Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
File: APTMQSzDD7L598N8PjkL7F5iVrA.mft (raw, json)
Hash identifier: i0jkeXzpy1iC6Dow3k/fm9VFKj0mE5gIpl1WfekTfp0=
Subject key identifier: CC:6A:62:88:D6:20:74:C9:0E:FC:B6:8D:2F:34:21:BC:16:89:D8:26
Authority key identifier: 00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
Certificate issuer: /CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Certificate serial: 0194BC7325D7387EAF65A79102A32E3F534F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
Manifest number: 1357
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: 5BciwgNYwMNFn5eFGl4Ow7HBSis.roa (hash: 3UceDm6E5z2xuYBvrfaNWIIbAo66nrZeoQOIOFL2Trc=)
2: APTMQSzDD7L598N8PjkL7F5iVrA.crl (hash: 72svFxEGxqXSgqox9EZeKI85eFuDN3Fk7N0UPwArO5I=)
3: M7SEgufvftwnRCkx-25asjtCovc.roa (hash: U57VYWY1ePii662SbirLo+F12wZ7w8+u4EylfllvMp4=)
4: ebqyf5BiDM6j62bVjaE6r-bdVhw.roa (hash: +MzGy+AsjXhbDBl5ZXZ0wbyW9k0Dlt1wZj2p77zu+Lc=)
5: hoKOermCUGUXPhGJMB3htCGxKbo.roa (hash: C2bDkxfzxHRN/J0tOztxhLbDgje2XNYFfUjponmFTcE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:25:d7:38:7e:af:65:a7:91:02:a3:2e:3f:53:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=cc6a6288d62074c90efcb68d2f3421bc1689d826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cb:29:08:f2:46:b4:aa:19:d9:e5:c9:cc:e1:
ad:d5:e5:56:91:27:c2:d1:3a:57:90:a5:1d:34:f1:
c2:09:7a:60:b9:57:1a:76:be:de:3e:4a:dc:cc:5a:
c6:d3:52:99:be:b9:0f:25:a1:9c:d5:33:bd:25:89:
e7:5c:ec:8e:77:31:18:18:5b:6e:91:24:44:ab:4b:
77:fd:bb:f7:8d:83:16:4d:8c:ce:f1:ab:90:b5:f5:
59:0f:db:c4:73:46:6e:31:c1:09:45:9c:de:89:e6:
a3:00:b4:f9:32:2a:b3:1a:a9:88:ad:c7:a5:26:ba:
06:a6:77:8c:53:03:80:e3:f9:54:5f:fb:0d:72:97:
36:99:13:12:8d:f8:40:40:d7:65:fc:f5:d3:4b:a3:
79:e9:9f:2a:47:9f:ef:c6:ca:f8:05:22:c4:08:38:
bc:3e:93:35:2f:38:7a:53:42:ef:fc:94:fc:d3:39:
59:d3:fd:99:ad:9e:98:e3:4b:c5:c1:e1:2f:12:02:
9e:e7:71:93:b9:90:aa:ac:c8:45:8b:59:2c:7d:d0:
8c:de:78:46:75:1e:29:fe:73:1b:3d:0c:da:1a:12:
a3:a6:79:2d:92:06:f1:13:dd:39:ff:f6:2b:59:ba:
64:af:a9:8e:f1:31:8f:09:b1:e6:44:bf:2e:4f:8d:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6A:62:88:D6:20:74:C9:0E:FC:B6:8D:2F:34:21:BC:16:89:D8:26
X509v3 Authority Key Identifier:
keyid:00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3f:aa:25:1e:6f:b8:ba:c7:34:10:e1:c3:4b:51:01:01:4f:
1c:e0:6e:37:f7:62:8d:ef:8e:db:e2:b8:1e:9d:b6:d3:5c:8d:
