Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
File: ap2Z4esn7Hq76TViechBGkEw_co.mft (raw, json)
Hash identifier: 8geqKM2l4yHEMSD6ucwdQ4JXc/gl+QoNOZqYE49g2RY=
Subject key identifier: 57:B4:11:F8:DA:1A:60:09:C1:19:FD:84:5B:F4:2E:85:96:4E:6F:44
Authority key identifier: 6A:9D:99:E1:EB:27:EC:7A:BB:E9:35:62:79:C8:41:1A:41:30:FD:CA
Certificate issuer: /CN=6a9d99e1eb27ec7abbe9356279c8411a4130fdca
Certificate serial: 0194BC3C5E09735BF76D82A92F383F5F5B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
Manifest number: 0AA0
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: ap2Z4esn7Hq76TViechBGkEw_co.crl (hash: lq/xF5xUA5EOGW7bhr7780iiTrNQDnci0qV9uzm4Hk4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5e:09:73:5b:f7:6d:82:a9:2f:38:3f:5f:5b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d99e1eb27ec7abbe9356279c8411a4130fdca
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=57b411f8da1a6009c119fd845bf42e85964e6f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:3d:97:b6:92:29:4a:a3:2c:fe:97:c4:54:
19:15:9c:33:fe:2a:55:3c:8a:fd:75:34:1b:d2:97:
9c:57:94:bd:8d:b0:62:e5:66:e7:56:51:73:75:72:
1c:3e:55:19:b3:5b:3c:54:82:e5:4a:da:c2:36:9b:
d5:dd:2e:1e:21:81:ad:a1:f8:9e:25:c3:2b:61:ab:
ca:8a:0f:8e:5e:1f:92:46:e7:60:2e:92:11:c5:de:
74:98:9a:4b:97:aa:c6:ac:1c:b3:7b:76:24:9d:67:
61:7d:00:c0:d0:6f:5a:27:1d:60:c8:ac:e0:64:73:
51:bc:39:d2:7b:1c:e4:84:b3:9f:57:ff:e1:0f:25:
09:cf:b1:3f:20:3e:13:3a:4f:b6:d7:31:a3:39:95:
c0:b1:70:2f:0e:6d:b5:d5:1d:9f:ab:eb:2c:df:f5:
1d:33:ee:a5:3d:bb:e9:6b:a0:73:3b:f5:ee:5d:dd:
c5:04:88:9a:41:c6:ce:19:be:04:c6:8f:31:4d:ea:
16:32:b1:85:59:2c:d7:a0:ea:f9:d8:9e:41:ba:f3:
91:54:57:41:35:97:8b:92:6f:18:dd:5b:6a:ee:e3:
6a:ae:ae:c0:63:5c:f8:8f:df:71:e2:cd:3c:da:ee:
73:bc:03:d5:61:b0:98:cd:ae:de:a9:c8:a1:2c:3a:
8f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B4:11:F8:DA:1A:60:09:C1:19:FD:84:5B:F4:2E:85:96:4E:6F:44
X509v3 Authority Key Identifier:
keyid:6A:9D:99:E1:EB:27:EC:7A:BB:E9:35:62:79:C8:41:1A:41:30:FD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:24:a3:50:ce:e6:12:5d:65:5a:35:a5:b8:08:2a:a9:76:75:
3f:e4:87:c7:c1:3e:61:95:47:da:e6:97:9b:34:75:52:89:90:
90:58:d9:64:26:2f:99:b0:fc:a6:86:16:9b:6c:2a:0e:77:22:
12:21:20:c7:ef:99:2a:8e:65:8e:b5:e5:e3:77:01:6f:7b:ae:
8b:16:7a:c7:a5:90:9f:82:ab:b5:9c:d4:5d:ad:b6:13:5a:9e:
33:f8:a1:ce:5b:c0:8f:47:f9:4c:7a:2e:79:37:77:28:70:54:
ca:4d:22:2f:d7:17:bd:2d:a6:ee:20:78:52:3c:bf:7f:9f:12:
d2:5f:ef:ac:39:8d:21:3c:03:4f:5c:ac:06:0e:72:ff:28:7e:
4d:14:1d:8c:bf:ab:da:d0:00:ed:cb:f7:c0:9e:59:14:33:63:
ac:08:16:8b:1c:85:5c:36:6d:45:37:b1:91:8d:91:82:c3:b4:
7e:ab:0e:f3:3e:5a:d1:ee:b2:4c:5b:b1:b6:7b:61:4e:39:44:
20:8c:fa:50:a2:36:7d:55:24:a3:ea:af:cb:cb:aa:d6:56:f4:
59:2a:ed:44:7a:43:92:91:42:7d:20:d2:e8:04:81:57:43:8d:
eb:69:39:4e:f5:f3:ac:58:c5:9c:e0:7a:03:2b:4e:ad:67:97:
50:0e:cf:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PF4Jc1v3bYKpLzg/X1s0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOWQ5OWUxZWIyN2VjN2FiYmU5MzU2Mjc5Yzg0MTFhNDEz
MGZkY2EwHhcNMjUwMTMxMTIwMTAwWhcNMjUwMjAxMTIwMTAwWjAzMTEwLwYDVQQD
Eyg1N2I0MTFmOGRhMWE2MDA5YzExOWZkODQ1YmY0MmU4NTk2NGU2ZjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIg9l7aSKUqjLP6XxFQZFZwz/ipV
PIr9dTQb0pecV5S9jbBi5WbnVlFzdXIcPlUZs1s8VILlStrCNpvV3S4eIYGtofie
JcMrYavKig+OXh+SRudgLpIRxd50mJpLl6rGrByze3YknWdhfQDA0G9aJx1gyKzg
ZHNRvDnSexzkhLOfV//hDyUJz7E/ID4TOk+21zGjOZXAsXAvDm211R2fq+ss3/Ud
M+6lPbvpa6BzO/XuXd3FBIiaQcbOGb4Exo8xTeoWMrGFWSzXoOr52J5BuvORVFdB
NZeLkm8Y3Vtq7uNqrq7AY1z4j99x4s082u5zvAPVYbCYza7eqcihLDqPjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFe0EfjaGmAJwRn9hFv0LoWWTm9EMB8GA1UdIwQY
MBaAFGqdmeHrJ+x6u+k1YnnIQRpBMP3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXAyWjRlc243SHE3NlRWaWVjaEJHa0V3X2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83M2M4ZjAtN2E1YS00YWRiLWExMmQt
YjdkYWYyZTYwZjZmLzEvYXAyWjRlc243SHE3NlRWaWVjaEJHa0V3X2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83M2M4ZjAtN2E1YS00YWRiLWExMmQtYjdkYWYyZTYwZjZm
LzEvYXAyWjRlc243SHE3NlRWaWVjaEJHa0V3X2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiSjUM7m
El1lWjWluAgqqXZ1P+SHx8E+YZVH2uaXmzR1UomQkFjZZCYvmbD8poYWm2wqDnci
EiEgx++ZKo5ljrXl43cBb3uuixZ6x6WQn4KrtZzUXa22E1qeM/ihzlvAj0f5THou
eTd3KHBUyk0iL9cXvS2m7iB4Ujy/f58S0l/vrDmNITwDT1ysBg5y/yh+TRQdjL+r
2tAA7cv3wJ5ZFDNjrAgWixyFXDZtRTexkY2RgsO0fqsO8z5a0e6yTFuxtnthTjlE
IIz6UKI2fVUko+qvy8uq1lb0WSrtRHpDkpFCfSDS6ASBV0ON62k5TvXzrFjFnOB6
AytOrWeXUA7PNA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:20 2025 by rpki-client