Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: BxKm/9l9XHhJZYT3YFYeNxxL10hrAXXpZ/a6DYwbfas=
Subject key identifier: 55:45:46:BD:41:86:C6:8A:E2:00:0B:97:72:E9:D4:C3:85:BA:0A:B9
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 0194BCE0E76CB7AE8355A0B8A190A74CB705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 06E1
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: ixfgvNO95wkzJhzFrKMZYW4I+owY7JcaFSRKE8P7vdg=)
2: tNlE-RsS8yP8q3aEd77vtdKV4ao.roa (hash: 0s1wr6faxjcsfPekqZ/FFwhO5dh5LLtuhFGeIZLAT0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e7:6c:b7:ae:83:55:a0:b8:a1:90:a7:4c:b7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=554546bd4186c68ae2000b9772e9d4c385ba0ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:35:c4:02:76:8f:56:08:ea:50:69:77:a8:70:
05:4d:28:16:eb:72:bf:ef:24:f3:29:f6:83:7f:82:
5e:bb:e1:1c:87:f8:90:87:c3:00:77:db:a2:93:30:
06:e0:bd:be:80:a0:86:06:89:e6:23:51:87:a6:ce:
b6:67:d9:c9:25:43:6e:fb:30:e6:d5:3f:aa:90:24:
94:63:9a:36:47:f1:56:13:76:7e:ae:a7:75:dd:ef:
d4:d5:a7:eb:e4:bb:e8:b9:90:74:3e:53:47:6d:0b:
a3:04:5e:8d:c9:5d:a5:6e:69:0f:b3:4e:97:a0:42:
8b:90:d8:3b:ae:44:ad:83:81:9f:68:48:e9:58:f9:
c8:d7:b1:20:55:63:92:bd:68:bd:d9:da:84:07:8e:
83:d1:5d:d6:16:d7:34:c3:95:87:44:09:29:b0:3b:
b1:61:9c:d3:eb:2d:4a:34:21:c5:05:e5:fc:b9:85:
41:f5:b9:68:c0:df:0a:bb:2f:2e:9c:bd:5a:90:ad:
b1:1d:f8:7d:50:59:8f:66:4c:54:08:d9:bf:51:0b:
ef:c9:25:50:22:10:70:fe:2e:5b:fb:cd:aa:9d:9b:
1e:fb:c0:2b:eb:df:15:a6:9a:dd:6d:e9:1d:71:ad:
2c:04:04:e9:de:12:34:c9:59:ef:69:5b:38:05:0f:
29:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:45:46:BD:41:86:C6:8A:E2:00:0B:97:72:E9:D4:C3:85:BA:0A:B9
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0e:2c:c7:9d:39:8c:db:0c:7c:c1:39:7d:6e:55:47:4e:7d:
17:96:8c:cd:e7:12:eb:9e:04:d7:c0:42:a8:a7:91:ec:96:c8:
ce:b6:8b:78:16:00:80:e5:d5:d6:ba:01:ac:2e:32:3f:90:4a:
54:64:da:1b:5d:be:ad:69:37:c5:39:50:79:59:83:9a:2b:d9:
0c:88:6c:be:00:10:f5:86:a1:69:b0:52:af:41:d1:f3:65:e7:
11:7f:cf:0f:eb:d9:84:cd:3b:b0:fb:5c:0a:70:c0:45:7e:21:
4c:d7:1c:ea:7a:32:66:0d:14:6a:51:b4:74:de:ac:4d:13:68:
00:7b:1f:fe:ee:75:e4:85:5c:4d:34:ad:41:78:ee:63:44:08:
f7:b3:7c:a8:77:23:1b:8e:34:15:38:c0:57:4b:c1:e8:48:ea:
98:b0:32:b5:dd:16:ab:57:4c:cc:90:24:c0:c7:f0:9a:a8:10:
ec:89:ec:c9:6f:1b:78:31:36:5d:48:39:f0:83:5e:ac:cb:b9:
72:65:ec:5a:8e:74:ec:48:6e:f8:66:13:6f:3c:07:29:7d:68:
1e:90:ce:99:ba:d0:17:04:9e:b4:2f:5a:82:8c:f7:d3:17:9d:
01:d6:65:00:82:4e:49:74:72:c8:5e:78:ea:18:ad:88:5a:fa:
b9:14:90:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Odst66DVaC4oZCnTLcFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMGNjZDI1MDQ3YjljYjhiNmYwMTg2N2NkZWRlODI1NmY3
MzRhMjMwHhcNMjUwMTMxMTUwMDQzWhcNMjUwMjAxMTUwMDQzWjAzMTEwLwYDVQQD
Eyg1NTQ1NDZiZDQxODZjNjhhZTIwMDBiOTc3MmU5ZDRjMzg1YmEwYWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTXEAnaPVgjqUGl3qHAFTSgW63K/
7yTzKfaDf4Jeu+Ech/iQh8MAd9uikzAG4L2+gKCGBonmI1GHps62Z9nJJUNu+zDm
1T+qkCSUY5o2R/FWE3Z+rqd13e/U1afr5LvouZB0PlNHbQujBF6NyV2lbmkPs06X
oEKLkNg7rkStg4GfaEjpWPnI17EgVWOSvWi92dqEB46D0V3WFtc0w5WHRAkpsDux
YZzT6y1KNCHFBeX8uYVB9blowN8Kuy8unL1akK2xHfh9UFmPZkxUCNm/UQvvySVQ
IhBw/i5b+82qnZse+8Ar698Vpprdbekdca0sBATp3hI0yVnvaVs4BQ8pSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVFRr1BhsaK4gALl3Lp1MOFugq5MB8GA1UdIwQY
MBaAFD4MzSUEe5y4tvAYZ83t6CVvc0ojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjkt
OWNkMDE3MjQzYTA2LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjktOWNkMDE3MjQzYTA2
LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhw4sx505
jNsMfME5fW5VR059F5aMzecS654E18BCqKeR7JbIzraLeBYAgOXV1roBrC4yP5BK
VGTaG12+rWk3xTlQeVmDmivZDIhsvgAQ9YahabBSr0HR82XnEX/PD+vZhM07sPtc
CnDARX4hTNcc6noyZg0UalG0dN6sTRNoAHsf/u515IVcTTStQXjuY0QI97N8qHcj
G440FTjAV0vB6EjqmLAytd0Wq1dMzJAkwMfwmqgQ7InsyW8beDE2XUg58INerMu5
cmXsWo507Ehu+GYTbzwHKX1oHpDOmbrQFwSetC9agoz30xedAdZlAIJOSXRyyF54
6hitiFr6uRSQaA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:59:14 2025 by rpki-client