Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f4b951-960a-4832-8863-df33fdca7362/1/apGQNHJrjf745uBc0TTA5IYI_-w.mft
File: apGQNHJrjf745uBc0TTA5IYI_-w.mft (raw, json)
Hash identifier: UGucVw1Q1Fx8y+beRHCwin2qI8dFSNtKrmYtu2HvsWg=
Subject key identifier: F5:F6:EE:D2:D6:85:F0:4A:A3:9C:1C:85:0B:34:FC:89:20:6C:38:F8
Authority key identifier: 6A:91:90:34:72:6B:8D:FE:F8:E6:E0:5C:D1:34:C0:E4:86:08:FF:EC
Certificate issuer: /CN=6a919034726b8dfef8e6e05cd134c0e48608ffec
Certificate serial: 01948C98CABF7E01431C716FF3A4440EEFC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apGQNHJrjf745uBc0TTA5IYI_-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f4b951-960a-4832-8863-df33fdca7362/1/apGQNHJrjf745uBc0TTA5IYI_-w.mft
Manifest number: 0393
Signing time: Wed 22 Jan 2025 06:00:11 +0000
Manifest this update: Wed 22 Jan 2025 06:00:11 +0000
Manifest next update: Thu 23 Jan 2025 06:00:11 +0000
Files and hashes: 1: apGQNHJrjf745uBc0TTA5IYI_-w.crl (hash: +jB9Mq55DaWr0D9QF2Ih+Dd4PWkM1B4dqp2aRY6lrzE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8c:98:ca:bf:7e:01:43:1c:71:6f:f3:a4:44:0e:ef:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a919034726b8dfef8e6e05cd134c0e48608ffec
Validity
Not Before: Jan 22 06:00:11 2025 GMT
Not After : Jan 23 06:00:11 2025 GMT
Subject: CN=f5f6eed2d685f04aa39c1c850b34fc89206c38f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:5b:b5:33:c0:3a:16:18:21:d8:b6:a0:78:
87:ac:4d:24:33:b6:29:90:ed:8b:f8:6d:da:64:62:
1b:15:42:4b:9b:e7:83:a7:1e:70:1a:06:b0:f1:51:
7b:01:71:eb:92:6b:ce:f5:a8:03:7f:f5:55:33:ac:
6f:41:dd:0e:fe:8a:2a:53:1b:62:d1:55:82:7d:9a:
3e:14:8b:85:ad:f9:30:81:c9:86:b1:51:f7:f4:f2:
c8:df:82:1b:57:c1:ed:6d:90:e7:87:ad:22:30:41:
05:ac:09:4c:d7:59:de:10:53:80:9f:4f:5a:84:e0:
85:9b:c9:17:9f:64:6d:5a:b9:38:5a:e5:cc:f5:47:
16:41:04:5c:9c:28:96:02:17:2d:15:e0:3a:f8:ce:
62:a2:5a:a4:36:e1:e7:1a:89:60:94:5b:84:dc:0f:
47:c9:f9:6d:1e:1d:38:db:bc:04:c9:cd:80:ef:4a:
f4:2b:df:7d:04:ac:25:e1:01:11:00:45:04:cf:98:
7b:db:01:8c:59:01:79:d6:90:df:7f:7f:6b:dc:43:
5b:30:1b:eb:25:ee:34:97:e4:e7:d5:26:7b:79:79:
9d:62:a1:e3:12:20:57:dc:db:7e:a4:37:83:da:6f:
94:d4:c5:8e:6e:0c:65:cb:4c:5a:29:40:d5:c3:aa:
3d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F6:EE:D2:D6:85:F0:4A:A3:9C:1C:85:0B:34:FC:89:20:6C:38:F8
X509v3 Authority Key Identifier:
keyid:6A:91:90:34:72:6B:8D:FE:F8:E6:E0:5C:D1:34:C0:E4:86:08:FF:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apGQNHJrjf745uBc0TTA5IYI_-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f4b951-960a-4832-8863-df33fdca7362/1/apGQNHJrjf745uBc0TTA5IYI_-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f4b951-960a-4832-8863-df33fdca7362/1/apGQNHJrjf745uBc0TTA5IYI_-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:48:22:8e:54:a7:3d:c8:67:2a:bb:09:cc:ae:b0:b5:04:5e:
