Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
File: pYQcxzKsc43B4_5nwS5RBL74Y7o.mft (raw, json)
Hash identifier: FOXm4P15HMzfu5xSjaX9Q/Bwu7EaaX6KbAZ7uRIYZrY=
Subject key identifier: 93:A4:46:9A:1A:81:18:97:99:82:63:DE:D5:A0:9D:77:D8:0E:D4:E7
Authority key identifier: A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
Certificate issuer: /CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Certificate serial: 0194BC3BE9C29EC07E2E34BD23F1EA0F4B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
Manifest number: 0A13
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: YFmwVrLg1hwmMKXx_Mm4unlp1Pk.roa (hash: k02tWA3CSFWvzMdYPWtnwp3L9wjqBp2dmnRijw+YwuE=)
2: pYQcxzKsc43B4_5nwS5RBL74Y7o.crl (hash: bxH0oNxO2UOXa21ll0al6I9zFEVq7zuANGW7peBToQI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e9:c2:9e:c0:7e:2e:34:bd:23:f1:ea:0f:4b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=93a4469a1a811897998263ded5a09d77d80ed4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:7a:9a:a1:c0:1b:e2:30:dc:bb:25:63:20:
5b:dc:28:bf:b9:3f:60:10:0c:07:42:4c:60:f1:e6:
93:32:5a:d8:80:9d:ec:68:85:a2:54:56:15:dd:dd:
a1:ba:0e:9f:6c:74:f4:ee:22:0f:1d:86:78:e2:f8:
53:03:9b:f1:ce:fd:21:3b:95:c2:33:b6:67:20:ce:
3e:5a:ba:ac:30:3f:b0:14:16:33:81:4d:c8:06:c1:
a7:92:ac:2f:63:ea:cd:c7:95:9d:b8:c9:0e:fa:ea:
ec:73:1f:80:23:09:33:3e:86:c4:33:d8:0e:6a:d7:
da:fe:4c:0d:e2:3d:87:5c:bc:2e:db:03:ff:65:e1:
11:b1:de:8b:95:5e:2a:da:d8:32:ec:c4:68:15:e7:
38:7f:44:f5:3f:78:9c:4b:67:2a:95:61:ff:6a:08:
8a:95:52:1e:27:bf:3c:82:54:fd:c5:a0:c6:36:0b:
f7:10:96:9c:42:5f:53:24:a1:d9:32:6a:4b:d8:35:
3d:6c:2e:03:5d:53:71:87:b8:9f:c6:b8:87:60:6f:
78:34:2f:f0:e6:c6:0e:86:58:d0:ad:f2:ed:4e:e9:
c5:d5:c9:27:2e:95:e4:96:01:e8:94:43:82:34:01:
33:c5:21:0b:b3:d6:28:11:9a:25:c9:bd:bc:d0:ec:
82:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A4:46:9A:1A:81:18:97:99:82:63:DE:D5:A0:9D:77:D8:0E:D4:E7
X509v3 Authority Key Identifier:
keyid:A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b2:e8:a7:5e:dd:bb:a5:3a:52:fb:f5:8e:ea:45:24:6d:3f:
fe:b7:47:3b:4d:65:2c:5c:10:00:3a:1e:c6:53:4a:16:c2:a5:
17:15:51:4e:2a:ae:d6:c1:90:9a:06:07:41:eb:70:a5:b1:e9:
87:76:58:06:69:4d:2d:12:a4:85:cc:1d:1c:73:2b:8b:de:cd:
f7:47:cc:82:62:a2:94:80:9f:87:08:09:5a:67:1e:55:79:11:
e6:c2:2f:67:dd:98:a3:60:b7:86:44:78:54:b1:48:e5:69:a7:
e3:8a:a8:2e:64:63:ce:f5:5c:5b:30:4f:b2:12:73:b5:c5:3f:
ec:af:1d:96:96:c8:ec:8d:86:9a:70:1e:e1:d3:3e:fb:f5:57:
b1:b1:50:75:90:e3:76:bb:30:8d:8f:69:59:6a:8e:2b:fc:47:
d7:57:64:cc:1b:62:c0:8d:0d:cb:e1:6c:b9:fb:f9:33:92:b2:
23:41:42:fe:90:e2:e3:93:31:66:1c:33:cf:cc:59:50:9a:25:
7a:02:a4:e6:b3:84:bf:5b:c1:ca:0c:52:8d:ec:89:22:c2:08:
22:87:b6:f4:bf:c4:51:4a:5b:c7:9c:8f:57:4c:69:96:5c:af:
b3:23:ee:38:7d:fc:d0:ea:bb:1f:b5:f9:04:bd:06:56:2f:9d:
b6:76:12:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+nCnsB+LjS9I/HqD0txMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ODQxY2M3MzJhYzczOGRjMWUzZmU2N2MxMmU1MTA0YmVm
ODYzYmEwHhcNMjUwMTMxMTIwMDMwWhcNMjUwMjAxMTIwMDMwWjAzMTEwLwYDVQQD
Eyg5M2E0NDY5YTFhODExODk3OTk4MjYzZGVkNWEwOWQ3N2Q4MGVkNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT96mqHAG+Iw3LslYyBb3Ci/uT9g
EAwHQkxg8eaTMlrYgJ3saIWiVFYV3d2hug6fbHT07iIPHYZ44vhTA5vxzv0hO5XC
M7ZnIM4+WrqsMD+wFBYzgU3IBsGnkqwvY+rNx5WduMkO+urscx+AIwkzPobEM9gO
atfa/kwN4j2HXLwu2wP/ZeERsd6LlV4q2tgy7MRoFec4f0T1P3icS2cqlWH/agiK
lVIeJ788glT9xaDGNgv3EJacQl9TJKHZMmpL2DU9bC4DXVNxh7ifxriHYG94NC/w
5sYOhljQrfLtTunF1cknLpXklgHolEOCNAEzxSELs9YoEZolyb280OyCrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOkRpoagRiXmYJj3tWgnXfYDtTnMB8GA1UdIwQY
MBaAFKWEHMcyrHONweP+Z8EuUQS++GO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFlRY3h6S3NjNDNCNF81bndTNVJCTDc0WTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDFhMmEtMTk0Yi00MDJiLTkyZGQt
NjY2NjBiMjIyZmIwLzEvcFlRY3h6S3NjNDNCNF81bndTNVJCTDc0WTdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8xNDFhMmEtMTk0Yi00MDJiLTkyZGQtNjY2NjBiMjIyZmIw
LzEvcFlRY3h6S3NjNDNCNF81bndTNVJCTDc0WTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLLop17d
u6U6Uvv1jupFJG0//rdHO01lLFwQADoexlNKFsKlFxVRTiqu1sGQmgYHQetwpbHp
h3ZYBmlNLRKkhcwdHHMri97N90fMgmKilICfhwgJWmceVXkR5sIvZ92Yo2C3hkR4
VLFI5Wmn44qoLmRjzvVcWzBPshJztcU/7K8dlpbI7I2GmnAe4dM++/VXsbFQdZDj
drswjY9pWWqOK/xH11dkzBtiwI0Ny+Fsufv5M5KyI0FC/pDi45MxZhwzz8xZUJol
egKk5rOEv1vBygxSjeyJIsIIIoe29L/EUUpbx5yPV0xpllyvsyPuOH380Oq7H7X5
BL0GVi+dtnYSkg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:58:51 2025 by rpki-client