Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: JcFkfVTFrf+i8ePspc9YO8oXcSiu9iSSmT/yq+/KMRQ=
Subject key identifier: 7D:A7:D0:56:6E:4F:C3:34:2D:3E:E3:3A:D6:FA:3D:CA:E9:E2:19:42
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 0194BC3C0EBBAF5EA9B97CBBB28C42733366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 1121
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: HZpeO8_57nt_M9qIXInad5VBRmg.roa (hash: nBZAN/bftccBXWEqjcSEhglUjfU5BncjTL3GeIrsER0=)
2: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: IE5d2FeQQhpoRm2/xt0n+2T4ky20cCoX+Y338P/7zS0=)
3: u3Gm6l2xEryYp2Hjv5EZHS-8JWs.roa (hash: pFBOXJ7Esc39OQ26JOyW4DMUlulYCetq6fGsY/MF+5Q=)
4: wco6lby84EFuFZVsD3YJ6jjZJjg.roa (hash: OvjwNT1Vaz0Q8soeoNZqB9D75gw6QRvYDSS5yJ4IFyk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0e:bb:af:5e:a9:b9:7c:bb:b2:8c:42:73:33:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=7da7d0566e4fc3342d3ee33ad6fa3dcae9e21942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:49:53:de:21:06:e7:ab:db:2a:73:c9:53:
02:9e:39:47:a8:62:bf:ff:b8:ec:b9:b0:95:5d:a8:
22:ae:6f:29:6d:5d:67:3f:8b:f2:87:0a:83:b2:97:
39:5a:e8:d1:5c:21:45:90:c1:91:16:a0:48:c3:f3:
b7:ff:e9:52:17:61:2e:7e:d5:42:0b:86:ce:35:27:
0e:8f:90:f4:8e:9e:2d:be:b6:7b:db:0d:7c:8e:0c:
3e:36:cb:f6:ed:94:ef:10:ba:bf:bc:e8:a1:6e:1e:
4e:af:11:80:ad:ec:72:52:fe:fe:b5:0a:cc:8e:6c:
15:8e:53:41:46:f2:2e:29:dc:75:e2:2b:50:25:1f:
b8:68:b1:1c:5b:4f:83:e7:70:48:2d:c9:a8:c2:f8:
22:43:fe:4b:95:2e:83:67:01:0a:d5:02:ba:e3:b4:
73:fe:b8:c6:9f:ff:6a:37:da:89:ac:d2:d7:bb:5f:
53:a2:a9:12:b4:84:3e:ae:c3:ff:16:2f:85:68:cd:
ac:1b:e8:6e:18:09:83:61:75:fc:b7:75:b3:a9:44:
8b:74:56:de:66:43:24:0e:25:a8:d9:da:3c:9f:d3:
73:12:86:a5:e2:5d:f7:93:cb:b7:fd:cd:bd:7c:3c:
a1:23:45:b9:57:17:b3:c4:ac:70:43:5b:3c:40:31:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A7:D0:56:6E:4F:C3:34:2D:3E:E3:3A:D6:FA:3D:CA:E9:E2:19:42
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:57:7b:9a:ad:ca:5f:d9:3f:fc:29:29:ae:43:fb:d1:4c:97:
16:c6:ae:67:3d:82:55:da:3b:77:ea:16:35:80:05:55:a0:e0:
61:43:b8:02:eb:07:aa:a2:1f:b8:0d:51:e9:f5:0c:f3:8a:40:
ce:39:cb:ac:e7:7c:d3:5f:72:8d:ef:f6:f8:fc:56:bf:7c:91:
62:27:40:6b:37:5e:4a:4a:11:f1:78:09:9d:fe:36:0b:77:66:
0d:f6:45:d2:44:81:09:06:84:62:de:ce:7b:0a:2b:97:cb:6f:
bd:19:64:7f:d9:a8:93:3c:42:7d:f2:e3:9b:6a:66:8f:44:e5:
36:0c:46:a6:a7:cf:7d:30:14:dc:57:b3:87:71:26:28:26:52:
79:7d:16:18:2f:53:ba:94:15:9c:e5:a9:30:2e:9f:71:4b:b9:
62:07:df:31:ea:13:ef:ca:99:32:b5:96:82:ec:0e:27:83:44:
d5:e3:57:50:3b:53:be:76:38:c4:b7:a1:b5:a3:ed:ba:e2:15:
88:a2:d3:b2:92:63:be:73:18:a6:59:a9:ce:5c:05:d8:4b:f2:
82:13:ee:16:82:3e:71:6b:7f:00:df:d7:1f:00:f3:d7:86:ff:
d4:1c:05:76:72:aa:e0:23:58:22:16:6e:36:06:d6:b1:3f:a7:
8f:62:99:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PA67r16puXy7soxCczNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDI0YWRkY2MzZDViNzdhMDk5YTkwNzEyMjI1MmE0N2M4
ZjYzMTAwHhcNMjUwMTMxMTIwMDM5WhcNMjUwMjAxMTIwMDM5WjAzMTEwLwYDVQQD
Eyg3ZGE3ZDA1NjZlNGZjMzM0MmQzZWUzM2FkNmZhM2RjYWU5ZTIxOTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR5JU94hBuer2ypzyVMCnjlHqGK/
/7jsubCVXagirm8pbV1nP4vyhwqDspc5WujRXCFFkMGRFqBIw/O3/+lSF2EuftVC
C4bONScOj5D0jp4tvrZ72w18jgw+Nsv27ZTvELq/vOihbh5OrxGArexyUv7+tQrM
jmwVjlNBRvIuKdx14itQJR+4aLEcW0+D53BILcmowvgiQ/5LlS6DZwEK1QK647Rz
/rjGn/9qN9qJrNLXu19ToqkStIQ+rsP/Fi+FaM2sG+huGAmDYXX8t3WzqUSLdFbe
ZkMkDiWo2do8n9NzEoal4l33k8u3/c29fDyhI0W5VxezxKxwQ1s8QDGHkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2n0FZuT8M0LT7jOtb6Pcrp4hlCMB8GA1UdIwQY
MBaAFGjSSt3MPVt3oJmpBxIiUqR8j2MQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYt
YjMxNmRiNTkzOGZmLzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYtYjMxNmRiNTkzOGZm
LzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWld7mq3K
X9k//CkprkP70UyXFsauZz2CVdo7d+oWNYAFVaDgYUO4AusHqqIfuA1R6fUM84pA
zjnLrOd8019yje/2+PxWv3yRYidAazdeSkoR8XgJnf42C3dmDfZF0kSBCQaEYt7O
eworl8tvvRlkf9mokzxCffLjm2pmj0TlNgxGpqfPfTAU3Fezh3EmKCZSeX0WGC9T
upQVnOWpMC6fcUu5YgffMeoT78qZMrWWguwOJ4NE1eNXUDtTvnY4xLehtaPtuuIV
iKLTspJjvnMYplmpzlwF2EvyghPuFoI+cWt/AN/XHwDz14b/1BwFdnKq4CNYIhZu
NgbWsT+nj2KZag==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:34 2025 by rpki-client