Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
File: d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft (raw, json)
Hash identifier: f5VNnvCYcJcizd1XtQmx7e9GaRnik2jFyRE+2MEh6iY=
Subject key identifier: 32:C6:3F:11:0A:0F:7F:11:6C:79:E9:C2:E2:50:7B:E3:09:92:A1:AC
Authority key identifier: 77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
Certificate issuer: /CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Certificate serial: 0194BC0520005E70A93D7F79092A55956BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
Manifest number: 0BA7
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: DaccjHojB95-TCoADZK32YMFyKo.roa (hash: ihqtrBhocSRh86RahK6DG9qn8vgDTCS7AhN7/gul0Fs=)
2: d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl (hash: HpYNRU98INsEo8N5Easkwsrgtfueq1ui14eOZpCfUXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:20:00:5e:70:a9:3d:7f:79:09:2a:55:95:6b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=32c63f110a0f7f116c79e9c2e2507be30992a1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2a:bf:d0:ce:62:2b:04:22:02:be:ec:52:58:
87:65:3a:95:cd:a3:41:94:eb:70:d9:87:0a:b7:da:
b5:7a:36:cd:3f:2c:da:13:44:3b:4f:ed:bb:f4:14:
ff:18:b4:72:68:9b:10:c4:5e:44:7c:8f:05:c6:b5:
34:a5:bf:aa:9c:f5:cd:4f:76:0e:fd:2f:8d:f7:9b:
e9:a9:69:59:78:46:fa:3e:21:53:37:be:d3:de:4f:
20:d9:1f:f1:f4:97:92:6c:d0:a7:58:4d:70:d7:66:
96:96:7c:89:be:c9:0f:8d:c3:24:4d:ac:12:3b:4f:
92:e5:7d:fc:ed:e0:8c:12:e8:3d:e8:ff:e5:f1:f5:
03:0f:f2:34:fb:b5:db:e3:16:74:81:4c:49:95:aa:
90:26:87:2b:fa:7f:09:a2:be:9e:8a:8e:90:f6:a2:
04:02:f2:90:48:65:92:1d:2b:22:53:26:a9:6a:6a:
b8:22:6b:d4:76:21:7f:c9:1f:88:18:d4:af:27:77:
70:bd:48:85:79:aa:b9:85:a5:f7:20:8e:11:6f:64:
3b:3e:1e:d8:cc:59:9c:01:1d:1a:22:4c:02:4c:af:
37:ce:be:b9:99:cb:80:76:4d:d4:65:be:d8:61:07:
db:f7:c0:e4:8b:8a:fb:67:32:a5:af:25:69:24:48:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C6:3F:11:0A:0F:7F:11:6C:79:E9:C2:E2:50:7B:E3:09:92:A1:AC
X509v3 Authority Key Identifier:
keyid:77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a9:11:4c:47:08:02:b8:9d:c2:f2:15:34:79:0c:9d:ce:66:
67:71:22:45:57:be:ef:07:a8:14:67:9e:8d:cd:d4:dc:4f:ef:
c6:53:89:d7:35:4c:0b:d7:80:fb:b3:c2:ba:61:85:5c:11:9f:
46:43:a0:aa:fe:2d:b6:1a:00:b1:62:e8:76:38:17:e2:a1:49:
09:a7:14:ec:9e:1b:ac:bc:c9:53:64:98:67:89:6d:d4:17:67:
45:1a:2c:da:60:df:98:01:e2:89:6d:0d:88:bc:db:ec:53:f7:
21:22:69:eb:96:05:12:bb:3a:a2:06:1b:65:92:1a:7a:77:8d:
87:48:b4:d4:aa:e2:a9:d2:25:c4:59:f8:6c:4f:34:81:5b:54:
44:79:a2:08:43:c1:bc:43:86:fc:58:ef:ce:65:53:16:d1:62:
5c:11:1c:78:9e:a3:ab:88:f8:f9:41:fa:78:45:db:2b:cb:f6:
8c:c8:21:f1:1e:68:2e:a2:cf:a5:a2:3f:d3:91:de:52:b4:3a:
3b:3f:19:34:b3:47:eb:74:49:71:10:23:e9:0f:15:34:de:1b:
cc:a9:1d:98:d3:2d:bf:f3:ee:12:00:9c:2a:51:7e:96:02:58:
2a:20:24:fe:ab:d0:a2:3f:95:f7:93:2e:f9:39:d5:e2:5d:52:
43:f7:18:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BSAAXnCpPX95CSpVlWurMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZGZjZjA5ODI0ODY4NjliNzFkYmRiN2NjNjEzYzRiMzgx
MzY3YzQwHhcNMjUwMTMxMTEwMDM5WhcNMjUwMjAxMTEwMDM5WjAzMTEwLwYDVQQD
EygzMmM2M2YxMTBhMGY3ZjExNmM3OWU5YzJlMjUwN2JlMzA5OTJhMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yq/0M5iKwQiAr7sUliHZTqVzaNB
lOtw2YcKt9q1ejbNPyzaE0Q7T+279BT/GLRyaJsQxF5EfI8FxrU0pb+qnPXNT3YO
/S+N95vpqWlZeEb6PiFTN77T3k8g2R/x9JeSbNCnWE1w12aWlnyJvskPjcMkTawS
O0+S5X387eCMEug96P/l8fUDD/I0+7Xb4xZ0gUxJlaqQJocr+n8Jor6eio6Q9qIE
AvKQSGWSHSsiUyapamq4ImvUdiF/yR+IGNSvJ3dwvUiFeaq5haX3II4Rb2Q7Ph7Y
zFmcAR0aIkwCTK83zr65mcuAdk3UZb7YYQfb98Dki4r7ZzKlryVpJEjniQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLGPxEKD38RbHnpwuJQe+MJkqGsMB8GA1UdIwQY
MBaAFHffzwmCSGhptx29t8xhPEs4E2fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDlfUENZSklhR20zSGIyM3pHRThTemdUWjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83YmFiOTctNDhhMy00YWU3LWExNTEt
MTUxYmYzNGY0NjhiLzEvZDlfUENZSklhR20zSGIyM3pHRThTemdUWjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83YmFiOTctNDhhMy00YWU3LWExNTEtMTUxYmYzNGY0Njhi
LzEvZDlfUENZSklhR20zSGIyM3pHRThTemdUWjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATakRTEcI
AridwvIVNHkMnc5mZ3EiRVe+7weoFGeejc3U3E/vxlOJ1zVMC9eA+7PCumGFXBGf
RkOgqv4tthoAsWLodjgX4qFJCacU7J4brLzJU2SYZ4lt1BdnRRos2mDfmAHiiW0N
iLzb7FP3ISJp65YFErs6ogYbZZIaeneNh0i01KriqdIlxFn4bE80gVtURHmiCEPB
vEOG/FjvzmVTFtFiXBEceJ6jq4j4+UH6eEXbK8v2jMgh8R5oLqLPpaI/05HeUrQ6
Oz8ZNLNH63RJcRAj6Q8VNN4bzKkdmNMtv/PuEgCcKlF+lgJYKiAk/qvQoj+V95Mu
+TnV4l1SQ/cYSA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:18 2025 by rpki-client