authority key identifier: A6:83:1D:0E:F5:A5:9E:34:D6:21:D6:13:B6:8F:9B:FF:B5:29:8F:CD
Certificate issuer: /CN=a6831d0ef5a59e34d621d613b68f9bffb5298fcd
Certificate serial: 018D8CE1CCFF4FC0281A4B3F88D42C1C8B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/poMdDvWlnjTWIdYTto-b_7Upj80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/271c6b-19d0-40b5-b58d-0de393171622/1/poMdDvWlnjTWIdYTto-b_7Upj80.mft
Manifest number: 083A
Signing time: Fri 09 Feb 2024 08:00:24 +0000
Manifest this update: Fri 09 Feb 2024 08:00:24 +0000
Manifest next update: Sat 10 Feb 2024 08:00:24 +0000
Files and hashes: 1: 0o191MVnVBt85ryZHFYu6Q0NdiQ.roa (hash: IwSJaL44ZZs3lm3EFPqzbVAdqz8rmKe1xwMIKuV8lJc=)
2: poMdDvWlnjTWIdYTto-b_7Upj80.crl (hash: t6pEbQ2dDOFJxYo36jQdmjDNKpqULTcX3oIxLf9IbUA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8c:e1:cc:ff:4f:c0:28:1a:4b:3f:88:d4:2c:1c:8b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6831d0ef5a59e34d621d613b68f9bffb5298fcd
Validity
Not Before: Feb 9 08:00:24 2024 GMT
Not After : Feb 10 08:00:24 2024 GMT
Subject: CN=afbded8c7843b66b832958f81822995a39a5f2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:95:63:51:3b:ea:67:0a:2d:82:1b:9b:14:
49:ae:85:9c:18:56:cd:f9:f4:3a:d6:93:fd:9e:24:
e1:62:ba:d0:95:2a:3d:1a:66:c5:23:66:80:34:b8:
32:d5:53:b8:fa:0c:95:6b:7c:7f:20:83:7f:1c:a4:
f3:ad:85:c9:05:31:dd:20:42:78:ba:61:d1:4f:b6:
44:47:e2:93:ed:37:d6:aa:3c:04:0d:49:92:8e:eb:
11:77:eb:ee:15:fa:c2:59:02:ce:c0:4a:d3:c7:aa:
58:c5:10:ea:83:6c:13:44:3b:6c:80:dd:87:d5:ce:
3c:ff:b3:00:91:9c:29:91:cc:8f:27:b2:80:03:cb:
fa:db:3c:4a:8f:ab:e7:80:d9:33:aa:6f:20:80:d4:
cd:a1:cd:47:59:15:93:e1:e1:9e:43:4e:8f:8e:20:
dd:27:f6:ee:08:cf:e8:09:47:bf:bb:f1:57:3d:6f:
c1:7b:19:d8:56:96:2b:7a:c1:a5:59:9a:1a:85:14:
a6:5d:18:17:3f:72:0a:66:f4:0d:69:7f:de:61:dd:
e8:49:b8:6e:ab:3c:a2:70:d4:6b:e7:75:5a:94:c4:
01:f8:4f:c7:11:92:c0:b5:b7:7c:16:a0:84:2a:1a:
2b:ef:a8:65:55:5e:21:be:e6:a0:f5:9e:2d:02:22:
fb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BD:ED:8C:78:43:B6:6B:83:29:58:F8:18:22:99:5A:39:A5:F2:CD
X509v3 Authority Key Identifier:
keyid:A6:83:1D:0E:F5:A5:9E:34:D6:21:D6:13:B6:8F:9B:FF:B5:29:8F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/poMdDvWlnjTWIdYTto-b_7Upj80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/271c6b-19d0-40b5-b58d-0de393171622/1/poMdDvWlnjTWIdYTto-b_7Upj80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/271c6b-19d0-40b5-b58d-0de393171622/1/poMdDvWlnjTWIdYTto-b_7Upj80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3f:b3:d0:68:22:a9:6f:d2:78:d8:6d:cf:1e:71:b2:af:27:
