Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
File: PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft (raw, json)
Hash identifier: zzsuApS68J2nxU/8mZGhm8YvdNN3o5WWEfhN8rWZmfk=
Subject key identifier: CD:AE:18:19:19:16:CE:E9:0E:3C:09:4D:C1:EC:0E:6F:80:5B:5B:66
Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
Certificate issuer: /CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Certificate serial: 0194BC3C13132187D1E3BA806AB72C049228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: LHapQb8ix5yDr9XdIdq3SLfgGJQ.roa (hash: OTBcvGKIAwNH7dYThkaA46DYb8Du7nUhG7Wp8v0hqOA=)
2: PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl (hash: 3zWzIhB3vzLYE54ysdkRYf/CF9ZZ+cNPepEyWo1NMIU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:13:13:21:87:d1:e3:ba:80:6a:b7:2c:04:92:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=cdae18191916cee90e3c094dc1ec0e6f805b5b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:60:52:ad:a6:a4:0a:10:ff:f5:23:eb:85:
7f:3a:e4:ca:cf:49:49:09:b4:e4:1f:57:a7:40:5b:
eb:0a:7d:0d:e8:c8:c4:0f:8c:7f:e3:e9:7b:f6:e5:
8d:b2:54:4a:26:36:07:78:a5:51:94:87:b7:33:17:
57:23:69:68:96:f6:b7:20:b2:85:14:ca:8e:76:40:
99:8c:d8:76:13:54:0e:48:28:16:66:f5:41:f3:0c:
a1:81:d4:a4:15:c5:70:91:14:68:db:be:e4:63:77:
aa:0b:4f:88:b0:c9:b7:69:21:73:15:2d:dc:ac:17:
70:d0:9d:74:bb:6c:46:32:b4:0a:1e:8e:24:9a:7b:
aa:20:62:f2:d5:74:11:de:3c:4b:85:14:b6:3b:74:
52:5b:1b:4a:10:c5:df:12:cc:64:35:6e:7a:aa:f5:
7d:62:62:66:da:93:4b:ca:9c:39:74:dd:3f:e5:fc:
28:f4:c5:77:8b:23:42:08:f9:38:6c:a8:42:d8:c6:
c0:fc:ee:1b:9f:dd:e9:7d:4f:23:a5:0b:37:ef:12:
b3:d1:b1:74:16:44:6a:59:e1:65:c1:84:8d:00:66:
db:b6:a9:f9:e5:b4:9f:d8:85:94:10:1f:f3:fe:e7:
4b:9b:1a:a8:c4:1b:99:78:4b:0f:dd:78:14:bf:6f:
a2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AE:18:19:19:16:CE:E9:0E:3C:09:4D:C1:EC:0E:6F:80:5B:5B:66
X509v3 Authority Key Identifier:
keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8e:59:81:15:7b:5f:d6:66:6e:69:94:69:5f:71:20:65:e9:
82:01:f3:4f:ca:93:5a:1e:e0:c1:5c:1b:1f:ed:ac:05:20:05:
d2:5f:72:90:bf:6b:40:59:e3:63:47:5b:87:bc:85:55:bf:5a:
37:d5:c1:81:4e:96:76:26:08:46:8a:f5:71:98:6d:59:ca:1a:
9d:15:c8:05:bb:98:1f:bf:13:81:ae:3d:19:f9:76:11:36:39:
1d:89:0d:ab:45:b0:e6:ee:7c:03:8c:21:20:78:9b:3d:10:bc:
f4:fa:2a:17:57:e9:af:0f:40:60:1c:ef:3f:d0:69:76:3d:e6:
29:d9:41:cb:32:15:78:67:c5:fb:18:96:db:5a:ec:81:d7:1c:
5d:9a:cd:68:b5:b4:0a:a0:c1:f3:5b:68:c3:5f:1b:58:d8:b3:
d6:be:7c:5f:5e:c5:80:15:3d:a5:e6:5e:d7:32:13:a4:7e:65:
2e:75:ed:ee:f6:d1:29:1e:f5:4f:8f:81:e9:34:21:79:70:56:
70:e4:15:47:6b:ad:3c:9f:bc:04:5f:34:59:3d:73:71:c8:65:
46:ba:f0:eb:53:43:2f:0e:94:98:0d:eb:6a:01:b9:c4:87:80:
77:7c:08:aa:65:c4:ce:98:1d:01:f6:7b:d1:32:a0:4f:2d:93:
ae:a4:d5:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBMTIYfR47qAarcsBJIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMDU4ZTQzMmJiZjcyMzY5NzUwYTk5NTFkNTI1OTQzMGI1
Y2E0YmYwHhcNMjUwMTMxMTIwMDQxWhcNMjUwMjAxMTIwMDQxWjAzMTEwLwYDVQQD
EyhjZGFlMTgxOTE5MTZjZWU5MGUzYzA5NGRjMWVjMGU2ZjgwNWI1YjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu51gUq2mpAoQ//Uj64V/OuTKz0lJ
CbTkH1enQFvrCn0N6MjED4x/4+l79uWNslRKJjYHeKVRlIe3MxdXI2lolva3ILKF
FMqOdkCZjNh2E1QOSCgWZvVB8wyhgdSkFcVwkRRo277kY3eqC0+IsMm3aSFzFS3c
rBdw0J10u2xGMrQKHo4kmnuqIGLy1XQR3jxLhRS2O3RSWxtKEMXfEsxkNW56qvV9
YmJm2pNLypw5dN0/5fwo9MV3iyNCCPk4bKhC2MbA/O4bn93pfU8jpQs37xKz0bF0
FkRqWeFlwYSNAGbbtqn55bSf2IWUEB/z/udLmxqoxBuZeEsP3XgUv2+iGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2uGBkZFs7pDjwJTcHsDm+AW1tmMB8GA1UdIwQY
MBaAFD8FjkMrv3I2l1CplR1SWUMLXKS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kZTY4YzYtNjUwZi00ZGZhLWJkMTMt
MDAwMDgyYzEyM2U3LzEvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9kZTY4YzYtNjUwZi00ZGZhLWJkMTMtMDAwMDgyYzEyM2U3
LzEvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcY5ZgRV7
X9ZmbmmUaV9xIGXpggHzT8qTWh7gwVwbH+2sBSAF0l9ykL9rQFnjY0dbh7yFVb9a
N9XBgU6WdiYIRor1cZhtWcoanRXIBbuYH78Tga49Gfl2ETY5HYkNq0Ww5u58A4wh
IHibPRC89PoqF1fprw9AYBzvP9Bpdj3mKdlByzIVeGfF+xiW21rsgdccXZrNaLW0
CqDB81tow18bWNiz1r58X17FgBU9peZe1zITpH5lLnXt7vbRKR71T4+B6TQheXBW
cOQVR2utPJ+8BF80WT1zcchlRrrw61NDLw6UmA3ragG5xIeAd3wIqmXEzpgdAfZ7
0TKgTy2TrqTVpw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:58 2025 by rpki-client