Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: j0etS8oDMAodH1de1Z2HsmmbiYlH9a5NCi/KOdyGE+4=
Subject key identifier: 19:FC:6A:09:86:E6:DC:98:EA:5F:2B:73:FC:F9:A9:84:C8:7E:F6:5D
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 0194BCE08F49122B61D8EB660AB30B178E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 06AD
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: MR6yCa9ahiYB6kt7eFUEnhRZgj0.roa (hash: Q5fLGdiN5URjuSRi8W7fkSayIUiVGY1nf+0ovyfMZAw=)
2: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: u5kwSPPudiIGD4EE3jw6QngDzso9gbrKdtjgJNoC5u0=)
3: sFFOUDvWTzfSymlwSYpDyp4rZVo.roa (hash: hd1EPhU6XZRPUxka9ECqkCcKF9k2GizgSrw0eDBr9g4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8f:49:12:2b:61:d8:eb:66:0a:b3:0b:17:8e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=19fc6a0986e6dc98ea5f2b73fcf9a984c87ef65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e6:b4:86:af:82:c7:37:0c:74:d1:71:5e:ee:
7d:25:3a:85:df:2a:a6:0a:dc:62:2e:15:58:2b:f0:
e4:e3:f1:a9:39:2b:58:3d:90:b2:a8:b6:6c:b4:e9:
f2:6c:8b:bc:09:c1:09:d3:7b:46:c2:e6:1f:a1:0c:
91:b5:ac:b3:b3:cd:52:a7:22:f0:c8:a7:6b:76:f4:
1b:cf:77:99:8e:25:2f:8f:1e:e0:9f:18:19:33:82:
6b:af:03:ab:51:33:1b:6f:50:7d:08:b5:c3:81:03:
f9:0c:73:00:23:35:bf:5a:01:87:07:21:18:50:e6:
80:87:c5:65:9c:43:6c:32:a6:89:e3:1d:3d:bc:1d:
2e:08:5f:ea:d1:c7:3e:ba:1c:3d:90:c9:d7:15:f2:
6a:85:40:75:03:7a:0b:d1:83:61:e6:0b:33:62:72:
64:90:2c:46:7f:f9:80:61:c2:63:a6:70:50:e3:13:
2c:a9:5d:5c:a5:71:2f:21:16:4f:24:5e:e8:d0:e3:
c4:71:e4:44:ec:d8:ff:c3:da:3d:fb:18:83:c1:f8:
28:b8:62:cf:bb:a9:b4:3d:e2:6d:0a:c4:11:37:c4:
4c:93:4e:88:50:1a:82:34:98:35:fe:67:0b:7c:50:
bd:00:84:4b:ec:7a:de:02:f1:25:58:61:01:d7:80:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FC:6A:09:86:E6:DC:98:EA:5F:2B:73:FC:F9:A9:84:C8:7E:F6:5D
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:d5:a7:56:a3:63:7e:da:ef:9b:81:22:cf:2d:1a:1f:91:30:
fc:0e:a6:a8:8d:0c:69:55:41:bd:76:ea:c7:7f:8a:df:33:cb:
b6:65:c1:97:b0:7f:b2:cb:64:48:47:1c:6d:91:d1:02:96:51:
38:e3:73:04:69:9c:6f:3d:2a:d4:e2:48:11:ae:94:ad:90:4f:
20:61:a7:33:6d:d5:76:da:44:c7:04:30:f2:58:71:85:04:fe:
bb:89:80:53:7b:36:98:b9:0f:0e:02:9b:ee:93:8e:c6:6a:77:
17:1b:48:a5:b9:66:7a:61:67:09:1f:55:53:de:2e:4c:13:83:
2f:07:2f:f4:0b:3c:9f:e9:71:0c:9c:ff:ee:d0:2d:0d:44:0b:
4d:c6:22:35:7b:84:21:9b:5c:84:a9:e2:12:38:fe:de:ea:82:
c6:ad:a5:d1:9a:5e:9c:b9:1f:48:4d:ae:4f:de:2b:80:bc:79:
cf:cf:f5:a2:c3:3d:f0:cd:62:b5:de:18:55:b1:b7:19:94:7c:
e1:ec:27:84:5f:62:6f:f9:10:0b:49:a7:0f:06:cf:ae:78:5a:
ff:80:2d:fc:b0:58:b6:96:c9:27:e4:c6:31:96:23:28:fa:e6:
44:62:0a:85:ab:0d:a5:af:c9:58:9f:34:2d:1e:e0:58:95:49:
0d:35:c2:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84I9JEith2OtmCrMLF46YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZGUyNDcwYzg1NjM5NDk0ODdhM2U3ODc0M2M1NDRjOTll
YzhhNjQwHhcNMjUwMTMxMTUwMDIwWhcNMjUwMjAxMTUwMDIwWjAzMTEwLwYDVQQD
EygxOWZjNmEwOTg2ZTZkYzk4ZWE1ZjJiNzNmY2Y5YTk4NGM4N2VmNjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlua0hq+CxzcMdNFxXu59JTqF3yqm
CtxiLhVYK/Dk4/GpOStYPZCyqLZstOnybIu8CcEJ03tGwuYfoQyRtayzs81SpyLw
yKdrdvQbz3eZjiUvjx7gnxgZM4JrrwOrUTMbb1B9CLXDgQP5DHMAIzW/WgGHByEY
UOaAh8VlnENsMqaJ4x09vB0uCF/q0cc+uhw9kMnXFfJqhUB1A3oL0YNh5gszYnJk
kCxGf/mAYcJjpnBQ4xMsqV1cpXEvIRZPJF7o0OPEceRE7Nj/w9o9+xiDwfgouGLP
u6m0PeJtCsQRN8RMk06IUBqCNJg1/mcLfFC9AIRL7HreAvElWGEB14ALjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBn8agmG5tyY6l8rc/z5qYTIfvZdMB8GA1UdIwQY
MBaAFDzeJHDIVjlJSHo+eHQ8VEyZ7IpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUt
NDQxNzFiMmY1OTllLzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mYTc5Y2YtOGM0Yy00MDk0LWExZjUtNDQxNzFiMmY1OTll
LzEvUE40a2NNaFdPVWxJZWo1NGREeFVUSm5zaW1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9WnVqNj
ftrvm4Eizy0aH5Ew/A6mqI0MaVVBvXbqx3+K3zPLtmXBl7B/sstkSEccbZHRApZR
OONzBGmcbz0q1OJIEa6UrZBPIGGnM23VdtpExwQw8lhxhQT+u4mAU3s2mLkPDgKb
7pOOxmp3FxtIpblmemFnCR9VU94uTBODLwcv9As8n+lxDJz/7tAtDUQLTcYiNXuE
IZtchKniEjj+3uqCxq2l0ZpenLkfSE2uT94rgLx5z8/1osM98M1itd4YVbG3GZR8
4ewnhF9ib/kQC0mnDwbPrnha/4At/LBYtpbJJ+TGMZYjKPrmRGIKhasNpa/JWJ80
LR7gWJVJDTXCvA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:10 2025 by rpki-client