Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
File: p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json)
Hash identifier: pJsgvwgBrHt3pRK2+rWgdlQ9o6UizKX6r+S49VukHMk=
Subject key identifier: 69:5D:31:42:A2:69:B4:E9:BE:3A:BD:A8:8A:06:5A:1E:51:21:20:06
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial: 0194BBCE962724AF9C467FEA265AAA86731B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
Manifest number: 0511
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: lZ0k4HCeYgJ0Z--pVxoJOUL75A0.roa (hash: Eir5xG3bxnWZXnAYjpN3gzblSfPJDFtKlMunMUTHMBs=)
2: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: c2pqOMN0vUZI6bNPse+Hk6a6mK1LzFEFAsHSnqV/Rdc=)
3: uu0B_lRFC2FFj-k7cmY35eNucIA.roa (hash: 45P7jNAbs5p5AqN2mETxLIaycHEKNPfSa4PeOiqxcQ4=)
4: vi8z9iHTOaB2FWHQdJejTeAcw5Y.roa (hash: TDy4p0/0R2wjKaBRPb/eq3sprSVIkaJesmw7dyJ2VEY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:96:27:24:af:9c:46:7f:ea:26:5a:aa:86:73:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=695d3142a269b4e9be3abda88a065a1e51212006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:8b:32:68:97:04:90:3d:b5:65:4b:55:9f:
57:0b:d1:69:67:a0:3f:8d:1c:e0:9f:55:ad:fa:39:
ff:ad:59:48:d7:8a:11:8b:08:a3:3f:fd:7b:cd:65:
c0:ab:0b:ce:ab:e0:4d:43:dc:ce:b3:f0:88:bf:8c:
c5:76:a3:c0:30:0d:51:89:81:91:18:08:e0:60:2e:
82:2b:5d:25:25:49:1b:31:94:69:19:ce:6e:f9:67:
c4:00:ad:4e:b0:16:e2:9e:fd:b1:35:aa:3f:f1:c5:
8e:07:e5:da:ab:6c:55:8d:24:33:47:7e:f0:73:4f:
68:fb:e6:f1:5b:1e:05:5c:84:db:05:f9:12:a8:04:
f2:f3:26:97:64:24:b9:f7:59:b9:e0:6b:0b:9b:99:
ff:51:96:9a:a9:bf:73:ec:60:24:27:1a:c5:c3:b1:
b4:f4:04:ad:fc:ce:b8:bb:1c:24:03:e0:b8:64:9c:
14:cb:94:aa:d2:70:79:ea:18:a7:cb:36:c4:8f:a1:
0a:3d:e7:9d:73:84:59:35:cd:f6:28:50:79:f9:5e:
f3:84:83:ce:0b:f5:9b:8f:1e:27:7f:be:eb:6d:ce:
0f:d1:9d:6d:68:83:3e:68:71:fa:c1:72:0e:10:d2:
67:b0:4c:d9:d1:05:5c:f2:51:ca:5d:b4:72:3e:09:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5D:31:42:A2:69:B4:E9:BE:3A:BD:A8:8A:06:5A:1E:51:21:20:06
X509v3 Authority Key Identifier:
keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3e:d1:61:16:52:dd:f8:51:8d:c7:fb:3e:14:ac:28:44:b4:
ed:cb:31:d9:c4:04:6b:fa:c0:d9:25:de:00:52:58:86:99:29:
99:3d:ec:e3:b2:db:bc:d9:8c:6e:b9:7b:c4:ab:62:20:ea:af:
49:fd:f2:35:bd:9b:1f:bf:83:7c:0c:79:b0:25:a1:87:c2:a4:
fa:df:72:1c:86:db:b1:0a:94:cf:e0:a1:66:0c:bb:1b:00:6c:
17:2a:d9:93:ab:40:a1:ad:f4:82:c3:fc:25:f9:29:97:4f:3c:
d9:b1:44:97:77:42:4a:6e:c7:d5:9d:9a:5b:a4:80:a8:03:dd:
b6:25:3a:f9:0c:fe:39:03:1c:46:3c:16:73:a9:cf:79:12:7f:
ab:7a:82:7e:31:ee:c0:d4:c9:64:8f:01:d8:de:99:95:71:fb:
c3:28:b6:ee:6d:96:c1:d8:38:4c:1d:7f:0f:99:fa:80:3d:d0:
6d:5d:cc:b1:4d:6c:ba:d7:97:bb:76:15:d6:41:e1:aa:70:c3:
2e:d8:0a:78:e7:ef:12:3e:41:d9:99:c3:41:66:06:e8:dc:37:
dc:48:fe:13:fa:5b:58:ad:a0:16:c2:78:6e:6a:54:3c:3d:99:
3d:15:05:69:ce:ac:de:e2:40:56:36:ae:3e:e9:8c:a2:9b:c6:
fa:20:15:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zpYnJK+cRn/qJlqqhnMbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NmZjZmFkOTY2YWU3ZTgxNzFjZmNlMjZkYjNmNjU3NzZk
MjZmZTgwHhcNMjUwMTMxMTAwMTA1WhcNMjUwMjAxMTAwMTA1WjAzMTEwLwYDVQQD
Eyg2OTVkMzE0MmEyNjliNGU5YmUzYWJkYTg4YTA2NWExZTUxMjEyMDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuriLMmiXBJA9tWVLVZ9XC9FpZ6A/
jRzgn1Wt+jn/rVlI14oRiwijP/17zWXAqwvOq+BNQ9zOs/CIv4zFdqPAMA1RiYGR
GAjgYC6CK10lJUkbMZRpGc5u+WfEAK1OsBbinv2xNao/8cWOB+Xaq2xVjSQzR37w
c09o++bxWx4FXITbBfkSqATy8yaXZCS591m54GsLm5n/UZaaqb9z7GAkJxrFw7G0
9ASt/M64uxwkA+C4ZJwUy5Sq0nB56hinyzbEj6EKPeedc4RZNc32KFB5+V7zhIPO
C/Wbjx4nf77rbc4P0Z1taIM+aHH6wXIOENJnsEzZ0QVc8lHKXbRyPgmNwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGldMUKiabTpvjq9qIoGWh5RISAGMB8GA1UdIwQY
MBaAFKdvz62WaufoFxz84m2z9ld20m/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEt
YzU0MDFmNmQ5MWQxLzEvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEtYzU0MDFmNmQ5MWQx
LzEvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAD7RYRZS
3fhRjcf7PhSsKES07csx2cQEa/rA2SXeAFJYhpkpmT3s47LbvNmMbrl7xKtiIOqv
Sf3yNb2bH7+DfAx5sCWhh8Kk+t9yHIbbsQqUz+ChZgy7GwBsFyrZk6tAoa30gsP8
Jfkpl0882bFEl3dCSm7H1Z2aW6SAqAPdtiU6+Qz+OQMcRjwWc6nPeRJ/q3qCfjHu
wNTJZI8B2N6ZlXH7wyi27m2Wwdg4TB1/D5n6gD3QbV3MsU1suteXu3YV1kHhqnDD
LtgKeOfvEj5B2ZnDQWYG6Nw33Ej+E/pbWK2gFsJ4bmpUPD2ZPRUFac6s3uJAVjau
PumMopvG+iAV9A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:05:29 2025 by rpki-client