Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
File: PEHqRBeKcCxQcAACPRSp-cRyYOY.mft (raw, json)
Hash identifier: gKksua2Go/qadLeq9qBP88sx6c7oyiSgU2ZTtgnMlDk=
Subject key identifier: F4:61:99:42:D5:E7:3C:9B:9B:56:F1:93:1F:EC:22:BB:6E:06:74:7E
Authority key identifier: 3C:41:EA:44:17:8A:70:2C:50:70:00:02:3D:14:A9:F9:C4:72:60:E6
Certificate issuer: /CN=3c41ea44178a702c507000023d14a9f9c47260e6
Certificate serial: 0194BBCDD90DB1BF1D91DA7FED6516371833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEHqRBeKcCxQcAACPRSp-cRyYOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
Manifest number: 0E2E
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: PEHqRBeKcCxQcAACPRSp-cRyYOY.crl (hash: LdO2EQpOTkWkrQ5H1+HyZDWg0nK0FFjccWkMKakhlkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d9:0d:b1:bf:1d:91:da:7f:ed:65:16:37:18:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c41ea44178a702c507000023d14a9f9c47260e6
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=f4619942d5e73c9b9b56f1931fec22bb6e06747e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d3:a4:f9:e6:0a:5e:fa:89:c6:3a:12:6a:2a:
9e:f2:20:d0:ba:6e:72:a1:ce:46:fc:dd:d5:82:c2:
38:f3:9f:5b:5c:7e:7e:43:e2:a4:98:2d:cf:b9:02:
a6:8a:2e:2c:36:f2:32:6a:1e:79:cd:38:57:e5:92:
18:28:ea:a0:d9:e3:4b:32:df:e8:f2:dd:bf:dd:0c:
63:0d:e6:c2:ca:bc:f1:69:0b:23:dc:43:a6:95:de:
0a:bb:f3:5b:5b:c4:10:d9:91:e5:d8:81:70:e5:f7:
ce:76:d9:e0:47:88:f2:e9:52:34:af:e1:a1:59:67:
fa:17:fc:1a:01:08:6f:5f:fb:6d:2c:8f:94:ea:f5:
73:1f:3d:eb:9c:33:70:e1:84:d2:66:27:fc:b9:ab:
3a:f1:0c:f2:f0:d5:77:30:47:aa:79:9b:f7:8f:8a:
0a:61:e5:c2:50:bc:83:51:88:72:8c:ac:14:0b:ae:
58:b9:bf:3b:11:0d:81:51:3e:c5:0b:e9:9e:c6:4b:
c3:76:00:ab:82:b8:ba:b1:bd:c7:b3:bf:59:5f:57:
64:41:0f:e0:40:6c:f6:71:66:fd:8d:45:4f:3a:cd:
a2:3c:26:74:52:33:8f:b5:f0:b3:29:c0:d3:a4:b3:
16:47:09:08:a6:ad:94:fa:22:eb:b5:68:8e:fb:19:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:61:99:42:D5:E7:3C:9B:9B:56:F1:93:1F:EC:22:BB:6E:06:74:7E
X509v3 Authority Key Identifier:
keyid:3C:41:EA:44:17:8A:70:2C:50:70:00:02:3D:14:A9:F9:C4:72:60:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEHqRBeKcCxQcAACPRSp-cRyYOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ce:ea:ee:bb:55:6c:73:37:ea:68:90:d6:ef:a8:85:f1:76:
0d:1a:e7:3f:cb:d0:83:e2:59:9a:46:d0:f8:a4:ea:dc:cd:dd:
