Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
File: AK_2tO_-fDY-8gD28-WIi5FbpoE.mft (raw, json)
Hash identifier: TjspMD1yhyoG74zFKY0e9S2OhEUC0hVrSn9rPYV5Bhw=
Subject key identifier: 74:2A:94:2B:F4:7E:12:ED:A7:06:79:88:7C:49:25:2F:FD:31:BE:32
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0194BC3BD55E65F6D52EBEBAD74F6538AED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
Manifest number: 0F4A
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: 1qEPEFv1rtnBwjLrj05KhcsiGsw.roa (hash: efBys1jy+DGmejYCRhYEDwHiZZBi2kJ2HO+RtvkHBG0=)
2: AK_2tO_-fDY-8gD28-WIi5FbpoE.crl (hash: nFhXeKFXs8MbNOoI+HY+AyyvwMbyO0dObrKawT7TAEY=)
3: KSQbuvMpaNtmYtn-yiQgu6gs4Xg.roa (hash: rY+o5Ow6fjFdTk2as4zdZu/IZVXbQNeVsHdG3L6c1Us=)
4: ZOyHJ4Yqv0XVd9AATFKr91oKlKQ.roa (hash: UP88f3uzMOFhKaWDsZtlJomj/zgPQgChtV7gCg0+LOM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d5:5e:65:f6:d5:2e:be:ba:d7:4f:65:38:ae:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=742a942bf47e12eda70679887c49252ffd31be32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:e4:eb:e1:58:87:fb:aa:7c:b3:ae:07:06:
25:55:53:af:3e:55:5c:a5:40:05:77:a3:39:0e:02:
1b:e4:cd:d9:9d:fd:bd:dc:06:38:92:38:3b:5f:59:
6c:b5:08:5b:03:f0:37:ff:54:f6:3f:e2:3c:40:a8:
c9:07:a6:54:57:24:fa:3f:f8:08:0d:42:0b:b3:95:
bd:80:f9:8c:ed:29:df:c9:b1:fd:43:6a:a7:61:d5:
e2:07:fc:63:cd:c3:74:24:28:06:e7:cd:24:96:85:
1b:bf:19:bd:c3:c2:b7:08:22:d7:18:6f:8f:81:ea:
2e:d8:ce:60:dd:99:2d:38:a0:f8:b9:85:92:53:e4:
a4:f3:3b:55:4a:6f:89:3f:c8:6f:4e:1b:6f:25:1f:
2a:f0:70:e2:38:41:3e:42:46:db:6a:d8:fc:66:e3:
cc:c1:da:fe:4b:88:63:43:ca:2f:26:4e:7a:7b:16:
de:f1:74:44:af:91:75:5d:6e:52:34:35:72:f0:a2:
9d:34:93:61:7d:54:90:68:2c:2d:67:c1:43:36:2c:
a9:83:bf:a5:38:bc:00:f4:89:a9:d0:3b:c0:e6:be:
45:57:bc:6d:1f:92:0c:0c:29:5a:91:82:d7:54:4b:
05:5f:b0:92:60:6b:d8:b0:87:40:5d:e8:8a:d8:7c:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2A:94:2B:F4:7E:12:ED:A7:06:79:88:7C:49:25:2F:FD:31:BE:32
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2f:22:99:6c:7f:54:da:44:d4:c3:3b:33:0e:c7:36:97:26:
11:b5:69:aa:28:2f:84:61:a9:88:46:05:80:05:81:9d:b1:5b:
d1:5b:8b:8c:d9:34:07:68:17:ac:41:20:f3:dc:37:21:da:31:
37:9c:17:54:4b:74:63:b6:d6:eb:39:b2:d1:31:f3:f1:bb:71:
63:23:c1:9e:3e:af:77:75:31:91:90:71:c9:b3:56:03:b9:57:
a3:fb:fb:68:9b:c3:cb:c5:58:b2:30:6e:35:9e:86:6b:0b:d1:
af:e5:b8:dc:b6:1c:e5:a0:e9:0f:42:75:d7:c0:56:05:e6:12:
17:08:6c:d9:2f:9c:9e:ad:e9:73:06:4d:d3:7e:ca:96:00:29:
0a:db:a1:13:55:91:4a:b5:9e:ef:51:7a:4f:ba:40:30:57:3f:
8e:d7:c7:04:1b:7f:c2:d1:8e:fa:da:db:59:c5:3f:c5:0e:15:
fc:73:ed:76:9e:da:0d:b3:26:61:3d:b5:2a:42:77:50:5f:b8:
6a:46:c3:30:d0:5f:c8:08:a6:ee:5c:d8:91:56:0f:7a:17:09:
45:f0:1e:cc:8f:50:e8:20:d0:22:76:4b:40:a5:5b:03:96:19:
07:4e:18:a1:ba:e2:9e:8e:96:55:2a:d3:9a:a7:84:10:21:fc:
3b:cd:a6:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9VeZfbVLr66109lOK7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjUwMTMxMTIwMDI1WhcNMjUwMjAxMTIwMDI1WjAzMTEwLwYDVQQD
Eyg3NDJhOTQyYmY0N2UxMmVkYTcwNjc5ODg3YzQ5MjUyZmZkMzFiZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCXk6+FYh/uqfLOuBwYlVVOvPlVc
pUAFd6M5DgIb5M3Znf293AY4kjg7X1lstQhbA/A3/1T2P+I8QKjJB6ZUVyT6P/gI
DUILs5W9gPmM7SnfybH9Q2qnYdXiB/xjzcN0JCgG580kloUbvxm9w8K3CCLXGG+P
geou2M5g3ZktOKD4uYWSU+Sk8ztVSm+JP8hvThtvJR8q8HDiOEE+Qkbbatj8ZuPM
wdr+S4hjQ8ovJk56exbe8XREr5F1XW5SNDVy8KKdNJNhfVSQaCwtZ8FDNiypg7+l
OLwA9Imp0DvA5r5FV7xtH5IMDClakYLXVEsFX7CSYGvYsIdAXeiK2HzQiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQqlCv0fhLtpwZ5iHxJJS/9Mb4yMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABy8imWx/
VNpE1MM7Mw7HNpcmEbVpqigvhGGpiEYFgAWBnbFb0VuLjNk0B2gXrEEg89w3Idox
N5wXVEt0Y7bW6zmy0THz8btxYyPBnj6vd3UxkZBxybNWA7lXo/v7aJvDy8VYsjBu
NZ6GawvRr+W43LYc5aDpD0J118BWBeYSFwhs2S+cnq3pcwZN037KlgApCtuhE1WR
SrWe71F6T7pAMFc/jtfHBBt/wtGO+trbWcU/xQ4V/HPtdp7aDbMmYT21KkJ3UF+4
akbDMNBfyAim7lzYkVYPehcJRfAezI9Q6CDQInZLQKVbA5YZB04Yobrino6WVSrT
mqeEECH8O82m5w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:33 2025 by rpki-client