Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
File: apc35u85FOD8zAaQI76XGYuRN5E.mft (raw, json)
Hash identifier: /QL4xpJTxGKgv2fyJafb4HMi7QPUFEZz5C7uPl5oGJU=
Subject key identifier: 0B:B0:35:51:96:11:EB:D1:12:9C:25:6C:B7:08:26:20:6B:AB:14:36
Authority key identifier: 6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
Certificate issuer: /CN=6a9737e6ef3914e0fccc069023be97198b913791
Certificate serial: 0194BBCE6281D746C96EF5F77BE404E6909B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: apc35u85FOD8zAaQI76XGYuRN5E.crl (hash: hvCSusHXB/D98cC7GIKDygVSPtQno57qAPncKiYPCuc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:62:81:d7:46:c9:6e:f5:f7:7b:e4:04:e6:90:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9737e6ef3914e0fccc069023be97198b913791
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=0bb035519611ebd1129c256cb70826206bab1436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2a:98:35:33:f6:02:8f:c9:53:e5:0f:cf:f1:
7c:13:ed:8c:de:f5:33:0a:1b:3e:b2:71:a2:92:ad:
9f:7a:99:61:0c:73:f0:f4:a7:0b:df:1e:a0:ab:ad:
78:69:7a:da:6b:55:f7:33:23:50:31:a5:c2:bb:60:
30:9a:5f:61:5e:ea:44:2f:2c:d1:6c:33:d1:9d:de:
b5:0b:4d:69:d2:19:4f:5e:4e:19:0c:ea:f3:d1:a8:
c3:18:cb:c0:60:a5:ee:73:7a:32:5c:76:d6:4a:96:
32:8b:76:29:2d:85:35:d4:d7:e6:81:36:8b:bd:49:
3b:6c:b2:35:40:b8:d1:e0:89:5c:58:f3:b2:14:24:
2b:0e:16:d3:4d:4a:f6:0b:24:cb:e4:d1:de:fa:ac:
51:9d:a2:5a:19:5e:2c:59:3b:16:49:a9:64:ef:15:
0e:88:d3:05:79:e2:0c:49:09:02:6e:e6:20:ae:12:
0a:8f:e2:45:32:72:86:86:98:82:31:29:c5:40:16:
d4:bd:0d:d5:d8:d1:fd:4e:95:a7:c7:41:4e:31:0c:
36:18:aa:86:e8:1d:2a:0b:dc:cc:62:51:7e:46:ad:
b9:9e:7f:c2:aa:c2:66:38:d2:5e:5b:72:c2:0f:a6:
01:e7:3a:64:5b:07:4a:e6:b7:49:d4:89:85:d0:ed:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B0:35:51:96:11:EB:D1:12:9C:25:6C:B7:08:26:20:6B:AB:14:36
X509v3 Authority Key Identifier:
keyid:6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2e:29:89:cc:a0:50:ad:b8:83:ec:ea:c6:e1:2d:65:de:99:
ba:c5:7d:5f:46:d7:46:55:0c:6a:4c:29:41:41:07:06:3b:74:
b4:50:22:9c:ac:d5:c9:f6:b0:d2:37:a7:1b:43:41:ce:2f:1e:
d9:dd:25:5f:fe:70:1e:0e:9c:e3:8a:d5:9a:92:ea:ed:5c:53:
1e:77:d3:80:02:77:34:7c:e6:e1:16:77:13:b9:b5:54:b9:15:
98:7d:aa:6c:b8:44:9c:27:92:58:8c:da:30:a5:8f:75:a9:16:
45:46:f7:a7:f0:a8:2e:4b:a5:c0:ee:9d:4b:b3:40:44:93:0d:
6a:fc:fa:bd:b2:ca:01:51:8d:51:7b:9e:9d:ca:3d:4c:36:98:
2f:ea:70:f3:fe:62:b8:c1:24:b4:99:75:36:d3:7a:ea:91:ad:
70:84:37:33:8f:a6:30:9d:7a:13:0f:15:d6:f0:b7:36:b5:f8:
fa:c7:9d:e0:3f:bd:c4:99:02:f3:57:f0:81:05:5e:25:d6:ba:
1e:5f:3c:72:c7:64:47:b0:06:53:d6:92:3c:3c:d3:c1:f6:68:
b5:db:a6:bd:f9:18:24:ad:da:03:f3:d3:d8:97:66:53:f1:c1:
59:61:94:55:5a:dd:c3:c3:88:23:64:92:0a:66:3a:d5:29:38:
97:c5:1b:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zmKB10bJbvX3e+QE5pCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOTczN2U2ZWYzOTE0ZTBmY2NjMDY5MDIzYmU5NzE5OGI5
MTM3OTEwHhcNMjUwMTMxMTAwMDUyWhcNMjUwMjAxMTAwMDUyWjAzMTEwLwYDVQQD
EygwYmIwMzU1MTk2MTFlYmQxMTI5YzI1NmNiNzA4MjYyMDZiYWIxNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSqYNTP2Ao/JU+UPz/F8E+2M3vUz
Chs+snGikq2feplhDHPw9KcL3x6gq614aXraa1X3MyNQMaXCu2Awml9hXupELyzR
bDPRnd61C01p0hlPXk4ZDOrz0ajDGMvAYKXuc3oyXHbWSpYyi3YpLYU11NfmgTaL
vUk7bLI1QLjR4IlcWPOyFCQrDhbTTUr2CyTL5NHe+qxRnaJaGV4sWTsWSalk7xUO
iNMFeeIMSQkCbuYgrhIKj+JFMnKGhpiCMSnFQBbUvQ3V2NH9TpWnx0FOMQw2GKqG
6B0qC9zMYlF+Rq25nn/CqsJmONJeW3LCD6YB5zpkWwdK5rdJ1ImF0O0G6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuwNVGWEevREpwlbLcIJiBrqxQ2MB8GA1UdIwQY
MBaAFGqXN+bvORTg/MwGkCO+lxmLkTeRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84NDM4ZjUtNmM5Yy00NzAzLTlmZTIt
MDE1ZmRlNDVkMGVhLzEvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84NDM4ZjUtNmM5Yy00NzAzLTlmZTItMDE1ZmRlNDVkMGVh
LzEvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhC4picyg
UK24g+zqxuEtZd6ZusV9X0bXRlUMakwpQUEHBjt0tFAinKzVyfaw0jenG0NBzi8e
2d0lX/5wHg6c44rVmpLq7VxTHnfTgAJ3NHzm4RZ3E7m1VLkVmH2qbLhEnCeSWIza
MKWPdakWRUb3p/CoLkulwO6dS7NARJMNavz6vbLKAVGNUXuenco9TDaYL+pw8/5i
uMEktJl1NtN66pGtcIQ3M4+mMJ16Ew8V1vC3NrX4+sed4D+9xJkC81fwgQVeJda6
Hl88csdkR7AGU9aSPDzTwfZotdumvfkYJK3aA/PT2JdmU/HBWWGUVVrdw8OII2SS
CmY61Sk4l8Ub6Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:03 2025 by rpki-client