Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/apz1pXvHRW10C0Xh_gjjaamhcUo.mft
File: apz1pXvHRW10C0Xh_gjjaamhcUo.mft (raw, json)
Hash identifier: ct6vXwvM88hcZvQTrKu75Ew5fQKzuY0ol86Kag1TJVY=
Subject key identifier: 99:D9:63:3A:D1:EE:C9:00:95:68:FA:5C:80:9F:94:71:85:6F:AF:4B
Authority key identifier: 6A:9C:F5:A5:7B:C7:45:6D:74:0B:45:E1:FE:08:E3:69:A9:A1:71:4A
Certificate issuer: /CN=6a9cf5a57bc7456d740b45e1fe08e369a9a1714a
Certificate serial: 0194BD17CA8F69DD4B29924232E8D44935EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apz1pXvHRW10C0Xh_gjjaamhcUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/apz1pXvHRW10C0Xh_gjjaamhcUo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: W5gLui2hXZ7sJI9UIKmvD2JTYpU.roa (hash: V/XfEAPaTzOxXEzXQ9Ey7h7BlTmoHc+eL3OCteRrtGo=)
2: apz1pXvHRW10C0Xh_gjjaamhcUo.crl (hash: iLXsuCK2sAKZHEI/pIsznvIVKWMhD/CsAzNCxByE2t8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ca:8f:69:dd:4b:29:92:42:32:e8:d4:49:35:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9cf5a57bc7456d740b45e1fe08e369a9a1714a
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=99d9633ad1eec9009568fa5c809f9471856faf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:b8:75:58:fe:19:25:d7:be:f9:7d:86:d1:
6f:41:ae:87:f2:46:07:18:43:a8:8c:a6:1e:90:69:
5e:23:58:5d:ea:f6:ef:4e:61:fa:fd:02:f3:a1:7b:
3e:f5:d8:7d:ce:2e:48:4b:fb:56:d2:3f:63:11:c3:
e0:c5:57:8f:f9:f9:a6:b0:aa:38:f3:95:cb:e5:67:
25:e6:a5:32:c8:93:33:42:01:fd:54:2c:c4:9c:77:
e0:09:de:fd:8b:9f:a7:74:61:d4:88:ce:24:89:71:
79:2d:2a:70:7f:86:08:55:15:ab:a4:22:51:b8:93:
c1:23:f2:d3:eb:58:1a:dc:8f:78:0d:04:6d:2a:8f:
97:7f:1f:e6:4b:0c:36:de:31:8f:5e:86:f7:ee:9d:
d3:27:a2:a8:85:2f:0f:29:e5:b2:f8:6e:d6:50:60:
e2:ab:2e:8a:d5:5e:5b:72:35:d8:61:46:9c:00:bd:
37:b2:ab:b3:7a:ac:e1:63:4d:ec:09:5e:0f:e4:67:
9f:1c:a1:34:89:d1:22:bb:37:e0:78:33:65:70:b2:
6f:87:3a:2d:8d:17:29:21:bd:c2:ef:af:eb:94:dc:
3a:94:5d:6c:16:af:3b:56:7a:e7:8b:fa:93:33:ed:
76:d5:36:78:a2:23:4f:49:bc:35:7b:cb:a4:1b:ae:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D9:63:3A:D1:EE:C9:00:95:68:FA:5C:80:9F:94:71:85:6F:AF:4B
X509v3 Authority Key Identifier:
keyid:6A:9C:F5:A5:7B:C7:45:6D:74:0B:45:E1:FE:08:E3:69:A9:A1:71:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apz1pXvHRW10C0Xh_gjjaamhcUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/apz1pXvHRW10C0Xh_gjjaamhcUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/apz1pXvHRW10C0Xh_gjjaamhcUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a2:d6:69:b8:74:59:24:0c:6e:38:e4:58:32:05:2b:46:1e:
