Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
File: Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft (raw, json)
Hash identifier: pxuGaNePYrLkPL0QrUR5hHkqr5ONGxtodP9OOcBFZuY=
Subject key identifier: 7C:21:09:99:60:D8:89:6E:6B:D1:B6:D5:F7:A9:3D:A2:51:23:9E:29
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 0194BD4E71D447DA5405EF5A19E142AAAF34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl (hash: RrDilJ/nDfuOq+TYWRmWkFanwKMg0sDjwaf9zUQYWAk=)
2: wZjXikEIugXeWt8a9NSloyaVK4Y.roa (hash: ksS5A4AJINWF8VxJhLJ0KkSWEB0eZDK2C5eBKt9Qigs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:71:d4:47:da:54:05:ef:5a:19:e1:42:aa:af:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=7c21099960d8896e6bd1b6d5f7a93da251239e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9a:3a:88:2c:29:41:db:f7:0c:9b:c4:d7:cc:
f8:e2:42:5a:5e:7a:76:71:52:c5:33:9d:f1:f7:c6:
83:97:2f:84:e0:4f:34:31:6a:5d:04:9c:b5:5d:ae:
52:45:79:d7:1d:3b:7d:6f:cb:48:c1:6e:29:82:1a:
05:9a:a7:d3:0c:0c:70:7b:df:2d:2b:ca:e0:be:86:
d8:6e:cc:d4:00:2b:6b:cd:cb:3e:42:4a:b7:65:3b:
9c:5d:ae:cf:63:2b:5e:70:18:c5:ed:9e:97:58:18:
f1:fb:11:46:63:8a:56:a6:6c:7d:08:2a:8f:28:72:
8a:a2:01:c7:64:b4:fc:fc:72:07:e1:5f:16:4d:43:
e8:ed:56:bb:88:48:ba:83:3f:19:12:db:b4:3c:0d:
a0:cf:c8:86:f7:b3:cd:0e:e5:58:96:f7:8e:12:3f:
a6:e7:08:72:b1:93:e6:a5:1f:4b:2b:f6:ec:ea:b6:
be:6f:10:6d:81:e4:18:50:8d:d2:64:dc:c1:53:e7:
2d:72:7c:eb:a9:b8:0b:6a:95:cf:74:6d:77:69:6f:
ba:be:55:0e:cf:d3:5b:b2:11:65:f9:8e:18:42:3c:
2a:50:e9:35:5c:01:ab:db:e7:a8:3f:ef:9d:7a:1f:
3b:48:4d:93:de:ed:ba:5a:8f:21:15:c3:09:cc:a0:
e6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:21:09:99:60:D8:89:6E:6B:D1:B6:D5:F7:A9:3D:A2:51:23:9E:29
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:df:06:56:0f:42:2a:4f:a1:41:f6:d7:6f:9a:51:c4:80:8e:
b9:77:57:9e:57:73:7e:f8:0e:43:01:86:10:7f:48:d5:54:19:
40:60:ad:ff:85:70:6e:35:4a:64:54:9e:1e:6f:b6:b2:2f:ec:
f8:f9:1f:58:c5:b1:63:4b:18:38:1c:5a:7f:73:5e:d2:fb:d1:
86:6a:8f:c2:81:a0:0a:79:82:25:95:f4:b0:96:9f:f5:6e:0c:
cc:81:6a:92:ea:d6:5f:c5:da:58:ca:c1:30:17:b5:60:4c:29:
9b:0e:93:59:d3:26:5f:70:e2:ad:35:aa:01:fc:ed:d4:e1:4e:
ea:3d:ef:73:39:a9:45:d1:67:77:a3:e3:6a:a7:c6:21:66:72:
12:0e:4a:ed:2d:80:2d:be:3d:01:76:39:8e:d1:c7:1b:8f:00:
83:ac:a6:06:0b:2c:be:99:6f:d3:b8:82:9f:18:3a:98:d7:74:
62:fc:dc:0f:92:a9:ec:35:82:39:c9:c5:5c:6f:dd:25:cd:8d:
5d:30:ec:a1:5f:b8:91:0c:19:f2:dd:1f:8e:75:40:ed:c4:a0:
bb:e8:5e:7c:fd:00:53:82:f9:7f:83:6b:cc:e3:03:06:40:f6:
ce:5f:d8:d5:34:65:00:63:71:29:11:1d:5a:c5:f5:99:e2:74:
2c:03:3f:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TnHUR9pUBe9aGeFCqq80MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh
NDYzZDQwHhcNMjUwMTMxMTcwMDIyWhcNMjUwMjAxMTcwMDIyWjAzMTEwLwYDVQQD
Eyg3YzIxMDk5OTYwZDg4OTZlNmJkMWI2ZDVmN2E5M2RhMjUxMjM5ZTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Zo6iCwpQdv3DJvE18z44kJaXnp2
cVLFM53x98aDly+E4E80MWpdBJy1Xa5SRXnXHTt9b8tIwW4pghoFmqfTDAxwe98t
K8rgvobYbszUACtrzcs+Qkq3ZTucXa7PYytecBjF7Z6XWBjx+xFGY4pWpmx9CCqP
KHKKogHHZLT8/HIH4V8WTUPo7Va7iEi6gz8ZEtu0PA2gz8iG97PNDuVYlveOEj+m
5whysZPmpR9LK/bs6ra+bxBtgeQYUI3SZNzBU+ctcnzrqbgLapXPdG13aW+6vlUO
z9NbshFl+Y4YQjwqUOk1XAGr2+eoP++deh87SE2T3u26Wo8hFcMJzKDmxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwhCZlg2Ilua9G21fepPaJRI54pMB8GA1UdIwQY
MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt
N2QxMzQ5ODBjNWJlLzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl
LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZt8GVg9C
Kk+hQfbXb5pRxICOuXdXnldzfvgOQwGGEH9I1VQZQGCt/4VwbjVKZFSeHm+2si/s
+PkfWMWxY0sYOBxaf3Ne0vvRhmqPwoGgCnmCJZX0sJaf9W4MzIFqkurWX8XaWMrB
MBe1YEwpmw6TWdMmX3DirTWqAfzt1OFO6j3vczmpRdFnd6PjaqfGIWZyEg5K7S2A
Lb49AXY5jtHHG48Ag6ymBgssvplv07iCnxg6mNd0YvzcD5Kp7DWCOcnFXG/dJc2N
XTDsoV+4kQwZ8t0fjnVA7cSgu+hefP0AU4L5f4NrzOMDBkD2zl/Y1TRlAGNxKREd
WsX1meJ0LAM/vA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:08 2025 by rpki-client