Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json)
Hash identifier: /8M3jg0DmHVrfldZ46DTGt1mHGKlVwk/P/RfJgG4IS8=
Subject key identifier: CE:44:EF:F4:45:5E:6E:C3:2D:D9:34:1B:91:D0:98:F6:B3:9C:66:3D
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 0194BD854EDB66733E8A88DAFE0ADF846EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: ro4QarFLy0Ae9ch2ZDSOe2/BNAJN5SzfhZFqic1kRkI=)
2: Oh-npebKNll7vvyYtRrj-cg_Nd4.roa (hash: VvG7KPmbGgCRtlU1cK6JWKQbIKFRicXjsb5mCW827Cs=)
3: dUHtzdOigEdCMJb0gXsKu7_CR9E.roa (hash: qHPvPZRfGsBNL2Al0WMsavpV3isIJ/xgOqxOV/q3Zgg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4e:db:66:73:3e:8a:88:da:fe:0a:df:84:6e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=ce44eff4455e6ec32dd9341b91d098f6b39c663d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:45:98:08:80:93:84:16:f8:b0:01:44:c1:15:
26:ed:e9:2a:b2:a9:b6:6f:f2:04:bc:51:4f:88:6e:
c4:c9:7d:08:6d:a6:d6:85:48:04:6e:e5:06:4d:20:
20:84:6e:28:76:3e:59:1e:ec:7c:63:79:e9:b0:bb:
81:f8:0a:6c:ef:30:a6:a3:b7:85:78:5a:44:ba:15:
62:ea:ce:21:2e:99:48:44:3e:b2:00:52:d8:b5:db:
a4:a2:10:27:21:2d:bc:51:3f:3c:ed:c2:26:e3:7c:
f6:5e:43:43:55:b6:fe:2b:81:ac:a6:5d:db:af:e2:
79:a1:5d:50:3a:11:ae:3d:a7:b6:52:28:e6:76:15:
65:ab:f0:ba:86:a5:79:73:b0:0b:cc:fb:66:d5:1b:
0b:22:e8:61:63:ce:56:d0:8d:d5:d8:fb:a4:d9:74:
ae:b5:51:99:30:43:ed:03:8c:73:c7:3d:eb:bb:33:
13:3d:3e:75:17:11:fd:f0:ca:f6:3e:c8:8c:b7:fd:
bd:d7:c1:00:7c:4b:67:5e:a9:74:91:3b:0b:c4:6d:
c9:9b:f0:7a:fc:b2:36:8a:b1:d4:98:71:03:fd:92:
ad:b5:9f:19:9d:63:18:8c:2d:9e:17:df:b8:00:c9:
c4:09:f7:8e:92:bb:a3:2f:1f:b8:a6:32:68:9e:11:
2b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:44:EF:F4:45:5E:6E:C3:2D:D9:34:1B:91:D0:98:F6:B3:9C:66:3D
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0a:36:7b:bc:35:a6:42:c1:8a:48:11:37:40:9a:6a:6e:9c:
4e:03:6b:1c:64:d9:16:14:f1:29:83:d0:fd:41:b6:b7:40:ff:
3c:a3:84:01:f9:af:b0:8a:36:c7:af:a2:39:be:bb:6a:b0:20:
1b:b6:6f:41:8a:c6:75:1c:98:47:78:37:8d:6e:b6:54:7a:f5:
75:ef:d1:48:6e:14:1b:6f:e4:65:36:37:f2:d0:b4:e9:a8:68:
b5:bb:92:32:9f:01:cb:ae:97:87:f1:f9:27:09:f5:00:69:7b:
97:8b:24:0c:d4:a5:73:55:bc:68:35:ce:9f:8a:15:73:2e:0c:
58:f4:5c:f3:06:47:e1:90:de:6a:95:cf:51:b6:5d:a5:77:f2:
4a:57:61:0f:79:7d:39:4b:83:b3:83:9f:22:0b:76:cd:3f:35:
62:63:64:8b:27:24:7b:4d:02:3c:45:8d:87:60:36:af:cd:25:
75:da:30:26:f1:d1:de:f9:3a:1d:56:51:42:58:8b:32:0f:95:
3a:e2:07:5d:85:45:97:75:24:df:2f:f4:fc:5e:f7:e4:dd:01:
9a:04:af:2e:85:b9:b9:a5:89:b7:4e:e4:bc:9c:20:0f:4f:43:
7f:87:a4:b7:25:bf:45:96:ac:02:8e:bf:66:ac:07:57:8a:d3:
3f:ec:90:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hU7bZnM+ioja/grfhG6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzlhZTExMTg4MDg4NTQ3ZWIzZTUyMzQ4M2NjYTk4NTU2
YzExNWIwHhcNMjUwMTMxMTgwMDE3WhcNMjUwMjAxMTgwMDE3WjAzMTEwLwYDVQQD
EyhjZTQ0ZWZmNDQ1NWU2ZWMzMmRkOTM0MWI5MWQwOThmNmIzOWM2NjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70WYCICThBb4sAFEwRUm7ekqsqm2
b/IEvFFPiG7EyX0IbabWhUgEbuUGTSAghG4odj5ZHux8Y3npsLuB+Aps7zCmo7eF
eFpEuhVi6s4hLplIRD6yAFLYtdukohAnIS28UT887cIm43z2XkNDVbb+K4Gspl3b
r+J5oV1QOhGuPae2UijmdhVlq/C6hqV5c7ALzPtm1RsLIuhhY85W0I3V2Puk2XSu
tVGZMEPtA4xzxz3ruzMTPT51FxH98Mr2PsiMt/2918EAfEtnXql0kTsLxG3Jm/B6
/LI2irHUmHED/ZKttZ8ZnWMYjC2eF9+4AMnECfeOkrujLx+4pjJonhEr2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5E7/RFXm7DLdk0G5HQmPaznGY9MB8GA1UdIwQY
MBaAFAI5rhEYgIhUfrPlI0g8yphVbBFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMt
NjcyODBjOGJiYWI4LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMtNjcyODBjOGJiYWI4
LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgo2e7w1
pkLBikgRN0Caam6cTgNrHGTZFhTxKYPQ/UG2t0D/PKOEAfmvsIo2x6+iOb67arAg
G7ZvQYrGdRyYR3g3jW62VHr1de/RSG4UG2/kZTY38tC06ahotbuSMp8By66Xh/H5
Jwn1AGl7l4skDNSlc1W8aDXOn4oVcy4MWPRc8wZH4ZDeapXPUbZdpXfySldhD3l9
OUuDs4OfIgt2zT81YmNkiycke00CPEWNh2A2r80lddowJvHR3vk6HVZRQliLMg+V
OuIHXYVFl3Uk3y/0/F735N0BmgSvLoW5uaWJt07kvJwgD09Df4ektyW/RZasAo6/
ZqwHV4rTP+yQYQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:33 2025 by rpki-client