Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
File: PseNgibLWq_xXGdSWvK4q8t7X5I.mft (raw, json)
Hash identifier: wxMpfpW8+M49X4tDrq3r3Bwvgf/KK7mZ4nkiRGUaEJI=
Subject key identifier: 79:77:8A:1E:1C:0A:AB:7D:15:69:32:A1:07:2E:2A:C9:D4:F5:27:EC
Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
Certificate issuer: /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Certificate serial: 0194BBCE2C93F8C13D8F69C2BE88ADA2A6E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: PseNgibLWq_xXGdSWvK4q8t7X5I.crl (hash: VCXHC26AfCgsTFvyICImMxa3z8CzKuZo2QJnER1WLlQ=)
2: RGavrFD9QlH9mvEK00LE9vM0Ylo.roa (hash: in3DOj7fuK/tRP2Np73D85wEHXvdsqUOTjKtL4z+mG4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2c:93:f8:c1:3d:8f:69:c2:be:88:ad:a2:a6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=79778a1e1c0aab7d156932a1072e2ac9d4f527ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:1f:ac:54:29:62:0f:93:0f:14:b4:a9:cd:
13:b1:dd:bb:20:76:5f:a9:4d:e2:5e:d8:5a:96:4a:
6e:b6:f2:53:b7:30:78:47:e6:50:50:42:24:49:e0:
a8:b8:a6:c5:c3:98:7b:6d:d3:58:e1:5c:2b:e5:ad:
4f:17:fb:3e:94:a7:b6:9f:86:d9:88:fd:70:4f:77:
7e:93:1d:bb:f3:39:97:f8:68:0e:71:6c:ad:9d:ed:
31:3b:d9:8f:77:9d:6f:1f:f0:4f:ba:d6:4a:50:ac:
8e:f5:15:94:6c:32:3f:d3:2f:f5:b4:8b:aa:2f:09:
bd:0e:7a:c1:61:a1:c3:4a:5b:1b:0f:f5:9a:e5:54:
3e:bf:de:b3:26:eb:7b:2a:50:ff:eb:04:dc:d4:be:
de:d1:ea:9a:5a:c8:12:d8:7c:6e:62:4f:ba:74:96:
c9:f8:de:6f:94:d5:5d:39:b3:9b:68:2a:4b:ba:74:
4e:ef:50:c5:df:32:af:e9:6b:05:ea:99:89:b9:92:
b9:c5:e4:2a:b9:6b:1e:99:19:5e:ce:55:75:76:fe:
e9:73:cc:98:20:6e:61:62:7a:21:21:96:41:99:2e:
7e:a3:27:a6:83:d0:0d:06:98:43:27:e3:a2:62:fd:
ba:a3:0d:4e:c7:46:f1:c2:18:af:6e:95:7e:83:69:
1a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:77:8A:1E:1C:0A:AB:7D:15:69:32:A1:07:2E:2A:C9:D4:F5:27:EC
X509v3 Authority Key Identifier:
keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ee:bf:44:dd:d9:ba:97:4a:51:9f:8c:a0:00:75:a1:7b:d8:
a8:be:db:d2:96:54:e3:8c:4f:57:1d:bb:24:6a:38:6d:7a:b4:
b1:25:51:94:53:de:cc:4b:c4:51:62:b2:2a:38:97:83:51:91:
19:99:6f:52:e0:98:1e:59:9a:12:a9:ae:49:ff:59:e9:99:31:
c3:88:46:ee:83:d9:45:c1:b4:d9:7c:bd:b6:5c:68:d3:79:c5:
b9:bc:9e:81:58:1b:ad:02:e7:18:fb:88:22:af:7e:0d:ed:c4:
54:c4:03:24:33:b4:90:31:2f:cf:bb:fe:c8:9a:e9:0d:2e:9d:
a8:e4:5f:18:74:17:5d:1b:8a:8a:25:b5:14:57:de:5b:dd:3f:
33:78:d8:5e:58:60:85:f3:29:8b:6f:2c:3f:5c:38:4f:54:08:
c9:74:85:2d:56:c8:d0:89:3c:3f:39:61:56:52:9b:cc:7a:f3:
b9:b6:c9:02:a4:f6:f7:4a:4f:e3:70:bf:4e:98:22:15:c8:28:
f3:76:bd:40:3f:8f:a5:50:fc:43:85:48:ff:d4:23:02:31:4a:
66:7d:57:a0:a2:1b:00:71:ba:28:e9:50:91:95:86:68:18:72:
6d:0f:f2:ae:74:18:bd:84:1b:db:4a:0f:5f:85:ec:dc:c6:17:
4b:ac:27:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ziyT+ME9j2nCvoitoqbmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzc4ZDgyMjZjYjVhYWZmMTVjNjc1MjVhZjJiOGFiY2I3
YjVmOTIwHhcNMjUwMTMxMTAwMDM4WhcNMjUwMjAxMTAwMDM4WjAzMTEwLwYDVQQD
Eyg3OTc3OGExZTFjMGFhYjdkMTU2OTMyYTEwNzJlMmFjOWQ0ZjUyN2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIMfrFQpYg+TDxS0qc0Tsd27IHZf
qU3iXthalkputvJTtzB4R+ZQUEIkSeCouKbFw5h7bdNY4Vwr5a1PF/s+lKe2n4bZ
iP1wT3d+kx278zmX+GgOcWytne0xO9mPd51vH/BPutZKUKyO9RWUbDI/0y/1tIuq
Lwm9DnrBYaHDSlsbD/Wa5VQ+v96zJut7KlD/6wTc1L7e0eqaWsgS2HxuYk+6dJbJ
+N5vlNVdObObaCpLunRO71DF3zKv6WsF6pmJuZK5xeQquWsemRlezlV1dv7pc8yY
IG5hYnohIZZBmS5+oyemg9ANBphDJ+OiYv26ow1Ox0bxwhivbpV+g2ka5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHl3ih4cCqt9FWkyoQcuKsnU9SfsMB8GA1UdIwQY
MBaAFD7HjYImy1qv8VxnUlryuKvLe1+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNlTmdpYkxXcV94WEdkU1d2SzRxOHQ3WDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kYjM3NDEtNDM0ZC00YjVhLTg5MGIt
MjA1OGM3MDM2N2FhLzEvUHNlTmdpYkxXcV94WEdkU1d2SzRxOHQ3WDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kYjM3NDEtNDM0ZC00YjVhLTg5MGItMjA1OGM3MDM2N2Fh
LzEvUHNlTmdpYkxXcV94WEdkU1d2SzRxOHQ3WDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEO6/RN3Z
updKUZ+MoAB1oXvYqL7b0pZU44xPVx27JGo4bXq0sSVRlFPezEvEUWKyKjiXg1GR
GZlvUuCYHlmaEqmuSf9Z6Zkxw4hG7oPZRcG02Xy9tlxo03nFubyegVgbrQLnGPuI
Iq9+De3EVMQDJDO0kDEvz7v+yJrpDS6dqORfGHQXXRuKiiW1FFfeW90/M3jYXlhg
hfMpi28sP1w4T1QIyXSFLVbI0Ik8PzlhVlKbzHrzubbJAqT290pP43C/TpgiFcgo
83a9QD+PpVD8Q4VI/9QjAjFKZn1XoKIbAHG6KOlQkZWGaBhybQ/yrnQYvYQb20oP
X4Xs3MYXS6wneQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:31 2025 by rpki-client