00:03:d9:b0:7f:5d:c3:22:08:3b:50:40:9e:ed:91:1c:4d:16:
36:8c:9e:f4:75:8e:3b:cc:43:9c:81:89:a6:5d:44:9f:c9:3d:
85:00:73:fe:93:e6:03:4f:7f:1e:12:24:b2:d9:b4:dc:81:2f:
34:21:10:70:28:8a:83:c8:a5:43:d1:6b:4f:10:74:1b:f2:9f:
4e:dd:09:4c:b7:70:4c:d7:f7:38:61:c8:3b:77:16:8d:14:db:
28:e9:e9:75:fb:d8:2b:d3:5a:71:96:a8:3c:b9:fc:88:9a:8a:
d6:d7:0a:9a:e9:7e:23:9c:07:d4:77:d1:8b:34:bd:8a:c8:67:
fd:ca:a0:69:57:d5:df:53:0f:f3:cd:e4:08:86:16:45:ec:82:
4f:e0:95:c4:b0:8c:1d:1b:87:1d:51:68:ad:70:6c:51:3f:17:
46:0e:2a:98:3d:ba:e6:56:cc:f0:6f:bb:13:bd:9e:ca:4d:31:
48:30:0a:ca:22:b1:03:54:c6:d9:68:3f:bf:a5:71:ba:67:fe:
f3:72:70:a4:c3:ec:05:58:15:58:e7:32:fa:f9:1d:f8:34:a6:
47:57:f7:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdkNsb8dkdp/7WUWNxgzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNDFlYTQ0MTc4YTcwMmM1MDcwMDAwMjNkMTRhOWY5YzQ3
MjYwZTYwHhcNMjUwMTMxMTAwMDE3WhcNMjUwMjAxMTAwMDE3WjAzMTEwLwYDVQQD
EyhmNDYxOTk0MmQ1ZTczYzliOWI1NmYxOTMxZmVjMjJiYjZlMDY3NDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdOk+eYKXvqJxjoSaiqe8iDQum5y
oc5G/N3VgsI4859bXH5+Q+KkmC3PuQKmii4sNvIyah55zThX5ZIYKOqg2eNLMt/o
8t2/3QxjDebCyrzxaQsj3EOmld4Ku/NbW8QQ2ZHl2IFw5ffOdtngR4jy6VI0r+Gh
WWf6F/waAQhvX/ttLI+U6vVzHz3rnDNw4YTSZif8uas68Qzy8NV3MEeqeZv3j4oK
YeXCULyDUYhyjKwUC65Yub87EQ2BUT7FC+mexkvDdgCrgri6sb3Hs79ZX1dkQQ/g
QGz2cWb9jUVPOs2iPCZ0UjOPtfCzKcDTpLMWRwkIpq2U+iLrtWiO+xnv0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRhmULV5zybm1bxkx/sIrtuBnR+MB8GA1UdIwQY
MBaAFDxB6kQXinAsUHAAAj0UqfnEcmDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEVIcVJCZUtjQ3hRY0FBQ1BSU3AtY1J5WU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xNDQ5NDEtMTM1NC00ODY5LWFhYzIt
NzQ3MjUxZTQ5MjQyLzEvUEVIcVJCZUtjQ3hRY0FBQ1BSU3AtY1J5WU9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xNDQ5NDEtMTM1NC00ODY5LWFhYzItNzQ3MjUxZTQ5MjQy
LzEvUEVIcVJCZUtjQ3hRY0FBQ1BSU3AtY1J5WU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYc7q7rtV
bHM36miQ1u+ohfF2DRrnP8vQg+JZmkbQ+KTq3M3dAAPZsH9dwyIIO1BAnu2RHE0W
Noye9HWOO8xDnIGJpl1En8k9hQBz/pPmA09/HhIkstm03IEvNCEQcCiKg8ilQ9Fr
TxB0G/KfTt0JTLdwTNf3OGHIO3cWjRTbKOnpdfvYK9NacZaoPLn8iJqK1tcKmul+
I5wH1HfRizS9ishn/cqgaVfV31MP883kCIYWReyCT+CVxLCMHRuHHVForXBsUT8X
Rg4qmD265lbM8G+7E72eyk0xSDAKyiKxA1TG2Wg/v6Vxumf+83JwpMPsBVgVWOcy
+vkd+DSmR1f3EQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:11:06 2025 by rpki-client