0c:6e:7b:07:aa:38:19:f5:c9:6d:62:a1:b9:33:f5:79:c9:79:
d1:70:3b:8b:31:95:b8:66:87:ce:c9:d8:41:56:a0:3f:1c:89:
67:7c:c1:be:eb:b1:08:e8:8c:0c:7c:43:78:62:a4:c5:b6:93:
6f:c0:99:f6:c9:83:50:ca:b4:e6:f3:eb:3b:6f:a5:df:3c:aa:
fd:34:fe:38:ca:b7:01:dc:48:c8:23:f7:a3:c6:72:1c:dd:0b:
b2:e6:e9:da:f6:2e:7e:d4:ed:fb:df:2d:76:55:13:65:db:d6:
d1:ca:90:b8:18:95:d3:ef:5a:ee:9c:af:46:bb:06:4e:96:4b:
bb:f1:7d:b5:b8:0d:17:ba:ea:a3:5c:9d:b5:2c:66:f4:52:f9:
35:56:15:c1:3b:51:c6:50:79:68:9d:50:75:64:cd:ea:b4:92:
de:b9:d4:aa:e7:29:e4:4a:2a:bf:77:02:28:1b:f9:11:74:3b:
5a:c8:62:17:eb:be:1b:64:5f:ae:52:7e:69:b4:a6:27:42:8b:
f3:ce:f7:1b:a3:6d:bc:c1:cf:04:e8:79:2a:96:c2:f5:6b:97:
d4:ac:c7:b7:af:66:07:50:c5:0a:d4:4e:b5:a5:89:0e:81:37:
5e:f1:4f:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY2M4cz/T8AoGks/iNQsHItdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ODMxZDBlZjVhNTllMzRkNjIxZDYxM2I2OGY5YmZmYjUy
OThmY2QwHhcNMjQwMjA5MDgwMDI0WhcNMjQwMjEwMDgwMDI0WjAzMTEwLwYDVQQD
EyhhZmJkZWQ4Yzc4NDNiNjZiODMyOTU4ZjgxODIyOTk1YTM5YTVmMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldeVY1E76mcKLYIbmxRJroWcGFbN
+fQ61pP9niThYrrQlSo9GmbFI2aANLgy1VO4+gyVa3x/IIN/HKTzrYXJBTHdIEJ4
umHRT7ZER+KT7TfWqjwEDUmSjusRd+vuFfrCWQLOwErTx6pYxRDqg2wTRDtsgN2H
1c48/7MAkZwpkcyPJ7KAA8v62zxKj6vngNkzqm8ggNTNoc1HWRWT4eGeQ06PjiDd
J/buCM/oCUe/u/FXPW/BexnYVpYresGlWZoahRSmXRgXP3IKZvQNaX/eYd3oSbhu
qzyicNRr53ValMQB+E/HEZLAtbd8FqCEKhor76hlVV4hvuag9Z4tAiL7fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+97Yx4Q7ZrgylY+BgimVo5pfLNMB8GA1UdIwQY
MBaAFKaDHQ71pZ401iHWE7aPm/+1KY/NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG9NZER2V2xualRXSWRZVHRvLWJfN1VwajgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yNzFjNmItMTlkMC00MGI1LWI1OGQt
MGRlMzkzMTcxNjIyLzEvcG9NZER2V2xualRXSWRZVHRvLWJfN1VwajgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8yNzFjNmItMTlkMC00MGI1LWI1OGQtMGRlMzkzMTcxNjIy
LzEvcG9NZER2V2xualRXSWRZVHRvLWJfN1VwajgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlD+z0Ggi
qW/SeNhtzx5xsq8nDG57B6o4GfXJbWKhuTP1ecl50XA7izGVuGaHzsnYQVagPxyJ
Z3zBvuuxCOiMDHxDeGKkxbaTb8CZ9smDUMq05vPrO2+l3zyq/TT+OMq3AdxIyCP3
o8ZyHN0Lsubp2vYuftTt+98tdlUTZdvW0cqQuBiV0+9a7pyvRrsGTpZLu/F9tbgN
F7rqo1ydtSxm9FL5NVYVwTtRxlB5aJ1QdWTN6rSS3rnUqucp5Eoqv3cCKBv5EXQ7
WshiF+u+G2RfrlJ+abSmJ0KL8873G6NtvMHPBOh5KpbC9WuX1KzHt69mB1DFCtRO
taWJDoE3XvFPjg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:19 2025 by rpki-client