Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/3ed902-a05d-49ac-a476-174fa26fd4b6/1/AhXKBUNIfztxz4FP4NjWb6lREVs.mft
File: AhXKBUNIfztxz4FP4NjWb6lREVs.mft (raw, json)
Hash identifier: EN8GSvRQCL1e7NGW46QyLTPFZTiMXC4gTUUFdthKqDU=
Subject key identifier: B6:1F:7B:F0:2E:79:A5:40:CC:74:EC:36:AD:F3:00:8E:09:4A:1D:02
Authority key identifier: 02:15:CA:05:43:48:7F:3B:71:CF:81:4F:E0:D8:D6:6F:A9:51:11:5B
Certificate issuer: /CN=0215ca0543487f3b71cf814fe0d8d66fa951115b
Certificate serial: 01966A0822A169096435D1C0F0CA8F80649E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhXKBUNIfztxz4FP4NjWb6lREVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/3ed902-a05d-49ac-a476-174fa26fd4b6/1/AhXKBUNIfztxz4FP4NjWb6lREVs.mft
Manifest number: 032D
Signing time: Thu 24 Apr 2025 23:00:40 +0000
Manifest this update: Thu 24 Apr 2025 23:00:40 +0000
Manifest next update: Fri 25 Apr 2025 23:00:40 +0000
Files and hashes: 1: AhXKBUNIfztxz4FP4NjWb6lREVs.crl (hash: p7jxGm/Zf911TqmLUz8a1AO/jLsMiXraGqUkpQd7BHA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6a:08:22:a1:69:09:64:35:d1:c0:f0:ca:8f:80:64:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0215ca0543487f3b71cf814fe0d8d66fa951115b
Validity
Not Before: Apr 24 23:00:40 2025 GMT
Not After : Apr 25 23:00:40 2025 GMT
Subject: CN=b61f7bf02e79a540cc74ec36adf3008e094a1d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:b2:95:29:b5:d1:d7:3f:b7:0f:f6:94:d1:
db:df:f5:1e:db:5f:5f:e5:e4:d3:d1:4e:a3:15:40:
a4:31:0b:64:c7:f0:a1:39:dc:e3:9d:cd:48:50:c5:
d1:91:23:5f:f3:d3:02:7d:1e:48:c9:6f:66:ac:e8:
2f:70:25:e7:a0:4c:6e:0e:c8:58:26:7f:3b:f6:42:
fa:5f:8f:83:f4:e9:8c:f8:d9:80:04:dd:5b:7f:d8:
66:a8:a7:95:c0:ed:d7:14:ee:68:22:84:1e:ec:a9:
5f:ba:03:ca:45:89:f3:57:02:88:ff:7a:16:32:1e:
78:29:d3:66:bf:25:7c:50:26:98:8e:fd:3d:b5:ea:
e7:48:e7:20:ac:c9:2e:96:11:ac:a1:b6:58:77:30:
83:b7:9b:1a:84:25:20:dd:20:f5:a8:60:76:bf:20:
18:ad:e7:f8:7c:47:1a:38:21:b6:65:84:79:4e:f7:
75:d4:cc:65:80:00:04:8d:d7:74:fb:db:13:1e:8c:
25:6f:4e:88:62:91:8c:c3:00:6b:c5:0d:56:78:db:
d6:79:41:89:bc:98:ec:1b:97:3a:8c:72:99:25:49:
81:73:95:46:7f:89:df:18:ce:93:70:08:42:0e:ac:
ac:ec:90:3a:6b:de:40:12:1b:22:64:46:8a:3d:6d:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1F:7B:F0:2E:79:A5:40:CC:74:EC:36:AD:F3:00:8E:09:4A:1D:02
X509v3 Authority Key Identifier:
keyid:02:15:CA:05:43:48:7F:3B:71:CF:81:4F:E0:D8:D6:6F:A9:51:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhXKBUNIfztxz4FP4NjWb6lREVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3ed902-a05d-49ac-a476-174fa26fd4b6/1/AhXKBUNIfztxz4FP4NjWb6lREVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/3ed902-a05d-49ac-a476-174fa26fd4b6/1/AhXKBUNIfztxz4FP4NjWb6lREVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:dc:31:27:31:ec:de:63:e2:c9:dd:09:bf:96:e1:22:85:d1:
