Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9c11c0-0fb3-48b3-973c-637509c25f64/1/apWJft4RUWB8CYrhC_Pdi2qXClI.mft
File: apWJft4RUWB8CYrhC_Pdi2qXClI.mft (raw, json)
Hash identifier: WTbFouejjoMl1RiNv7npi9muQf0daY+i2u+JMRvuobo=
Subject key identifier: 87:C0:7E:10:DF:F1:22:9F:69:E9:11:8F:B7:BE:45:14:41:CD:BE:B2
Authority key identifier: 6A:95:89:7E:DE:11:51:60:7C:09:8A:E1:0B:F3:DD:8B:6A:97:0A:52
Certificate issuer: /CN=6a95897ede1151607c098ae10bf3dd8b6a970a52
Certificate serial: 01949151B46FAA38A97976A36F7F5948D282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apWJft4RUWB8CYrhC_Pdi2qXClI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9c11c0-0fb3-48b3-973c-637509c25f64/1/apWJft4RUWB8CYrhC_Pdi2qXClI.mft
Manifest number: 0BD8
Signing time: Thu 23 Jan 2025 04:00:38 +0000
Manifest this update: Thu 23 Jan 2025 04:00:38 +0000
Manifest next update: Fri 24 Jan 2025 04:00:38 +0000
Files and hashes: 1: apWJft4RUWB8CYrhC_Pdi2qXClI.crl (hash: u9Xa8W0+0T9aIyMjSy/rVLqhGAYHPKbzjubMP/nETRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:91:51:b4:6f:aa:38:a9:79:76:a3:6f:7f:59:48:d2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a95897ede1151607c098ae10bf3dd8b6a970a52
Validity
Not Before: Jan 23 04:00:38 2025 GMT
Not After : Jan 24 04:00:38 2025 GMT
Subject: CN=87c07e10dff1229f69e9118fb7be451441cdbeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:7f:3b:9d:e8:ac:a6:19:bc:36:a2:67:28:
0b:99:37:2d:55:61:21:82:b7:00:2a:ff:a0:d7:4f:
de:8d:07:26:08:de:2b:0f:56:b0:73:5b:8d:b2:c0:
01:36:57:99:72:ef:76:4d:4d:94:f7:e8:bb:45:33:
99:73:54:09:39:9c:1e:3f:22:83:ec:dc:41:19:13:
88:ab:d9:da:dd:25:70:57:6b:e8:cb:2d:83:de:57:
ea:21:0a:08:7c:1f:48:a5:e7:26:15:b9:15:e3:0c:
84:71:0f:08:dc:a2:aa:82:37:09:26:e2:3f:46:3f:
bb:d3:7f:b5:26:1e:84:66:64:6d:48:b1:f4:b3:d6:
d2:44:ac:64:d7:6e:72:3b:b2:67:5f:9f:bc:f1:cc:
d1:c2:33:78:d1:e7:75:93:f2:39:32:50:52:00:96:
1a:57:0d:56:00:57:c4:b9:35:d8:8b:89:22:c8:87:
ac:56:24:40:69:95:fb:e1:a6:cb:b7:ec:9e:ba:54:
11:62:61:81:e2:4b:b7:fe:1f:23:3f:59:a7:c2:be:
1b:6a:99:b7:7e:db:8e:cd:98:db:0e:2b:62:e0:9a:
f9:fd:c9:7f:15:9b:4c:86:aa:1b:ee:7f:be:c5:26:
5e:c3:f3:bc:fc:c0:d9:b4:35:8d:d7:dc:dd:82:d0:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C0:7E:10:DF:F1:22:9F:69:E9:11:8F:B7:BE:45:14:41:CD:BE:B2
X509v3 Authority Key Identifier:
keyid:6A:95:89:7E:DE:11:51:60:7C:09:8A:E1:0B:F3:DD:8B:6A:97:0A:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWJft4RUWB8CYrhC_Pdi2qXClI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9c11c0-0fb3-48b3-973c-637509c25f64/1/apWJft4RUWB8CYrhC_Pdi2qXClI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9c11c0-0fb3-48b3-973c-637509c25f64/1/apWJft4RUWB8CYrhC_Pdi2qXClI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:e9:8a:72:69:2a:bd:91:04:5f:e8:02:cb:30:ec:27:02:e1:
