Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier: Jum5WWs6INE9ISPtUirbFUCX/9Gvmd8VLTN59CHvi3g=
Subject key identifier: 42:03:8D:1E:91:9F:59:1B:C8:FE:04:5B:67:ED:13:54:BD:75:C4:B1
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 0194BC3C134B48DFA77680A5207F3E41E40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number: 080D
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: 5pXO0rccDvdcNpNF4kBVulDgfCw.roa (hash: N4A+PObGjvFgO5mi8UIuKYZJSnV7LB7QBUfSUqvfnRE=)
2: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: mxTJ6xw1RWHtITBc5eotaOyJLxuxuegOpNAdlYsS3MI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:13:4b:48:df:a7:76:80:a5:20:7f:3e:41:e4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=42038d1e919f591bc8fe045b67ed1354bd75c4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8e:e5:f4:0a:5d:c0:94:61:ff:85:38:d1:57:
3c:f3:7d:26:66:1e:ed:7f:56:86:a0:0f:2a:f3:c6:
73:5f:c5:8b:90:8a:7e:cd:55:ca:28:0c:61:da:9a:
79:b9:82:b6:29:f7:ce:1b:d1:77:80:d5:6e:0f:f6:
29:47:87:46:e0:6e:0c:71:4e:51:b4:a2:b9:3a:30:
f1:2e:c6:17:e2:3a:e3:0b:4f:c6:60:2f:2c:d3:42:
0c:d8:20:9e:cc:c5:00:50:5a:57:8c:e5:d6:bf:5d:
4f:27:0c:46:fb:c2:e8:31:19:32:7e:b5:0d:9c:33:
83:69:ff:55:27:3d:b6:e8:c8:02:23:42:1e:4c:4f:
59:ff:1c:66:07:94:a3:b7:1d:26:6b:b1:bf:91:89:
06:8e:84:cc:3b:a3:58:46:cf:cc:9b:ac:e7:77:81:
7a:25:2d:15:13:51:68:db:1a:81:b2:b0:11:38:fc:
cb:da:f4:1c:89:3e:d3:9c:cb:9f:b0:b9:53:e0:a4:
b6:39:83:dd:a2:21:74:ae:6a:4d:0f:82:f0:11:f5:
e0:fe:73:4c:b0:5a:80:ce:54:77:4f:ad:55:6c:77:
11:e5:2d:06:83:0f:79:97:7a:32:7a:d2:f3:9f:fd:
33:11:ce:c6:e0:f8:24:91:09:8b:b8:9c:5c:08:59:
bf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:03:8D:1E:91:9F:59:1B:C8:FE:04:5B:67:ED:13:54:BD:75:C4:B1
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cf:3b:e6:ab:af:4f:2f:df:97:a9:1c:42:5a:ca:66:91:e7:
40:59:43:72:92:7a:52:6f:e2:6f:de:df:60:5e:94:9c:1f:98:
ec:c1:e3:73:70:5b:6f:91:0f:de:38:b1:b7:5a:5c:8f:95:02:
76:fe:61:9e:1b:40:3d:be:f5:2e:d8:69:71:06:fc:01:2b:a4:
03:62:c1:e2:00:ca:36:3a:23:fc:bf:48:6d:b9:c1:26:dc:85:
90:9f:da:50:11:33:8d:64:cd:9b:44:2e:58:75:c2:ec:35:b5:
bb:fb:84:c5:a2:0f:d4:1f:5c:f8:9a:9d:96:56:af:08:64:81:
f9:ad:b8:5d:e9:8c:b4:74:a4:b3:87:9c:56:7d:64:44:e5:99:
de:af:7b:96:03:13:e0:d5:82:42:85:25:e3:85:c5:24:10:5c:
07:ed:2a:e1:ff:7a:6a:c6:2b:16:fc:e6:59:1d:eb:2a:9b:1d:
0b:e9:cf:47:5d:0b:94:d1:5d:6a:f8:08:2d:6c:d0:b2:3a:fe:
b6:d7:9f:f7:d9:0d:da:6f:31:5b:c4:4e:c7:47:ec:79:18:a4:
dc:e1:94:3d:ac:50:c5:c0:b5:d4:0b:50:6e:97:95:3e:5d:04:
60:57:20:5c:f1:c6:f6:f3:3f:af:03:2b:2d:fd:a0:b9:a2:0e:
bd:8f:e9:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBNLSN+ndoClIH8+QeQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjc0MjQ5NjQwMGQ4MTBiZTViNDA5NmZkZWRlYzMwYTIz
MWY5YWIwHhcNMjUwMTMxMTIwMDQxWhcNMjUwMjAxMTIwMDQxWjAzMTEwLwYDVQQD
Eyg0MjAzOGQxZTkxOWY1OTFiYzhmZTA0NWI2N2VkMTM1NGJkNzVjNGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY7l9ApdwJRh/4U40Vc8830mZh7t
f1aGoA8q88ZzX8WLkIp+zVXKKAxh2pp5uYK2KffOG9F3gNVuD/YpR4dG4G4McU5R
tKK5OjDxLsYX4jrjC0/GYC8s00IM2CCezMUAUFpXjOXWv11PJwxG+8LoMRkyfrUN
nDODaf9VJz226MgCI0IeTE9Z/xxmB5Sjtx0ma7G/kYkGjoTMO6NYRs/Mm6znd4F6
JS0VE1Fo2xqBsrAROPzL2vQciT7TnMufsLlT4KS2OYPdoiF0rmpND4LwEfXg/nNM
sFqAzlR3T61VbHcR5S0Ggw95l3oyetLzn/0zEc7G4PgkkQmLuJxcCFm/GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIDjR6Rn1kbyP4EW2ftE1S9dcSxMB8GA1UdIwQY
MBaAFD4nQklkANgQvltAlv3t7DCiMfmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUt
MTg0ZGZmMjkyYTMwLzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUtMTg0ZGZmMjkyYTMw
LzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOc875quv
Ty/fl6kcQlrKZpHnQFlDcpJ6Um/ib97fYF6UnB+Y7MHjc3Bbb5EP3jixt1pcj5UC
dv5hnhtAPb71LthpcQb8ASukA2LB4gDKNjoj/L9IbbnBJtyFkJ/aUBEzjWTNm0Qu
WHXC7DW1u/uExaIP1B9c+JqdllavCGSB+a24XemMtHSks4ecVn1kROWZ3q97lgMT
4NWCQoUl44XFJBBcB+0q4f96asYrFvzmWR3rKpsdC+nPR10LlNFdavgILWzQsjr+
ttef99kN2m8xW8ROx0fseRik3OGUPaxQxcC11AtQbpeVPl0EYFcgXPHG9vM/rwMr
Lf2guaIOvY/pNA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:51 2025 by rpki-client