21:c2:e4:22:fb:5a:d3:8f:a1:a3:7f:55:ed:d0:3e:89:c0:f4:
de:04:9c:3a:ba:72:90:fd:4d:a3:dc:94:c8:53:89:47:b3:cb:
a0:fc:af:47:2f:5f:57:2d:f8:69:aa:f0:d7:0b:2c:c4:e5:e2:
a0:8b:a3:7b:77:13:d1:cb:87:3a:f8:10:7b:6a:70:44:8b:80:
3e:37:f2:9a:1a:d2:88:a0:50:6c:d6:bc:a7:f5:80:3e:2e:41:
45:59:04:7a:89:44:42:9b:5e:71:d0:54:38:72:4a:7a:10:95:
90:b6:e8:fd:4b:1a:42:f8:e5:41:63:e8:cd:29:35:3e:21:b3:
8f:13:55:e1:72:24:b0:2f:1e:4f:4e:ea:cd:1c:fa:53:e2:95:
da:91:07:fc:6f:f1:66:6d:76:87:ed:20:a1:60:e8:67:5b:10:
59:4e:79:ce:b7:52:37:16:cb:4a:02:7f:45:04:e9:dc:55:3e:
97:99:08:15:bc:78:0e:61:be:08:39:e8:7e:dc:2d:22:2d:de:
52:8d:12:c2:e5:84:2c:57:34:e5:e9:c0:8c:f4:ed:27:c8:d9:
a2:22:8d:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyXXOH6vZaeRAqMuP1NPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZjRjYzQxMmNjMzBmYjJmOWY3YzM3YzNlMzkwYmVjNWU2
MjU2YjAwHhcNMjUwMTMxMTMwMDUwWhcNMjUwMjAxMTMwMDUwWjAzMTEwLwYDVQQD
EyhjYzZhNjI4OGQ2MjA3NGM5MGVmY2I2OGQyZjM0MjFiYzE2ODlkODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsspCPJGtKoZ2eXJzOGt1eVWkSfC
0TpXkKUdNPHCCXpguVcadr7ePkrczFrG01KZvrkPJaGc1TO9JYnnXOyOdzEYGFtu
kSREq0t3/bv3jYMWTYzO8auQtfVZD9vEc0ZuMcEJRZzeieajALT5MiqzGqmIrcel
JroGpneMUwOA4/lUX/sNcpc2mRMSjfhAQNdl/PXTS6N56Z8qR5/vxsr4BSLECDi8
PpM1Lzh6U0Lv/JT80zlZ0/2ZrZ6Y40vFweEvEgKe53GTuZCqrMhFi1ksfdCM3nhG
dR4p/nMbPQzaGhKjpnktkgbxE905//YrWbpkr6mO8TGPCbHmRL8uT40+7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxqYojWIHTJDvy2jS80IbwWidgmMB8GA1UdIwQY
MBaAFAD0zEEsww+y+ffDfD45C+xeYlawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVBUTVFTekREN0w1OThOOFBqa0w3RjVpVnJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85Mzc1YTItM2U2Zi00NTc3LTg1ZDEt
NWYxNDVjZmQyMDcwLzEvQVBUTVFTekREN0w1OThOOFBqa0w3RjVpVnJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy85Mzc1YTItM2U2Zi00NTc3LTg1ZDEtNWYxNDVjZmQyMDcw
LzEvQVBUTVFTekREN0w1OThOOFBqa0w3RjVpVnJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHz+qJR5v
uLrHNBDhw0tRAQFPHOBuN/dije+O2+K4Hp2201yNIcLkIvta04+ho39V7dA+icD0
3gScOrpykP1No9yUyFOJR7PLoPyvRy9fVy34aarw1wssxOXioIuje3cT0cuHOvgQ
e2pwRIuAPjfymhrSiKBQbNa8p/WAPi5BRVkEeolEQptecdBUOHJKehCVkLbo/Usa
QvjlQWPozSk1PiGzjxNV4XIksC8eT07qzRz6U+KV2pEH/G/xZm12h+0goWDoZ1sQ
WU55zrdSNxbLSgJ/RQTp3FU+l5kIFbx4DmG+CDnoftwtIi3eUo0SwuWELFc05enA
jPTtJ8jZoiKNaA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:24 2025 by rpki-client