Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
File: PKap1LWSRrTjNhThpLWRthGOihU.mft (raw, json)
Hash identifier: 02wNQnvQF9byTkXZZT+1vtQX46ICgbWuEIOZ58SdYEQ=
Subject key identifier: EE:2B:F3:0A:F6:F5:B7:7A:E8:D6:B0:62:9F:0F:94:16:52:70:78:19
Authority key identifier: 3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
Certificate issuer: /CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Certificate serial: 0194BBCE323F1E1D3ED28A9FEC4C6FDA8340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
Manifest number: 0FCD
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: PKap1LWSRrTjNhThpLWRthGOihU.crl (hash: HGStqK3xYd40otJK9qoezB4Y1qpvWNM/2X18RnMZqQQ=)
2: Szhjvm0y4QI0uwIjWJbCdPZPvps.roa (hash: Y0iaHG2LAJbIgjzTxyOFn6Uuz+FyO1yYuNhr0qnz3To=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:32:3f:1e:1d:3e:d2:8a:9f:ec:4c:6f:da:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=ee2bf30af6f5b77ae8d6b0629f0f941652707819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1c:e1:11:bb:9b:c9:62:23:89:25:ca:0a:7a:
a3:dc:6d:1c:f3:e3:53:97:e4:7c:5a:36:65:e7:6c:
43:24:3e:d5:6d:fd:ea:49:ee:14:4d:c4:a6:5b:0a:
87:94:36:0e:70:36:47:cd:dc:6a:82:ac:1d:6c:54:
88:03:d6:c8:09:40:72:fb:cc:13:95:a2:12:d0:9a:
bb:31:05:06:19:97:f0:5d:73:77:51:61:3c:cf:17:
e4:94:17:b2:f7:3b:d3:f4:b7:1f:55:f5:3a:ff:42:
49:71:10:e6:93:9a:7b:6f:5f:23:73:2b:bb:05:4f:
da:b2:b8:ac:14:00:91:88:f2:61:c0:65:ac:f6:ec:
0f:6e:f9:46:02:d7:b7:19:3e:28:a2:32:81:1d:a1:
68:f2:0d:8d:1d:9b:5d:ea:51:25:da:14:d4:a5:4e:
3d:2c:6a:b7:c5:23:99:51:34:06:86:39:10:b0:e3:
4e:12:ce:59:c3:e6:29:15:fc:c8:8a:5e:42:9d:2a:
50:8e:19:3d:31:42:e3:06:63:db:4a:c5:75:66:54:
39:d6:d6:40:25:d1:84:91:3b:54:33:18:cd:12:19:
c0:c0:f8:b3:8d:36:81:74:aa:03:49:ad:f4:76:b4:
61:4b:b6:62:18:13:46:bf:a0:2f:40:56:d5:ef:f3:
ac:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2B:F3:0A:F6:F5:B7:7A:E8:D6:B0:62:9F:0F:94:16:52:70:78:19
X509v3 Authority Key Identifier:
keyid:3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:02:81:fc:48:b7:a7:04:d3:e6:9d:ab:36:1b:cb:ee:fc:be:
83:a3:15:7a:29:57:29:fd:9b:55:08:3b:d1:11:93:cd:3d:cc:
53:7d:6e:02:41:be:36:73:5f:82:ac:24:3c:fa:e5:4a:b3:5e:
c6:40:ec:a0:48:67:79:c8:b7:b1:09:a3:3a:92:2c:36:b8:29:
62:70:7b:bd:88:4c:32:e7:98:73:36:ae:0b:3a:c8:0b:d6:f5:
8f:c8:2e:09:05:17:d0:b0:4a:4e:cc:ab:3b:9c:18:84:96:17:
f6:0a:2b:29:54:95:d0:d9:8a:94:7a:64:ba:0d:7e:d6:73:bc:
13:0f:0f:34:d0:05:56:f1:07:01:31:28:31:5d:b3:82:a8:88:
96:c1:8f:d8:57:c1:dd:0e:78:29:ba:e5:57:69:a5:3a:5f:30:
ad:79:78:03:09:11:fe:7a:db:61:6c:ae:75:a9:bc:61:05:85:
e5:b6:30:7d:df:a5:29:90:5e:da:e4:1b:d2:b1:6c:ff:f3:42:
6f:1f:84:80:1a:f3:86:06:de:a4:3f:b5:08:70:38:e9:59:da:
85:3e:86:14:57:30:95:f7:98:6e:47:fd:27:03:b1:ec:44:e4:
77:f5:56:7a:de:32:47:6f:af:52:b5:51:9d:55:44:fd:80:73:
f2:ad:ba:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjI/Hh0+0oqf7Exv2oNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYTZhOWQ0YjU5MjQ2YjRlMzM2MTRlMWE0YjU5MWI2MTE4
ZThhMTUwHhcNMjUwMTMxMTAwMDQwWhcNMjUwMjAxMTAwMDQwWjAzMTEwLwYDVQQD
EyhlZTJiZjMwYWY2ZjViNzdhZThkNmIwNjI5ZjBmOTQxNjUyNzA3ODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hzhEbubyWIjiSXKCnqj3G0c8+NT
l+R8WjZl52xDJD7Vbf3qSe4UTcSmWwqHlDYOcDZHzdxqgqwdbFSIA9bICUBy+8wT
laIS0Jq7MQUGGZfwXXN3UWE8zxfklBey9zvT9LcfVfU6/0JJcRDmk5p7b18jcyu7
BU/asrisFACRiPJhwGWs9uwPbvlGAte3GT4oojKBHaFo8g2NHZtd6lEl2hTUpU49
LGq3xSOZUTQGhjkQsONOEs5Zw+YpFfzIil5CnSpQjhk9MULjBmPbSsV1ZlQ51tZA
JdGEkTtUMxjNEhnAwPizjTaBdKoDSa30drRhS7ZiGBNGv6AvQFbV7/OsyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4r8wr29bd66NawYp8PlBZScHgZMB8GA1UdIwQY
MBaAFDymqdS1kka04zYU4aS1kbYRjooVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEthcDFMV1NSclRqTmhUaHBMV1J0aEdPaWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kZDY1MTgtYmYzNS00YzU4LWI4MWIt
OTRiMTQ5M2RmMWYyLzEvUEthcDFMV1NSclRqTmhUaHBMV1J0aEdPaWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9kZDY1MTgtYmYzNS00YzU4LWI4MWItOTRiMTQ5M2RmMWYy
LzEvUEthcDFMV1NSclRqTmhUaHBMV1J0aEdPaWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgKB/Ei3
pwTT5p2rNhvL7vy+g6MVeilXKf2bVQg70RGTzT3MU31uAkG+NnNfgqwkPPrlSrNe
xkDsoEhneci3sQmjOpIsNrgpYnB7vYhMMueYczauCzrIC9b1j8guCQUX0LBKTsyr
O5wYhJYX9gorKVSV0NmKlHpkug1+1nO8Ew8PNNAFVvEHATEoMV2zgqiIlsGP2FfB
3Q54KbrlV2mlOl8wrXl4AwkR/nrbYWyudam8YQWF5bYwfd+lKZBe2uQb0rFs//NC
bx+EgBrzhgbepD+1CHA46VnahT6GFFcwlfeYbkf9JwOx7ETkd/VWet4yR2+vUrVR
nVVE/YBz8q26Bw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:21 2025 by rpki-client