Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
File: AexQyzOuGGDUzF-2fkPTkwQiS08.mft (raw, json)
Hash identifier: S7bHCDYAFbyi0SaneXqmvOzwXvUTb+6mhnJ0srOcqTM=
Subject key identifier: F4:5D:B9:E1:5E:94:07:73:22:3B:F2:FC:95:4E:90:E1:DC:D1:EF:0D
Authority key identifier: 01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
Certificate issuer: /CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Certificate serial: 0194BD8542E9EBEE6D89ABCA6E1B0A602996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: 8xuwdhGvmNX9MjR3WUx0PqC9jUc.roa (hash: p+ehqHvmDvZknC0O2O+zo8Q1VoLVTXJKDz/p25JgCzc=)
2: AexQyzOuGGDUzF-2fkPTkwQiS08.crl (hash: uQw3Ep02pKu6bFN13QkKpLZkHNJPkvmbrszunqRnSpA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:42:e9:eb:ee:6d:89:ab:ca:6e:1b:0a:60:29:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=f45db9e15e940773223bf2fc954e90e1dcd1ef0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b9:94:ff:39:37:fd:33:24:4f:f6:c2:30:e9:
76:1a:c5:95:91:6e:f5:f5:5f:b1:2f:94:62:56:1d:
d7:4a:57:76:80:3d:15:35:98:a6:1e:76:32:8e:d3:
7d:b1:3b:28:34:b3:d8:06:6d:79:c8:7a:a1:11:bc:
e6:7b:48:34:c2:fc:4d:b9:23:4b:b2:f0:7a:02:2e:
2c:22:a1:6f:0c:3a:84:c0:19:0f:c0:22:6a:42:50:
67:b8:7b:98:cd:0b:c9:70:88:13:3d:3f:da:46:a0:
64:02:44:f7:28:09:bd:66:ff:97:f4:ac:96:5d:e5:
cd:e6:a1:08:43:70:4d:68:ef:ea:02:27:f1:b8:2d:
01:c6:9e:c5:29:32:3c:90:b6:03:48:36:bc:c6:84:
26:5b:65:cb:04:60:74:5c:91:3a:29:d9:27:21:0a:
cb:07:48:a6:0d:49:5c:26:a2:0f:eb:16:d7:61:b1:
e9:0a:ed:4e:85:bd:a6:3d:88:04:90:d1:f2:09:25:
6e:43:96:97:c7:d6:c7:54:77:10:be:13:d2:ed:39:
fc:52:b5:50:36:fa:b0:c4:d7:c8:7d:f6:c7:b2:b8:
65:0a:69:fd:ca:1a:ed:81:be:ea:c8:c5:75:3a:8b:
01:86:9e:63:40:62:03:61:92:73:08:3e:b9:19:48:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5D:B9:E1:5E:94:07:73:22:3B:F2:FC:95:4E:90:E1:DC:D1:EF:0D
X509v3 Authority Key Identifier:
keyid:01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:dc:e2:84:57:5a:39:76:75:f4:76:df:b3:b7:ef:42:43:3c:
60:76:f9:71:83:23:84:86:ec:30:38:5a:4c:0b:40:98:c1:bd:
19:38:95:15:65:43:26:5f:05:7c:77:93:78:d5:23:b0:ec:51:
3b:71:20:f9:1f:74:f4:b7:24:d2:c2:e7:30:e9:99:1f:c2:9e:
c5:68:7f:97:d6:6a:42:6f:b4:ad:b9:78:9c:b3:67:59:15:6e:
57:72:d8:ac:85:d8:4d:7a:eb:19:eb:a7:38:44:1b:5d:40:e3:
d9:28:21:60:67:27:8a:3d:46:f9:34:40:d7:17:90:68:76:ff:
7a:7a:b5:ce:55:a0:66:36:ba:a9:dd:03:7b:af:0c:4f:a3:a9:
a5:a9:e8:df:e6:92:d3:0e:4a:99:35:39:9a:41:e2:2f:66:6e:
e7:bb:46:66:31:91:50:54:c6:d7:15:2b:2f:90:e2:45:cc:82:
d3:f5:70:ca:39:2d:09:a1:22:af:24:b0:7a:ba:d5:3e:5e:f5:
21:88:ec:09:25:20:55:4c:8b:ab:45:81:18:99:a7:cf:ad:de:
30:88:06:43:ec:6d:2b:25:ca:04:6d:77:78:c7:1f:28:84:a8:
2b:42:74:d7:1b:d5:ea:30:5c:fd:07:c6:fd:31:8d:0c:96:04:
af:57:ce:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hULp6+5tiavKbhsKYCmWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZWM1MGNiMzNhZTE4NjBkNGNjNWZiNjdlNDNkMzkzMDQy
MjRiNGYwHhcNMjUwMTMxMTgwMDE0WhcNMjUwMjAxMTgwMDE0WjAzMTEwLwYDVQQD
EyhmNDVkYjllMTVlOTQwNzczMjIzYmYyZmM5NTRlOTBlMWRjZDFlZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LmU/zk3/TMkT/bCMOl2GsWVkW71
9V+xL5RiVh3XSld2gD0VNZimHnYyjtN9sTsoNLPYBm15yHqhEbzme0g0wvxNuSNL
svB6Ai4sIqFvDDqEwBkPwCJqQlBnuHuYzQvJcIgTPT/aRqBkAkT3KAm9Zv+X9KyW
XeXN5qEIQ3BNaO/qAifxuC0Bxp7FKTI8kLYDSDa8xoQmW2XLBGB0XJE6KdknIQrL
B0imDUlcJqIP6xbXYbHpCu1Ohb2mPYgEkNHyCSVuQ5aXx9bHVHcQvhPS7Tn8UrVQ
NvqwxNfIffbHsrhlCmn9yhrtgb7qyMV1OosBhp5jQGIDYZJzCD65GUhx6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRdueFelAdzIjvy/JVOkOHc0e8NMB8GA1UdIwQY
MBaAFAHsUMszrhhg1Mxftn5D05MEIktPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi83ZjNjYzktNmJlOS00MGIyLThhMTQt
MTMwNjk4YTU5NTljLzEvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi83ZjNjYzktNmJlOS00MGIyLThhMTQtMTMwNjk4YTU5NTlj
LzEvQWV4UXl6T3VHR0RVekYtMmZrUFRrd1FpUzA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9zihFda
OXZ19Hbfs7fvQkM8YHb5cYMjhIbsMDhaTAtAmMG9GTiVFWVDJl8FfHeTeNUjsOxR
O3Eg+R909Lck0sLnMOmZH8KexWh/l9ZqQm+0rbl4nLNnWRVuV3LYrIXYTXrrGeun
OEQbXUDj2SghYGcnij1G+TRA1xeQaHb/enq1zlWgZja6qd0De68MT6Oppano3+aS
0w5KmTU5mkHiL2Zu57tGZjGRUFTG1xUrL5DiRcyC0/VwyjktCaEirySwerrVPl71
IYjsCSUgVUyLq0WBGJmnz63eMIgGQ+xtKyXKBG13eMcfKISoK0J01xvV6jBc/QfG
/TGNDJYEr1fO6Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:21:48 2025 by rpki-client