Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
File: P6xpra8ADdd6SwAYd8JYoh0f9qA.mft (raw, json)
Hash identifier: nGFiPyHEsOA1XYKgMK1RhdslBYnX/38hWCcIM8fqNnM=
Subject key identifier: 72:CE:12:20:01:69:18:0A:7E:8D:E3:5F:F5:91:CA:49:93:72:75:B7
Authority key identifier: 3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0
Certificate issuer: /CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0
Certificate serial: 0194BC3C0E26655D8607FEB21F7EF3DA688A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
Manifest number: 0D27
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: P6xpra8ADdd6SwAYd8JYoh0f9qA.crl (hash: YKMoENh3ex2BawybTYHizxWieXIZEwutfcKc26XUlnk=)
2: pGti5NOwKPTLx4Ly3hXPkfnIdHY.roa (hash: hGj1ei60T0pZizrlmStFTjFUv40NzLgMUG+0J0UuEdw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0e:26:65:5d:86:07:fe:b2:1f:7e:f3:da:68:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=72ce12200169180a7e8de35ff591ca49937275b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:a2:a3:de:4a:0c:ab:24:ff:09:84:fe:a5:
48:4c:67:3a:fb:93:e0:e8:8c:db:41:4e:bd:1b:d4:
11:0f:bd:0c:3c:6d:1d:21:07:d0:bb:b6:20:7f:59:
4f:fb:23:44:b6:9d:e5:53:3f:0a:74:b2:f6:19:58:
72:90:a1:ee:10:f0:10:99:12:c3:ed:f1:2a:1f:06:
1e:a6:53:95:90:49:17:66:9f:91:35:57:94:d3:a1:
26:29:5a:01:2b:24:89:d0:72:74:7f:ac:79:70:68:
05:0d:f4:00:8e:9d:ae:6b:a2:0e:16:fe:81:ec:bc:
35:6f:6b:71:88:99:31:29:fe:cd:91:b4:18:17:eb:
46:bf:59:c1:e9:f5:ed:c4:76:c6:66:15:ed:a6:5a:
3c:b3:1b:61:79:75:c8:58:70:28:f5:41:a2:e9:b0:
b4:00:0f:95:05:8f:01:6a:cb:82:d9:c1:08:f3:29:
74:0a:dc:27:16:10:5e:67:a6:9a:ff:fe:d1:b8:4c:
10:82:b3:76:47:2e:a8:ab:4b:9f:d0:fb:c4:e3:f5:
8e:c7:f1:db:66:12:02:5e:93:46:20:4a:f0:46:3a:
3b:d1:56:99:27:44:62:4b:11:2b:5d:f5:38:ac:92:
09:b0:00:4d:ba:bb:ed:3b:77:12:f3:d7:3f:7e:19:
73:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CE:12:20:01:69:18:0A:7E:8D:E3:5F:F5:91:CA:49:93:72:75:B7
X509v3 Authority Key Identifier:
keyid:3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:74:a4:be:52:d5:0b:d6:48:82:aa:da:1a:ba:2a:93:68:c0:
fc:6d:de:4c:7e:67:fa:4b:a5:a4:28:18:3a:e1:ab:5b:06:e8:
08:9c:43:04:57:0e:f9:30:de:c4:1c:a0:d2:bf:af:4c:c5:4f:
cd:3f:b0:69:a1:99:24:fe:b1:8e:d2:1c:a8:7e:88:89:77:ee:
03:29:cf:b9:ec:1d:e5:2c:30:4d:ce:d6:df:ec:3c:ca:6b:fb:
58:c3:c4:4b:f3:6b:cd:ce:94:79:83:a8:c6:16:68:5e:51:28:
0d:40:a7:bd:b4:b6:39:86:a5:0b:aa:6e:2a:d2:45:54:ab:49:
d6:8f:40:77:74:ba:eb:a4:2c:92:05:03:67:aa:f2:d4:c9:08:
c6:fb:85:b4:30:e1:12:d4:89:24:df:bc:ac:28:9a:52:74:35:
70:d9:cb:e0:54:df:41:60:3a:25:2d:55:1d:a8:c7:12:b0:14:
58:29:36:98:c1:4e:38:da:1e:d2:82:ed:12:da:34:52:dd:c1:
c8:1b:34:dc:52:41:bc:4c:d5:b6:3b:35:fd:5b:b9:7a:d2:44:
11:0a:e0:b3:92:9d:1c:65:55:4d:78:aa:dc:6f:74:61:e3:e7:
76:6e:28:21:af:9e:fe:5f:6c:e4:9c:2c:06:eb:a8:f5:96:47:
1f:a8:14:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PA4mZV2GB/6yH37z2miKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYWM2OWFkYWYwMDBkZDc3YTRiMDAxODc3YzI1OGEyMWQx
ZmY2YTAwHhcNMjUwMTMxMTIwMDM5WhcNMjUwMjAxMTIwMDM5WjAzMTEwLwYDVQQD
Eyg3MmNlMTIyMDAxNjkxODBhN2U4ZGUzNWZmNTkxY2E0OTkzNzI3NWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAiio95KDKsk/wmE/qVITGc6+5Pg
6IzbQU69G9QRD70MPG0dIQfQu7Ygf1lP+yNEtp3lUz8KdLL2GVhykKHuEPAQmRLD
7fEqHwYeplOVkEkXZp+RNVeU06EmKVoBKySJ0HJ0f6x5cGgFDfQAjp2ua6IOFv6B
7Lw1b2txiJkxKf7NkbQYF+tGv1nB6fXtxHbGZhXtplo8sxtheXXIWHAo9UGi6bC0
AA+VBY8BasuC2cEI8yl0CtwnFhBeZ6aa//7RuEwQgrN2Ry6oq0uf0PvE4/WOx/Hb
ZhICXpNGIErwRjo70VaZJ0RiSxErXfU4rJIJsABNurvtO3cS89c/fhlzpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLOEiABaRgKfo3jX/WRykmTcnW3MB8GA1UdIwQY
MBaAFD+saa2vAA3XeksAGHfCWKIdH/agMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZ4cHJhOEFEZGQ2U3dBWWQ4SllvaDBmOXFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kNTAzZmQtOWQ0Yi00NTYzLTljZGYt
YjZlMGYzZTk1Y2FkLzEvUDZ4cHJhOEFEZGQ2U3dBWWQ4SllvaDBmOXFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kNTAzZmQtOWQ0Yi00NTYzLTljZGYtYjZlMGYzZTk1Y2Fk
LzEvUDZ4cHJhOEFEZGQ2U3dBWWQ4SllvaDBmOXFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHSkvlLV
C9ZIgqraGroqk2jA/G3eTH5n+kulpCgYOuGrWwboCJxDBFcO+TDexByg0r+vTMVP
zT+waaGZJP6xjtIcqH6IiXfuAynPuewd5SwwTc7W3+w8ymv7WMPES/Nrzc6UeYOo
xhZoXlEoDUCnvbS2OYalC6puKtJFVKtJ1o9Ad3S666QskgUDZ6ry1MkIxvuFtDDh
EtSJJN+8rCiaUnQ1cNnL4FTfQWA6JS1VHajHErAUWCk2mMFOONoe0oLtEto0Ut3B
yBs03FJBvEzVtjs1/Vu5etJEEQrgs5KdHGVVTXiq3G90YePndm4oIa+e/l9s5Jws
Buuo9ZZHH6gUzA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:41 2025 by rpki-client