Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
File: pbJlTkMrdNyNpm2BayYM_8gXMXU.mft (raw, json)
Hash identifier: gTcr4ZUma0B+AbAaiClJF6LGaMsyfak9vbFmP6bOWCQ=
Subject key identifier: 57:8D:1C:C4:BA:28:3E:BA:80:2F:2A:16:47:83:A8:22:AA:F4:33:6B
Authority key identifier: A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75
Certificate issuer: /CN=a5b2654e432b74dc8da66d816b260cffc8173175
Certificate serial: 0194BCA9FE1BBF9EA65A93CEDD8B09ED5498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: pbJlTkMrdNyNpm2BayYM_8gXMXU.crl (hash: 4zGLYG6zyWfSHELzL8lFNLzSdeBPAxaqhXJnAXUBU8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fe:1b:bf:9e:a6:5a:93:ce:dd:8b:09:ed:54:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b2654e432b74dc8da66d816b260cffc8173175
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=578d1cc4ba283eba802f2a164783a822aaf4336b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dd:72:62:68:46:b6:f2:95:eb:60:36:7a:0b:
a0:c7:92:2c:d2:74:04:58:14:42:c8:d4:8a:22:23:
79:76:c1:3d:1f:44:b9:6f:b2:1e:fc:37:ba:14:43:
cf:6f:d6:6d:62:b0:ff:6a:b7:52:a2:24:a0:a1:c3:
cd:2a:1f:31:ff:91:c3:c8:b1:8c:8e:27:6d:42:f3:
0a:12:c0:e4:93:bb:b3:82:9b:b4:27:53:b2:08:e4:
07:67:55:ba:39:e9:0e:08:8d:3d:ba:31:74:09:cf:
4b:44:1f:6b:81:e3:87:d1:6c:53:56:b0:18:ea:f9:
02:42:c0:5f:4d:80:2c:e7:b3:d5:6f:27:50:c1:2b:
f4:47:e3:2f:6c:18:70:fa:89:a7:18:4c:59:d8:e5:
52:39:67:76:0f:e7:cd:c1:70:02:7f:f1:2b:69:09:
c2:87:6b:44:15:45:ea:24:b5:83:e0:09:89:2e:38:
d2:27:f7:4a:f5:25:96:f5:d3:ca:6a:d8:c0:61:81:
d4:dd:23:10:59:6a:35:5b:85:ce:64:d5:63:ab:6a:
bb:fd:86:24:db:5e:0c:df:5c:55:43:c6:79:65:db:
7f:74:ae:8e:20:c9:5f:98:07:a8:61:16:ec:f8:d9:
83:da:63:4b:5d:6b:6f:f8:f2:9f:03:cc:0a:a8:44:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8D:1C:C4:BA:28:3E:BA:80:2F:2A:16:47:83:A8:22:AA:F4:33:6B
X509v3 Authority Key Identifier:
keyid:A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7c:d6:57:da:b7:d1:07:92:a3:a5:9a:a4:55:8b:ec:0b:4a:
15:bb:92:7b:43:2f:2a:ea:dc:f2:02:60:70:51:b9:5d:72:57:
95:fc:9e:a4:df:ad:a9:a4:a2:51:a0:f9:bc:10:c9:56:3f:f3:
2c:f1:aa:c4:a4:c7:32:eb:cb:37:35:ab:c7:27:8e:74:24:e8:
68:6b:ea:82:6b:c2:a9:99:16:20:e0:ee:4d:28:00:a1:6c:ab:
28:dc:31:90:86:b7:b9:ef:d1:be:b2:b1:70:71:0f:76:4d:5a:
6d:83:fe:a0:e6:82:47:8e:52:b4:fe:1c:3b:96:d4:9c:21:4d:
7e:d5:b7:46:67:67:a2:5b:54:55:c7:27:9c:92:73:08:e7:3c:
e4:70:0a:bb:65:23:41:20:20:b5:02:8f:b2:77:1e:05:6f:6e:
26:12:d9:6a:d3:aa:04:d0:cd:09:f5:19:fe:cb:93:f7:e5:1b:
32:6e:a1:ec:43:28:b5:3d:57:18:cf:ba:ec:89:cf:32:ad:f8:
18:cf:e0:aa:bf:e2:c8:d3:53:fa:34:6e:87:fa:5f:51:b1:7b:
f5:d5:c6:8f:a7:40:6f:41:5e:68:15:2e:6f:a2:76:ed:9e:d7:
46:cc:77:c3:cc:2e:69:6a:0e:c9:f2:1b:eb:c4:90:a0:d8:97:
a4:b4:20:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qf4bv56mWpPO3YsJ7VSYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YjI2NTRlNDMyYjc0ZGM4ZGE2NmQ4MTZiMjYwY2ZmYzgx
NzMxNzUwHhcNMjUwMTMxMTQwMDQ0WhcNMjUwMjAxMTQwMDQ0WjAzMTEwLwYDVQQD
Eyg1NzhkMWNjNGJhMjgzZWJhODAyZjJhMTY0NzgzYTgyMmFhZjQzMzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid1yYmhGtvKV62A2egugx5Is0nQE
WBRCyNSKIiN5dsE9H0S5b7Ie/De6FEPPb9ZtYrD/ardSoiSgocPNKh8x/5HDyLGM
jidtQvMKEsDkk7uzgpu0J1OyCOQHZ1W6OekOCI09ujF0Cc9LRB9rgeOH0WxTVrAY
6vkCQsBfTYAs57PVbydQwSv0R+MvbBhw+omnGExZ2OVSOWd2D+fNwXACf/EraQnC
h2tEFUXqJLWD4AmJLjjSJ/dK9SWW9dPKatjAYYHU3SMQWWo1W4XOZNVjq2q7/YYk
214M31xVQ8Z5Zdt/dK6OIMlfmAeoYRbs+NmD2mNLXWtv+PKfA8wKqERFkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeNHMS6KD66gC8qFkeDqCKq9DNrMB8GA1UdIwQY
MBaAFKWyZU5DK3TcjaZtgWsmDP/IFzF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGJKbFRrTXJkTnlOcG0yQmF5WU1fOGdYTVhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iNjk4MTEtY2YzZi00OWJjLTgyYWUt
ZTU1ZjlmOTE2OWRiLzEvcGJKbFRrTXJkTnlOcG0yQmF5WU1fOGdYTVhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9iNjk4MTEtY2YzZi00OWJjLTgyYWUtZTU1ZjlmOTE2OWRi
LzEvcGJKbFRrTXJkTnlOcG0yQmF5WU1fOGdYTVhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnzWV9q3
0QeSo6WapFWL7AtKFbuSe0MvKurc8gJgcFG5XXJXlfyepN+tqaSiUaD5vBDJVj/z
LPGqxKTHMuvLNzWrxyeOdCToaGvqgmvCqZkWIODuTSgAoWyrKNwxkIa3ue/RvrKx
cHEPdk1abYP+oOaCR45StP4cO5bUnCFNftW3RmdnoltUVccnnJJzCOc85HAKu2Uj
QSAgtQKPsnceBW9uJhLZatOqBNDNCfUZ/suT9+UbMm6h7EMotT1XGM+67InPMq34
GM/gqr/iyNNT+jRuh/pfUbF79dXGj6dAb0FeaBUub6J27Z7XRsx3w8wuaWoOyfIb
68SQoNiXpLQgxA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:41 2025 by rpki-client