Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: TenHo5sokpYcXQZZjp+CL99/neeVPQAZtz+6DY5Ex10=
Subject key identifier: ED:E8:8E:3F:57:BF:79:70:B5:FF:A6:41:75:DB:B3:93:A4:20:CF:B5
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 01962FAB71410F37C65E370194E9C11D07B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 30
Signing time: Sun 13 Apr 2025 15:01:26 +0000
Manifest this update: Sun 13 Apr 2025 15:01:26 +0000
Manifest next update: Mon 14 Apr 2025 15:01:26 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: t28x8rQovya5dvzzDdgsrMwxcrxsBwiWyT7EdPg2+es=)
2: g2CXKA0Q172jL1FvPLyV_ep5ju0.roa (hash: 11gRkpCQE+58w0mcA/1mDxt2mYAAWr8ch94H20jZvcI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:ab:71:41:0f:37:c6:5e:37:01:94:e9:c1:1d:07:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Apr 13 15:01:26 2025 GMT
Not After : Apr 14 15:01:26 2025 GMT
Subject: CN=ede88e3f57bf7970b5ffa64175dbb393a420cfb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:c5:7a:bb:c1:3b:85:85:7b:a5:0b:7c:23:
7e:72:5c:02:16:df:ac:93:d5:7f:a9:bb:63:45:f4:
82:d6:c4:82:b6:34:21:c6:63:60:ab:f7:b8:a2:68:
de:2d:d1:6b:de:95:5f:f9:83:72:97:1b:af:e0:84:
39:d7:32:b5:fd:31:3d:9c:06:9c:88:37:27:f7:82:
a7:0e:c1:29:aa:76:9e:47:52:c0:10:aa:79:e2:19:
c3:03:96:5d:e2:d2:94:35:34:9e:93:1b:a7:26:43:
d7:38:40:1d:e8:91:84:b6:59:5f:45:7a:b3:24:95:
34:55:84:dd:81:59:cd:e3:99:03:aa:b7:ae:66:d9:
c1:c0:81:9f:9a:b5:8a:97:7a:de:ad:99:d8:fd:47:
a0:13:22:eb:c5:18:8f:c2:d1:07:43:36:21:66:b0:
32:98:7f:e5:7f:29:f9:58:4b:c6:7c:70:f0:e9:a1:
98:21:89:20:a6:c4:f1:ea:c9:82:7b:e1:a1:79:e4:
3e:25:28:37:58:ab:b4:b6:45:c8:6d:ad:48:96:2d:
c9:5a:b8:55:85:47:54:34:dd:1d:48:e2:de:f4:6e:
9b:40:58:4d:54:2e:9a:d2:1d:81:66:d5:ee:e2:f6:
92:37:ea:3b:d7:53:dd:e5:3c:8d:0e:ac:60:71:b8:
8e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E8:8E:3F:57:BF:79:70:B5:FF:A6:41:75:DB:B3:93:A4:20:CF:B5
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2a:b4:3b:27:25:02:cb:6a:ef:7a:04:fc:d5:b0:4c:8b:68:
1f:48:41:aa:de:f1:89:58:61:d9:18:73:62:d9:be:b6:de:c2:
2f:87:d5:95:23:fd:37:c4:78:73:f0:ec:eb:35:37:22:1e:e9:
29:2e:c5:bf:11:71:ca:32:91:50:34:52:c2:14:d7:5c:56:74:
ac:bf:9e:46:b7:d8:96:91:2f:c0:9a:35:75:73:ad:f4:3a:d7:
01:98:1f:bb:00:9b:b3:36:98:9b:c8:90:45:93:b7:29:44:0b:
18:fa:8d:b6:26:3a:80:fc:7c:f7:a5:06:b0:57:e6:b9:f8:f3:
45:fa:a6:10:2e:1c:13:bb:5f:8e:2c:c4:61:a2:4f:23:5a:7a:
a1:26:23:0b:fe:a3:67:1d:15:4c:a8:f8:4b:ca:73:3e:9c:84:
52:4f:f5:c9:21:bd:7d:fb:1c:d7:e6:8f:d9:68:fc:d2:12:7d:
a7:96:d7:d5:41:f6:ac:58:c9:27:fa:68:30:80:31:60:bb:fc:
ae:5f:f9:8d:09:9d:db:2e:35:52:7d:f6:bc:f0:36:d9:51:52:
e2:18:cc:b8:9d:0b:97:c8:c6:0b:a6:b9:4f:40:df:29:5f:f4:
6d:14:d2:c5:c9:61:96:49:72:05:90:46:3d:b0:e2:d9:fb:e7:
5e:1c:96:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq3FBDzfGXjcBlOnBHQe2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxODE4MjJhOWNhMmEwMDhmNWNkMTFiOWY5ZGJhMTZlZTJj
NjE0NTkwHhcNMjUwNDEzMTUwMTI2WhcNMjUwNDE0MTUwMTI2WjAzMTEwLwYDVQQD
EyhlZGU4OGUzZjU3YmY3OTcwYjVmZmE2NDE3NWRiYjM5M2E0MjBjZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYTFervBO4WFe6ULfCN+clwCFt+s
k9V/qbtjRfSC1sSCtjQhxmNgq/e4omjeLdFr3pVf+YNylxuv4IQ51zK1/TE9nAac
iDcn94KnDsEpqnaeR1LAEKp54hnDA5Zd4tKUNTSekxunJkPXOEAd6JGEtllfRXqz
JJU0VYTdgVnN45kDqreuZtnBwIGfmrWKl3rerZnY/UegEyLrxRiPwtEHQzYhZrAy
mH/lfyn5WEvGfHDw6aGYIYkgpsTx6smCe+GheeQ+JSg3WKu0tkXIba1Ili3JWrhV
hUdUNN0dSOLe9G6bQFhNVC6a0h2BZtXu4vaSN+o711Pd5TyNDqxgcbiOAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3ojj9Xv3lwtf+mQXXbs5OkIM+1MB8GA1UdIwQY
MBaAFAGBgiqcoqAI9c0RufnboW7ixhRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zZTk1MjUtYTJjZS00ZTkwLTkwMGQt
ODBkNDk0NTkxMWRkLzEvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zZTk1MjUtYTJjZS00ZTkwLTkwMGQtODBkNDk0NTkxMWRk
LzEvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSq0Oycl
Astq73oE/NWwTItoH0hBqt7xiVhh2RhzYtm+tt7CL4fVlSP9N8R4c/Ds6zU3Ih7p
KS7FvxFxyjKRUDRSwhTXXFZ0rL+eRrfYlpEvwJo1dXOt9DrXAZgfuwCbszaYm8iQ
RZO3KUQLGPqNtiY6gPx896UGsFfmufjzRfqmEC4cE7tfjizEYaJPI1p6oSYjC/6j
Zx0VTKj4S8pzPpyEUk/1ySG9ffsc1+aP2Wj80hJ9p5bX1UH2rFjJJ/poMIAxYLv8
rl/5jQmd2y41Un32vPA22VFS4hjMuJ0Ll8jGC6a5T0DfKV/0bRTSxclhlklyBZBG
PbDi2fvnXhyW0Q==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net