5c:9a:b3:85:7e:16:e4:3e:04:55:e2:dd:45:b1:6f:8e:cd:d1:
b1:d2:3d:55:6a:ec:c0:45:ec:7a:20:42:3f:a0:ba:17:80:2b:
d1:bf:86:a8:99:64:aa:08:a0:59:ec:15:9e:f5:dc:3b:34:d8:
62:e1:51:58:cc:6c:43:5f:bf:5e:08:5a:f8:79:1a:2c:36:33:
92:01:63:15:7e:b0:74:67:56:71:c4:eb:f2:5e:2c:0f:67:23:
d7:51:60:71:b0:54:97:ae:73:c0:ad:7a:b6:4c:3b:53:cc:b0:
4e:f8:cf:db:87:09:8a:c3:b7:e0:02:17:dc:9b:91:46:ab:a5:
17:16:6c:22:ce:89:a6:c0:92:f0:d9:94:8c:c9:ff:29:cc:d4:
3d:3d:6a:6b:1c:c8:3c:79:ec:16:d6:f9:3e:e6:d9:04:a4:3b:
ca:80:6b:97:69:fe:b4:ce:e2:3d:82:30:d7:b0:13:73:be:b5:
0a:fa:d5:8d:9c:73:f1:7c:0b:33:f5:19:02:16:28:1d:b1:d6:
ef:92:8a:4d:9a:41:d4:e2:8d:0e:b2:9c:5c:f7:ff:c3:4c:d4:
d1:f7:0b:36:16:03:8f:e7:47:5f:2f:a4:c2:4a:c9:3a:48:d0:
26:30:78:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSRUbRvqjipeXajb39ZSNKCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOTU4OTdlZGUxMTUxNjA3YzA5OGFlMTBiZjNkZDhiNmE5
NzBhNTIwHhcNMjUwMTIzMDQwMDM4WhcNMjUwMTI0MDQwMDM4WjAzMTEwLwYDVQQD
Eyg4N2MwN2UxMGRmZjEyMjlmNjllOTExOGZiN2JlNDUxNDQxY2RiZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy5/O53orKYZvDaiZygLmTctVWEh
grcAKv+g10/ejQcmCN4rD1awc1uNssABNleZcu92TU2U9+i7RTOZc1QJOZwePyKD
7NxBGROIq9na3SVwV2voyy2D3lfqIQoIfB9IpecmFbkV4wyEcQ8I3KKqgjcJJuI/
Rj+703+1Jh6EZmRtSLH0s9bSRKxk125yO7JnX5+88czRwjN40ed1k/I5MlBSAJYa
Vw1WAFfEuTXYi4kiyIesViRAaZX74abLt+yeulQRYmGB4ku3/h8jP1mnwr4bapm3
ftuOzZjbDiti4Jr5/cl/FZtMhqob7n++xSZew/O8/MDZtDWN19zdgtBRywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfAfhDf8SKfaekRj7e+RRRBzb6yMB8GA1UdIwQY
MBaAFGqViX7eEVFgfAmK4Qvz3YtqlwpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXBXSmZ0NFJVV0I4Q1lyaENfUGRpMnFYQ2xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85YzExYzAtMGZiMy00OGIzLTk3M2Mt
NjM3NTA5YzI1ZjY0LzEvYXBXSmZ0NFJVV0I4Q1lyaENfUGRpMnFYQ2xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS85YzExYzAtMGZiMy00OGIzLTk3M2MtNjM3NTA5YzI1ZjY0
LzEvYXBXSmZ0NFJVV0I4Q1lyaENfUGRpMnFYQ2xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy+mKcmkq
vZEEX+gCyzDsJwLhXJqzhX4W5D4EVeLdRbFvjs3RsdI9VWrswEXseiBCP6C6F4Ar
0b+GqJlkqgigWewVnvXcOzTYYuFRWMxsQ1+/Xgha+HkaLDYzkgFjFX6wdGdWccTr
8l4sD2cj11FgcbBUl65zwK16tkw7U8ywTvjP24cJisO34AIX3JuRRqulFxZsIs6J
psCS8NmUjMn/KczUPT1qaxzIPHnsFtb5PubZBKQ7yoBrl2n+tM7iPYIw17ATc761
CvrVjZxz8XwLM/UZAhYoHbHW75KKTZpB1OKNDrKcXPf/w0zU0fcLNhYDj+dHXy+k
wkrJOkjQJjB4pg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:28:11 2025 by rpki-client