57:9c:9d:eb:c6:a0:b7:55:c0:9a:c2:ee:5f:11:d7:33:57:fc:
d8:74:d7:40:c9:d7:35:e7:b6:3a:76:57:f7:e7:15:2a:20:1f:
65:df:c1:a0:db:86:a3:8e:47:42:ba:7a:0c:4a:d1:e5:37:71:
48:62:a0:b9:91:8a:f4:0d:c2:a9:29:cb:98:c1:68:b5:7f:f3:
25:de:1a:cf:e5:11:f6:66:83:05:d1:11:b0:aa:6a:ea:70:79:
7d:0b:89:65:9e:c3:5b:5b:e9:63:b1:46:16:9b:c3:a9:0e:0e:
ee:7b:c4:f1:60:8e:c7:5f:66:69:ae:a9:46:0d:71:e6:f1:56:
58:16:66:a1:03:07:fb:bd:30:9a:e8:cd:08:2c:28:6f:b1:c5:
71:d7:ba:fb:30:d3:62:3d:0b:a7:09:01:45:87:8b:d0:6c:03:
cb:7e:ce:c1:61:6d:aa:4a:b6:44:ae:59:bf:82:30:d6:69:3c:
8f:bc:19:46:fb:50:31:82:a4:75:9f:5c:b2:f1:96:b9:65:ea:
95:ff:90:90:8a:17:67:fe:77:6a:10:cd:56:9e:61:53:29:af:
81:1a:f1:b8:d3:79:49:eb:58:dc:7a:fa:4d:a1:5d:2f:ab:2d:
86:dd:58:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8qPad1LKZJCMujUSTXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOWNmNWE1N2JjNzQ1NmQ3NDBiNDVlMWZlMDhlMzY5YTlh
MTcxNGEwHhcNMjUwMTMxMTYwMDQwWhcNMjUwMjAxMTYwMDQwWjAzMTEwLwYDVQQD
Eyg5OWQ5NjMzYWQxZWVjOTAwOTU2OGZhNWM4MDlmOTQ3MTg1NmZhZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCC4dVj+GSXXvvl9htFvQa6H8kYH
GEOojKYekGleI1hd6vbvTmH6/QLzoXs+9dh9zi5IS/tW0j9jEcPgxVeP+fmmsKo4
85XL5Wcl5qUyyJMzQgH9VCzEnHfgCd79i5+ndGHUiM4kiXF5LSpwf4YIVRWrpCJR
uJPBI/LT61ga3I94DQRtKo+Xfx/mSww23jGPXob37p3TJ6KohS8PKeWy+G7WUGDi
qy6K1V5bcjXYYUacAL03squzeqzhY03sCV4P5GefHKE0idEiuzfgeDNlcLJvhzot
jRcpIb3C76/rlNw6lF1sFq87Vnrni/qTM+121TZ4oiNPSbw1e8ukG64MpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnZYzrR7skAlWj6XICflHGFb69LMB8GA1UdIwQY
MBaAFGqc9aV7x0VtdAtF4f4I42mpoXFKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXB6MXBYdkhSVzEwQzBYaF9namphYW1oY1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZmUzZDctOTIxNC00ZGUzLThmMWMt
MmMwYWJiZDJlODVkLzEvYXB6MXBYdkhSVzEwQzBYaF9namphYW1oY1VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xZmUzZDctOTIxNC00ZGUzLThmMWMtMmMwYWJiZDJlODVk
LzEvYXB6MXBYdkhSVzEwQzBYaF9namphYW1oY1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6LWabh0
WSQMbjjkWDIFK0YeV5yd68agt1XAmsLuXxHXM1f82HTXQMnXNee2OnZX9+cVKiAf
Zd/BoNuGo45HQrp6DErR5TdxSGKguZGK9A3CqSnLmMFotX/zJd4az+UR9maDBdER
sKpq6nB5fQuJZZ7DW1vpY7FGFpvDqQ4O7nvE8WCOx19maa6pRg1x5vFWWBZmoQMH
+70wmujNCCwob7HFcde6+zDTYj0LpwkBRYeL0GwDy37OwWFtqkq2RK5Zv4Iw1mk8
j7wZRvtQMYKkdZ9csvGWuWXqlf+QkIoXZ/53ahDNVp5hUymvgRrxuNN5SetY3Hr6
TaFdL6stht1Yew==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:40 2025 by rpki-client