c8:0e:6a:3f:d9:4c:4e:66:d8:dc:7c:7a:00:a1:fd:d6:b3:4c:
38:0f:19:09:f0:fa:5d:2c:32:bc:d6:a7:c2:17:46:cd:01:1d:
3e:af:c3:e8:1a:00:aa:2a:33:63:13:ce:46:4d:24:05:02:34:
da:9c:64:8b:51:96:1c:02:72:5d:f6:1a:79:8a:fc:ea:e2:43:
73:95:ee:84:23:78:b1:30:65:b2:05:4a:8e:65:2f:5d:6c:d2:
aa:01:7d:76:66:65:f7:24:d1:7a:c5:12:4c:90:ae:7c:bd:ba:
20:7f:84:4e:cd:83:3d:04:cc:d5:42:19:7d:82:45:2e:75:b3:
50:10:e9:bc:b6:06:f2:34:9b:11:07:61:47:2a:fb:e5:8c:e4:
a2:79:f0:10:dc:56:57:2f:24:db:09:fc:4e:aa:a8:97:53:66:
4a:05:cf:0c:39:fb:a1:bd:52:e5:8d:b3:2a:19:9e:d8:de:7e:
85:dc:9c:f5:e8:6b:4b:91:b7:48:c7:73:7b:e6:8d:eb:ec:68:
25:66:69:48:c1:c9:c0:20:e1:7b:7c:b2:f5:26:30:fa:b5:49:
4b:1d:34:29:0e:c4:6d:84:9c:d3:db:7d:e4:6a:cc:6d:6f:fe:
bc:7b:7b:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSMmMq/fgFDHHFv86REDu/HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOTE5MDM0NzI2YjhkZmVmOGU2ZTA1Y2QxMzRjMGU0ODYw
OGZmZWMwHhcNMjUwMTIyMDYwMDExWhcNMjUwMTIzMDYwMDExWjAzMTEwLwYDVQQD
EyhmNWY2ZWVkMmQ2ODVmMDRhYTM5YzFjODUwYjM0ZmM4OTIwNmMzOGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzpbtTPAOhYYIdi2oHiHrE0kM7Yp
kO2L+G3aZGIbFUJLm+eDpx5wGgaw8VF7AXHrkmvO9agDf/VVM6xvQd0O/ooqUxti
0VWCfZo+FIuFrfkwgcmGsVH39PLI34IbV8HtbZDnh60iMEEFrAlM11neEFOAn09a
hOCFm8kXn2RtWrk4WuXM9UcWQQRcnCiWAhctFeA6+M5iolqkNuHnGolglFuE3A9H
yfltHh0427wEyc2A70r0K999BKwl4QERAEUEz5h72wGMWQF51pDff39r3ENbMBvr
Je40l+Tn1SZ7eXmdYqHjEiBX3Nt+pDeD2m+U1MWObgxly0xaKUDVw6o9bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX27tLWhfBKo5wchQs0/IkgbDj4MB8GA1UdIwQY
MBaAFGqRkDRya43++ObgXNE0wOSGCP/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXBHUU5ISnJqZjc0NXVCYzBUVEE1SVlJXy13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mNGI5NTEtOTYwYS00ODMyLTg4NjMt
ZGYzM2ZkY2E3MzYyLzEvYXBHUU5ISnJqZjc0NXVCYzBUVEE1SVlJXy13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mNGI5NTEtOTYwYS00ODMyLTg4NjMtZGYzM2ZkY2E3MzYy
LzEvYXBHUU5ISnJqZjc0NXVCYzBUVEE1SVlJXy13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6EgijlSn
PchnKrsJzK6wtQReyA5qP9lMTmbY3Hx6AKH91rNMOA8ZCfD6XSwyvNanwhdGzQEd
Pq/D6BoAqiozYxPORk0kBQI02pxki1GWHAJyXfYaeYr86uJDc5XuhCN4sTBlsgVK
jmUvXWzSqgF9dmZl9yTResUSTJCufL26IH+ETs2DPQTM1UIZfYJFLnWzUBDpvLYG
8jSbEQdhRyr75YzkonnwENxWVy8k2wn8Tqqol1NmSgXPDDn7ob1S5Y2zKhme2N5+
hdyc9ehrS5G3SMdze+aN6+xoJWZpSMHJwCDhe3yy9SYw+rVJSx00KQ7EbYSc09t9
5GrMbW/+vHt7SQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:14 2025 by rpki-client