e9:ff:84:6b:82:15:2d:13:52:71:7c:f2:fb:94:f4:11:57:ff:
ea:04:e3:56:00:b5:46:0b:41:93:16:6b:7e:a6:07:63:1b:f4:
55:31:6f:4e:cf:b3:24:7a:0c:3e:fe:0e:bc:77:e1:33:3c:53:
62:fc:75:10:ce:ae:3c:72:f8:5c:3a:9f:d4:b0:6d:77:77:ac:
85:bd:32:92:5e:ab:3c:79:1e:a4:f7:ed:80:6a:9b:67:0a:4a:
4d:77:cd:65:16:2a:38:d5:e1:41:5d:3f:c4:11:63:52:d6:4a:
34:22:e3:d0:09:52:ea:32:62:8a:c2:7c:19:f8:a0:84:2a:f7:
61:ec:3b:e0:20:b1:b0:ac:b7:4c:52:90:00:01:25:58:04:89:
52:8d:db:f4:f4:e4:64:f7:6b:9a:1f:6b:3c:ae:20:69:ae:ed:
bb:97:88:aa:e5:d5:a4:59:c0:a0:f6:48:e1:8e:1a:0f:29:3a:
56:6b:f7:1f:d0:15:3c:ad:93:c3:f3:db:37:4b:92:49:2a:64:
1c:68:76:1e:05:79:89:10:2f:3a:cd:47:0d:cb:5e:51:7e:7a:
ae:db:aa:a9:00:ee:d2:8c:7a:c2:6c:c6:46:dc:85:9c:bd:9d:
2f:49:e8:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZqCCKhaQlkNdHA8MqPgGSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMTVjYTA1NDM0ODdmM2I3MWNmODE0ZmUwZDhkNjZmYTk1
MTExNWIwHhcNMjUwNDI0MjMwMDQwWhcNMjUwNDI1MjMwMDQwWjAzMTEwLwYDVQQD
EyhiNjFmN2JmMDJlNzlhNTQwY2M3NGVjMzZhZGYzMDA4ZTA5NGExZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLuylSm10dc/tw/2lNHb3/Ue219f
5eTT0U6jFUCkMQtkx/ChOdzjnc1IUMXRkSNf89MCfR5IyW9mrOgvcCXnoExuDshY
Jn879kL6X4+D9OmM+NmABN1bf9hmqKeVwO3XFO5oIoQe7KlfugPKRYnzVwKI/3oW
Mh54KdNmvyV8UCaYjv09ternSOcgrMkulhGsobZYdzCDt5sahCUg3SD1qGB2vyAY
ref4fEcaOCG2ZYR5Tvd11MxlgAAEjdd0+9sTHowlb06IYpGMwwBrxQ1WeNvWeUGJ
vJjsG5c6jHKZJUmBc5VGf4nfGM6TcAhCDqys7JA6a95AEhsiZEaKPW0f0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYfe/AueaVAzHTsNq3zAI4JSh0CMB8GA1UdIwQY
MBaAFAIVygVDSH87cc+BT+DY1m+pURFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWhYS0JVTklmenR4ejRGUDROaldiNmxSRVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zZWQ5MDItYTA1ZC00OWFjLWE0NzYt
MTc0ZmEyNmZkNGI2LzEvQWhYS0JVTklmenR4ejRGUDROaldiNmxSRVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8zZWQ5MDItYTA1ZC00OWFjLWE0NzYtMTc0ZmEyNmZkNGI2
LzEvQWhYS0JVTklmenR4ejRGUDROaldiNmxSRVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvdwxJzHs
3mPiyd0Jv5bhIoXR6f+Ea4IVLRNScXzy+5T0EVf/6gTjVgC1RgtBkxZrfqYHYxv0
VTFvTs+zJHoMPv4OvHfhMzxTYvx1EM6uPHL4XDqf1LBtd3eshb0ykl6rPHkepPft
gGqbZwpKTXfNZRYqONXhQV0/xBFjUtZKNCLj0AlS6jJiisJ8GfighCr3Yew74CCx
sKy3TFKQAAElWASJUo3b9PTkZPdrmh9rPK4gaa7tu5eIquXVpFnAoPZI4Y4aDyk6
Vmv3H9AVPK2Tw/PbN0uSSSpkHGh2HgV5iRAvOs1HDcteUX56rtuqqQDu0ox6wmzG
RtyFnL2dL0noHA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 22:29:18 2025 by rpki-client