Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
File: PxyTi7IGo4ltBkwIUvqYhf8s69k.mft (raw, json)
Hash identifier: KdO4QKMBaMYD3ujt8aRdCYYPnJfqnXJQlLvgQUVAsw0=
Subject key identifier: 4B:44:8A:A0:A7:9E:99:14:21:1D:D1:98:3D:FD:C1:34:8A:6E:53:33
Authority key identifier: 3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
Certificate issuer: /CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Certificate serial: 0194BD855A27011D99E0A38E14B874DEB6C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
Manifest number: 015A
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: PxyTi7IGo4ltBkwIUvqYhf8s69k.crl (hash: nblSOo9sFIEUuRLCrko2LidticAybTi86XArfYc+HKE=)
2: Qtry2kaoKZp9d0kAKEVlWC9a8yA.roa (hash: 4P/5LEPA+7GLBNpRQSC8l1dlaoBUTtizVxJtdSJCc5Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5a:27:01:1d:99:e0:a3:8e:14:b8:74:de:b6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=4b448aa0a79e9914211dd1983dfdc1348a6e5333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:23:fe:06:f5:d6:32:d2:c4:6d:7b:50:0c:
01:bb:ad:0d:66:cf:1c:54:31:7a:e4:6f:59:9a:3a:
82:73:9a:c9:c5:c4:0a:d3:85:6c:c8:b7:36:46:cc:
85:3e:89:ce:c6:4e:47:8d:40:da:98:5b:da:0e:9a:
5c:9f:0c:64:97:bf:d3:06:92:dc:b4:cd:b0:0a:f5:
24:09:76:10:5e:39:fa:98:96:df:ec:36:5d:f7:54:
ce:ee:a8:27:c0:61:a5:3e:a2:a9:fa:c5:08:ba:a0:
77:0b:d0:71:c9:00:57:ab:1a:95:29:27:76:8f:d0:
25:95:57:5a:cd:e4:11:14:5c:8b:29:05:3f:93:2c:
88:53:0e:a9:91:50:77:6a:f8:f7:df:34:77:34:ab:
69:76:97:17:46:3d:87:57:13:62:63:ee:74:8f:fb:
9c:d8:4a:e3:2c:01:4e:fb:be:e4:7a:63:35:3d:2a:
c1:55:c7:6a:bd:c6:05:a4:9e:a5:ac:42:d0:cb:4b:
b5:d4:d2:9f:0d:04:2f:36:79:39:2e:fc:52:98:92:
bc:77:36:e1:c6:ae:87:7b:3d:4b:9a:6b:b1:19:53:
be:83:e1:4d:c0:28:56:d5:2c:fd:96:f6:a9:6f:39:
36:c9:69:7a:4b:db:46:b3:5c:a0:b7:00:a5:be:3e:
7e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:44:8A:A0:A7:9E:99:14:21:1D:D1:98:3D:FD:C1:34:8A:6E:53:33
X509v3 Authority Key Identifier:
keyid:3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9d:6d:0b:1b:f5:f5:40:f9:41:22:ca:a4:69:36:1e:99:7c:
6f:e1:55:22:94:71:91:6a:e1:c5:b4:71:9e:0c:73:66:9d:f0:
c7:81:54:2e:9c:74:da:0a:19:47:30:1d:34:1f:d4:e9:7f:1b:
66:d7:70:ab:13:9d:ca:fa:44:1d:b7:5b:e4:a3:24:fa:a8:8d:
cf:12:53:e6:e0:11:b9:59:59:92:dd:1f:44:c1:d6:01:5c:e9:
53:7d:21:26:99:4b:26:fe:58:90:6a:cb:20:30:b8:02:7a:d2:
60:b1:3c:32:2a:aa:bf:a5:86:4e:b6:b5:81:a5:47:13:e1:6e:
cc:72:72:95:b1:6b:1f:58:e7:9f:d3:c7:bf:be:92:11:25:5e:
ed:43:51:e1:19:3d:d2:40:a8:81:76:7f:e7:dc:0d:f2:79:b3:
e6:e2:24:48:11:ec:d4:84:76:26:30:25:60:f1:e0:f5:d6:97:
0e:69:a9:1c:ec:ad:78:a8:37:4d:a0:94:6d:16:bb:77:0f:cb:
1b:a9:0c:dd:92:e3:a3:2f:07:d8:32:2b:71:ed:14:47:03:b6:
0e:70:94:fd:10:0a:9c:da:38:13:97:fa:72:3c:5e:c1:1d:42:
c7:00:cb:e8:71:6b:28:46:50:12:85:e7:4e:6c:4b:ad:df:1f:
54:39:7e:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVonAR2Z4KOOFLh03rbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMWM5MzhiYjIwNmEzODk2ZDA2NGMwODUyZmE5ODg1ZmYy
Y2ViZDkwHhcNMjUwMTMxMTgwMDIwWhcNMjUwMjAxMTgwMDIwWjAzMTEwLwYDVQQD
Eyg0YjQ0OGFhMGE3OWU5OTE0MjExZGQxOTgzZGZkYzEzNDhhNmU1MzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ4j/gb11jLSxG17UAwBu60NZs8c
VDF65G9ZmjqCc5rJxcQK04VsyLc2RsyFPonOxk5HjUDamFvaDppcnwxkl7/TBpLc
tM2wCvUkCXYQXjn6mJbf7DZd91TO7qgnwGGlPqKp+sUIuqB3C9BxyQBXqxqVKSd2
j9AllVdazeQRFFyLKQU/kyyIUw6pkVB3avj33zR3NKtpdpcXRj2HVxNiY+50j/uc
2ErjLAFO+77kemM1PSrBVcdqvcYFpJ6lrELQy0u11NKfDQQvNnk5LvxSmJK8dzbh
xq6Hez1LmmuxGVO+g+FNwChW1Sz9lvapbzk2yWl6S9tGs1ygtwClvj5+mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtEiqCnnpkUIR3RmD39wTSKblMzMB8GA1UdIwQY
MBaAFD8ck4uyBqOJbQZMCFL6mIX/LOvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHh5VGk3SUdvNGx0Qmt3SVV2cVloZjhzNjlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zYjI0OWMtYjQwZS00ZmI5LThmZjQt
ZTA1MjYwMzNhNDg0LzEvUHh5VGk3SUdvNGx0Qmt3SVV2cVloZjhzNjlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zYjI0OWMtYjQwZS00ZmI5LThmZjQtZTA1MjYwMzNhNDg0
LzEvUHh5VGk3SUdvNGx0Qmt3SVV2cVloZjhzNjlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj51tCxv1
9UD5QSLKpGk2Hpl8b+FVIpRxkWrhxbRxngxzZp3wx4FULpx02goZRzAdNB/U6X8b
ZtdwqxOdyvpEHbdb5KMk+qiNzxJT5uARuVlZkt0fRMHWAVzpU30hJplLJv5YkGrL
IDC4AnrSYLE8Miqqv6WGTra1gaVHE+FuzHJylbFrH1jnn9PHv76SESVe7UNR4Rk9
0kCogXZ/59wN8nmz5uIkSBHs1IR2JjAlYPHg9daXDmmpHOyteKg3TaCUbRa7dw/L
G6kM3ZLjoy8H2DIrce0URwO2DnCU/RAKnNo4E5f6cjxewR1CxwDL6HFrKEZQEoXn
TmxLrd8fVDl+RA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:08 2025 by rpki-client