Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
File: pMK1k9mMCS_TCmAepdJEqr08sU0.mft (raw, json)
Hash identifier: rSIXr8id10l/Zj8yoG3LzFVKxHX4mowpxTKgqoqfARg=
Subject key identifier: 98:67:F7:D5:E6:C3:30:19:9E:33:6C:74:A2:98:EE:A1:77:95:99:91
Authority key identifier: A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
Certificate issuer: /CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Certificate serial: 0194BC72BDC0E0853BE3BE6E366E1434A8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: U7nNEW5XGU3Qw3Z5TlXa8n1A0Xo.roa (hash: El8KNdvpLmelwHnPspzpd+ZkXP2SnewzZSQOjMbCymQ=)
2: pMK1k9mMCS_TCmAepdJEqr08sU0.crl (hash: ux+QI/nvRb/hqCk+9VTUyYIburBDBjA/JQWX2tTmxuE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bd:c0:e0:85:3b:e3:be:6e:36:6e:14:34:a8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=9867f7d5e6c330199e336c74a298eea177959991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:ce:aa:64:3a:b8:d3:2e:ab:83:4b:c4:b2:
cf:81:17:e9:65:5c:49:d3:d7:a2:80:6f:10:b3:40:
a0:13:dc:c4:8d:10:9f:0e:da:9b:5e:99:d9:db:20:
49:f4:49:59:fb:9a:87:72:7a:df:70:e4:1c:fc:8b:
d8:a9:ea:2c:2f:1d:22:1b:c8:fb:fe:41:60:f3:59:
13:4b:2b:12:1e:74:0a:42:d7:9c:43:81:d6:e3:0c:
e5:31:94:ed:a2:ad:3e:b1:16:28:2f:13:1c:01:a5:
91:a6:c1:28:73:f9:97:4a:99:16:e2:e2:39:e1:94:
11:83:23:02:40:e7:cc:d2:bc:ab:01:db:85:9b:47:
38:ca:7a:6f:40:a1:b0:82:ba:db:20:bb:8e:da:e8:
96:7f:b0:30:bc:53:6d:dd:8e:4c:85:fc:74:82:91:
0a:58:b7:d1:83:9e:49:50:0d:6d:cf:61:4a:78:c4:
fa:5a:1e:71:9f:94:99:1a:00:41:0a:6d:1e:98:df:
ad:95:f0:ba:48:d9:3f:cf:a9:7b:e7:5c:3c:ed:a0:
bd:e3:0e:a5:60:54:ec:8e:39:c3:d8:94:aa:7d:87:
97:c8:cb:fd:35:38:39:cd:dc:9f:6b:19:65:1c:a2:
7e:63:8c:c1:48:8e:1d:90:7f:0e:d4:9f:12:79:5f:
f7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:67:F7:D5:E6:C3:30:19:9E:33:6C:74:A2:98:EE:A1:77:95:99:91
X509v3 Authority Key Identifier:
keyid:A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3a:50:66:7f:fa:19:5c:41:b4:44:25:3d:ae:28:b0:97:db:
96:30:19:26:8c:e2:69:af:66:7c:4b:10:a8:6e:aa:d3:84:2d:
5b:66:0d:ee:c1:9f:18:80:d9:f1:6a:c7:6e:82:9c:b7:6b:68:
07:09:4c:9c:38:be:59:3a:bd:07:47:24:5d:d8:a5:d4:98:fb:
3b:4c:dd:2b:85:11:e6:a2:18:dc:c9:86:d4:5f:1e:98:76:55:
6e:d0:4b:6b:46:b6:d4:d8:f3:ff:72:54:50:05:3b:d2:78:78:
8a:32:d7:fc:1c:f1:00:bc:c9:46:6d:5d:01:b5:6a:55:dd:73:
c4:81:52:a4:08:56:65:c2:44:4f:2e:65:f1:cc:d8:91:f7:2a:
ec:08:c5:a3:31:de:e9:6b:95:d7:9b:06:41:a3:05:16:a8:37:
54:0b:20:d0:58:30:bc:37:6f:57:22:75:db:73:2e:05:e8:0c:
52:04:7b:df:f0:d8:bb:d6:ac:d4:ec:e6:cf:45:e2:13:cb:c0:
14:31:d4:b4:b8:69:4f:8f:3f:31:2e:e0:41:fd:3b:1b:57:8e:
60:bc:af:a0:6c:2d:89:1e:dd:7b:41:10:cb:b6:7d:03:0d:db:
46:50:41:94:08:2a:12:87:66:73:6d:db:00:c6:45:d4:c1:8e:
cb:ef:11:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cr3A4IU7475uNm4UNKjYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YzJiNTkzZDk4YzA5MmZkMzBhNjAxZWE1ZDI0NGFhYmQz
Y2IxNGQwHhcNMjUwMTMxMTMwMDIzWhcNMjUwMjAxMTMwMDIzWjAzMTEwLwYDVQQD
Eyg5ODY3ZjdkNWU2YzMzMDE5OWUzMzZjNzRhMjk4ZWVhMTc3OTU5OTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/vOqmQ6uNMuq4NLxLLPgRfpZVxJ
09eigG8Qs0CgE9zEjRCfDtqbXpnZ2yBJ9ElZ+5qHcnrfcOQc/IvYqeosLx0iG8j7
/kFg81kTSysSHnQKQtecQ4HW4wzlMZTtoq0+sRYoLxMcAaWRpsEoc/mXSpkW4uI5
4ZQRgyMCQOfM0ryrAduFm0c4ynpvQKGwgrrbILuO2uiWf7AwvFNt3Y5Mhfx0gpEK
WLfRg55JUA1tz2FKeMT6Wh5xn5SZGgBBCm0emN+tlfC6SNk/z6l751w87aC94w6l
YFTsjjnD2JSqfYeXyMv9NTg5zdyfaxllHKJ+Y4zBSI4dkH8O1J8SeV/3BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhn99XmwzAZnjNsdKKY7qF3lZmRMB8GA1UdIwQY
MBaAFKTCtZPZjAkv0wpgHqXSRKq9PLFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE1LMWs5bU1DU19UQ21BZXBkSkVxcjA4c1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85NDIyYjAtZGM3OS00YzcxLWJmZDgt
ZmNmOTk0NzBiOTg1LzEvcE1LMWs5bU1DU19UQ21BZXBkSkVxcjA4c1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85NDIyYjAtZGM3OS00YzcxLWJmZDgtZmNmOTk0NzBiOTg1
LzEvcE1LMWs5bU1DU19UQ21BZXBkSkVxcjA4c1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzpQZn/6
GVxBtEQlPa4osJfbljAZJoziaa9mfEsQqG6q04QtW2YN7sGfGIDZ8WrHboKct2to
BwlMnDi+WTq9B0ckXdil1Jj7O0zdK4UR5qIY3MmG1F8emHZVbtBLa0a21Njz/3JU
UAU70nh4ijLX/BzxALzJRm1dAbVqVd1zxIFSpAhWZcJETy5l8czYkfcq7AjFozHe
6WuV15sGQaMFFqg3VAsg0FgwvDdvVyJ123MuBegMUgR73/DYu9as1Ozmz0XiE8vA
FDHUtLhpT48/MS7gQf07G1eOYLyvoGwtiR7de0EQy7Z9Aw3bRlBBlAgqEodmc23b
AMZF1MGOy+8Rfg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:10 2025 by rpki-client