Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
File: PYr-wXpBs52_aQE-yhZ732Oqhl0.mft (raw, json)
Hash identifier: HwhS4A329DDmlHmt0OugTsFfb2eE5E+YYJ7hdh2rkqU=
Subject key identifier: C5:60:C9:EC:C8:6C:A7:DD:08:CB:44:DD:B5:5F:A4:88:73:59:FD:72
Authority key identifier: 3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
Certificate issuer: /CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Certificate serial: 0194BC05024CB88AD5BB36533C735E45852D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
Manifest number: 0529
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: PYr-wXpBs52_aQE-yhZ732Oqhl0.crl (hash: Qxv1oHxygqG/qVjASXOUuJ/KuJsIimVflZOTJ5//yCI=)
2: jrw3uqdkA6aKRrYyLdhJsdQJmwE.roa (hash: E/ICIdLuVq2VYN9ruBUIoxT9BQwq5xAlmJn8kVZHVXc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:02:4c:b8:8a:d5:bb:36:53:3c:73:5e:45:85:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=c560c9ecc86ca7dd08cb44ddb55fa4887359fd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:fc:0d:41:d9:3d:f4:26:9c:11:51:f8:30:
4c:70:2d:2b:16:8f:16:f1:47:ff:d2:72:63:15:16:
3f:6c:71:d7:99:d8:82:bf:5b:4e:aa:53:ef:de:87:
70:eb:b7:cf:39:0f:4e:8f:4d:9a:bf:7e:6d:6f:58:
71:1a:5e:ee:89:36:4c:bc:98:41:2e:04:66:4d:77:
3a:19:e5:d9:fc:be:b2:95:8a:16:29:a4:1f:91:c9:
4b:2a:b2:3c:f4:d6:62:92:2b:89:5e:93:b2:2b:f7:
5f:06:71:c5:55:e5:8f:17:ab:6c:61:8d:50:68:ea:
bb:59:c3:c4:00:88:3c:a3:76:fd:a9:60:d7:1b:ff:
00:32:a8:17:20:cb:b0:67:18:df:cb:9c:69:50:66:
b1:a8:ac:c2:40:2e:5c:4e:c3:8b:21:a6:51:4f:cc:
04:e0:52:9b:c2:c1:c5:d8:9e:a5:b0:5b:70:f6:79:
50:69:b3:0c:4b:6a:11:f9:05:81:93:3a:ba:06:b8:
89:3d:f9:d7:ac:0d:15:34:74:2f:b3:56:f2:a2:ad:
9e:22:85:4c:a4:d8:89:14:e3:7e:c8:0e:72:90:a6:
ff:94:65:97:e7:ae:3e:ba:2b:e6:ec:49:ae:dc:a1:
3e:03:e9:39:13:02:4e:bb:cc:a8:4e:25:5e:94:6e:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:60:C9:EC:C8:6C:A7:DD:08:CB:44:DD:B5:5F:A4:88:73:59:FD:72
X509v3 Authority Key Identifier:
keyid:3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:0e:e1:64:9d:e9:a9:84:de:df:8c:5e:4c:4e:f0:8d:af:27:
63:35:90:51:26:6c:f3:fd:34:3b:1d:d2:65:ce:2c:26:b1:99:
f0:6a:e3:37:47:f6:24:1a:31:39:b8:44:a5:14:d6:48:26:10:
19:b3:36:b9:ee:52:97:f5:25:af:b8:f4:8e:c8:6e:b6:e4:fd:
85:2b:fb:3a:5a:7a:6a:ef:84:fa:f3:0d:42:39:4e:32:2b:1e:
0f:e8:c2:98:b6:bd:c7:20:6b:e6:e8:db:df:aa:37:ae:de:d9:
77:89:8b:fe:09:2f:3f:60:57:26:cd:cb:1e:63:2f:d2:ef:c5:
e3:ab:04:e9:1e:c0:2c:0b:d1:69:e9:7f:d4:7f:d7:b3:2b:3b:
62:8f:bf:a1:52:9b:42:fa:7e:89:c0:02:5b:5a:1f:59:db:2a:
62:60:6f:4f:fc:89:59:1e:4f:98:d4:9a:54:cc:90:24:af:c3:
08:fe:d8:3f:5c:78:93:55:50:64:66:22:47:44:6c:08:01:59:
fc:46:1a:b4:70:0b:e3:d0:03:e6:b2:2c:98:8a:56:f7:3f:6f:
75:32:33:f6:5c:08:3d:18:d1:c1:df:5e:01:4b:91:4a:ca:e7:
6e:bd:73:ca:95:3a:40:fd:94:46:10:32:b3:10:95:c3:29:e4:
3e:3a:e1:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQJMuIrVuzZTPHNeRYUtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOGFmZWMxN2E0MWIzOWRiZjY5MDEzZWNhMTY3YmRmNjNh
YTg2NWQwHhcNMjUwMTMxMTEwMDMyWhcNMjUwMjAxMTEwMDMyWjAzMTEwLwYDVQQD
EyhjNTYwYzllY2M4NmNhN2RkMDhjYjQ0ZGRiNTVmYTQ4ODczNTlmZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZb8DUHZPfQmnBFR+DBMcC0rFo8W
8Uf/0nJjFRY/bHHXmdiCv1tOqlPv3odw67fPOQ9Oj02av35tb1hxGl7uiTZMvJhB
LgRmTXc6GeXZ/L6ylYoWKaQfkclLKrI89NZikiuJXpOyK/dfBnHFVeWPF6tsYY1Q
aOq7WcPEAIg8o3b9qWDXG/8AMqgXIMuwZxjfy5xpUGaxqKzCQC5cTsOLIaZRT8wE
4FKbwsHF2J6lsFtw9nlQabMMS2oR+QWBkzq6BriJPfnXrA0VNHQvs1byoq2eIoVM
pNiJFON+yA5ykKb/lGWX564+uivm7Emu3KE+A+k5EwJOu8yoTiVelG7AkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVgyezIbKfdCMtE3bVfpIhzWf1yMB8GA1UdIwQY
MBaAFD2K/sF6QbOdv2kBPsoWe99jqoZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlyLXdYcEJzNTJfYVFFLXloWjczMk9xaGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84YmNhYmEtMzhhZC00MDUxLWI0MTQt
OTRkMzdlOTU5NWMxLzEvUFlyLXdYcEJzNTJfYVFFLXloWjczMk9xaGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy84YmNhYmEtMzhhZC00MDUxLWI0MTQtOTRkMzdlOTU5NWMx
LzEvUFlyLXdYcEJzNTJfYVFFLXloWjczMk9xaGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMA7hZJ3p
qYTe34xeTE7wja8nYzWQUSZs8/00Ox3SZc4sJrGZ8GrjN0f2JBoxObhEpRTWSCYQ
GbM2ue5Sl/Ulr7j0jshutuT9hSv7Olp6au+E+vMNQjlOMiseD+jCmLa9xyBr5ujb
36o3rt7Zd4mL/gkvP2BXJs3LHmMv0u/F46sE6R7ALAvRael/1H/Xsys7Yo+/oVKb
Qvp+icACW1ofWdsqYmBvT/yJWR5PmNSaVMyQJK/DCP7YP1x4k1VQZGYiR0RsCAFZ
/EYatHAL49AD5rIsmIpW9z9vdTIz9lwIPRjRwd9eAUuRSsrnbr1zypU6QP2URhAy
sxCVwynkPjrhlg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:55 2025 by rpki-client