Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File: 1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier: pjsxKhwDeYz2/SeCphBY8cvWezNAXV+A9iQU4SN7GBc=
Subject key identifier: AD:CC:28:55:BD:DF:90:B5:50:E8:BA:BF:6A:2D:E3:6E:74:49:C5:51
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 0194BCAA3047DD97D634A10F6E0A38062D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: HhygCtvVpPIkGj4fZ6vjH2qf7Rw82+xncIVZeh4p11A=)
2: Dn9PJQBV1DBDQ0-rgh6HR3KDZu0.roa (hash: gZf47H7ZNPeHNBxmm1n+mb7mTaHE9Uiqqc+N1w8TQc8=)
3: rkGv9bkZwGnroE2E1JMq5CMdQAQ.roa (hash: DQuQsqAZ9ADD7G7O8fgD2/H25auaCw74dHGUBLobCk0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:30:47:dd:97:d6:34:a1:0f:6e:0a:38:06:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=adcc2855bddf90b550e8babf6a2de36e7449c551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:73:96:ab:78:f2:88:b0:19:14:8a:3e:03:
e8:1d:b3:8b:de:e6:86:55:13:7f:45:ed:17:0c:5d:
a5:00:f3:39:07:c4:c3:70:79:ba:dc:33:1c:ce:00:
bc:63:5f:a1:4b:fc:a3:7b:79:e1:74:98:a3:d1:bb:
83:21:94:9c:c4:b2:2b:ec:1b:d7:d7:99:99:1b:dd:
4b:94:ad:51:2e:2a:42:9f:cd:09:33:7d:c2:a5:7d:
f6:dc:5b:fd:87:01:ea:ef:12:ed:ab:c6:31:86:7e:
a4:96:0d:22:ff:58:7f:fc:27:34:77:29:c5:ec:42:
b2:ed:36:6d:11:1d:0d:76:b3:6b:07:1c:9c:d9:03:
64:b6:9d:7e:01:c5:61:ee:5b:f9:c4:7e:2f:5f:f8:
37:80:f6:7d:d7:d0:59:92:f6:b5:7f:cc:23:66:3f:
6b:16:44:44:15:09:fa:02:64:01:d9:ef:25:a1:87:
0e:a0:2d:7a:d6:5d:cb:60:11:c9:af:31:19:cc:8f:
04:00:a2:28:8b:ee:05:be:27:1c:c5:34:b2:e6:80:
53:59:1c:e9:fc:37:13:3c:23:57:3f:4b:90:0e:44:
5d:8b:d8:fb:47:41:39:94:8a:55:83:e6:04:b8:e9:
27:3a:eb:1b:32:73:b5:1a:76:a6:51:58:8b:25:81:
63:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CC:28:55:BD:DF:90:B5:50:E8:BA:BF:6A:2D:E3:6E:74:49:C5:51
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:27:49:32:c6:fa:6b:1b:8d:21:29:2b:d6:66:a9:0b:82:e0:
47:88:8c:66:86:76:93:9a:6d:47:95:27:0f:21:1f:94:f4:2d:
2d:6e:fb:a0:a0:75:08:bb:4a:33:b8:be:53:3e:0c:93:2c:9e:
02:06:52:50:d0:2f:5e:59:b8:61:c1:7a:7a:8c:51:e8:00:0f:
84:8a:7d:6d:ca:d6:e1:5f:b1:6d:a2:9e:29:e4:b4:a7:61:af:
1e:12:d8:bf:8d:4f:a9:73:c6:1a:1f:52:dd:56:0d:5e:67:9e:
96:a2:1e:4a:b1:22:ba:da:66:8f:ef:24:04:41:10:0d:93:f0:
f7:99:d0:42:d8:5d:27:ba:6f:60:03:b7:c1:21:8a:6a:1e:74:
f1:d1:a9:40:ea:7e:32:aa:05:0a:d9:0b:8d:a2:ea:f2:0e:61:
5f:66:97:78:31:39:0e:a7:b6:94:b5:4a:9a:c4:d5:6a:f9:6f:
a4:d7:be:3e:8b:6d:90:1c:7d:c6:10:e2:01:f8:46:6d:62:82:
17:2f:a4:8b:9e:04:35:32:86:10:a2:69:de:a2:fa:97:5f:f2:
0d:57:46:06:cd:17:2d:90:2d:30:e3:ea:46:de:e4:f8:b2:e9:
8d:59:4a:d4:ae:61:c1:f0:de:55:07:1f:7e:ab:12:1c:42:e2:
f6:64:47:b5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS8qjBH3ZfWNKEPbgo4Bi2AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZmJjODQxNTgyMTQ4NmU4ZmUwODYwYjViZWMzZTkyODNi
ODAzODUwHhcNMjUwMTMxMTQwMDU3WhcNMjUwMjAxMTQwMDU3WjAzMTEwLwYDVQQD
EyhhZGNjMjg1NWJkZGY5MGI1NTBlOGJhYmY2YTJkZTM2ZTc0NDljNTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniBzlqt48oiwGRSKPgPoHbOL3uaG
VRN/Re0XDF2lAPM5B8TDcHm63DMczgC8Y1+hS/yje3nhdJij0buDIZScxLIr7BvX
15mZG91LlK1RLipCn80JM33CpX323Fv9hwHq7xLtq8Yxhn6klg0i/1h//Cc0dynF
7EKy7TZtER0NdrNrBxyc2QNktp1+AcVh7lv5xH4vX/g3gPZ919BZkva1f8wjZj9r
FkREFQn6AmQB2e8loYcOoC161l3LYBHJrzEZzI8EAKIoi+4FviccxTSy5oBTWRzp
/DcTPCNXP0uQDkRdi9j7R0E5lIpVg+YEuOknOusbMnO1GnamUViLJYFj1wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFK3MKFW935C1UOi6v2ot4250ScVRMB8GA1UdIwQY
MBaAFPj7yEFYIUhuj+CGC1vsPpKDuAOFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1QdklRVmdoU0c2UDRJWUxXLXcta29PNEE0VS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvMzYxYzU3LWVhNDItNDdlMi1hNjhm
LWVjOTY3YjUxMWQ3Zi8xLzEtUHZJUVZnaFNHNlA0SVlMVy13LWtvTzRBNFUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBhLzM2MWM1Ny1lYTQyLTQ3ZTItYTY4Zi1lYzk2N2I1MTFk
N2YvMS8xLVB2SVFWZ2hTRzZQNElZTFctdy1rb080QTRVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSdJ
Msb6axuNISkr1mapC4LgR4iMZoZ2k5ptR5UnDyEflPQtLW77oKB1CLtKM7i+Uz4M
kyyeAgZSUNAvXlm4YcF6eoxR6AAPhIp9bcrW4V+xbaKeKeS0p2GvHhLYv41PqXPG
Gh9S3VYNXmeelqIeSrEiutpmj+8kBEEQDZPw95nQQthdJ7pvYAO3wSGKah508dGp
QOp+MqoFCtkLjaLq8g5hX2aXeDE5Dqe2lLVKmsTVavlvpNe+PottkBx9xhDiAfhG
bWKCFy+ki54ENTKGEKJp3qL6l1/yDVdGBs0XLZAtMOPqRt7k+LLpjVlK1K5hwfDe
VQcffqsSHELi9mRHtQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:11 2025 by rpki-client