Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
File: 0PFLigjLX4BX1IsD5T9Fi44f7tY.mft (raw, json)
Hash identifier: PcfE9HNyyBWFQj6ldKBrYIyhio9yCO3ZNgbpO9ForVM=
Subject key identifier: 6D:4B:F7:FA:17:77:DB:15:2F:E4:8E:87:4A:25:AD:DE:4C:E7:A3:98
Authority key identifier: D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6
Certificate issuer: /CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
Certificate serial: 0194BC3C49424B4E861DF665BE86850BF68E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
Manifest number: 78
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: 0PFLigjLX4BX1IsD5T9Fi44f7tY.crl (hash: rg3w6VrNtGCdU2iVJfbqIapyzE226QjZekwGuiBA78U=)
2: 5XHmlHMatoj7HuqzW-xKZFCBoCk.roa (hash: 2LwcEFXQBzd4wv+NbYjPLMlRT/J2wftX73OmJ3FhceM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:49:42:4b:4e:86:1d:f6:65:be:86:85:0b:f6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=6d4bf7fa1777db152fe48e874a25adde4ce7a398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e7:f1:7b:79:35:43:88:a5:86:a3:54:66:70:
74:83:ae:c4:6b:80:45:d5:c9:0b:47:72:72:28:11:
d9:17:87:33:01:b4:a0:dc:2b:68:00:dd:48:be:56:
ee:2a:9f:4a:f5:28:c5:cc:ab:a4:95:10:c4:81:cd:
89:66:bf:d9:cf:3e:cc:31:ec:bd:d9:0f:16:29:81:
1d:8a:f2:5d:87:3b:c6:ba:13:e8:c4:69:87:8d:8e:
23:18:97:71:c4:55:2d:8a:1e:ec:e4:4d:8a:d0:52:
e4:ac:8b:3a:fd:4c:46:f4:d3:99:55:75:24:00:4e:
30:5c:3a:17:f0:8e:73:f9:bb:1c:b4:65:28:6b:0b:
96:1c:00:08:d9:51:66:98:2c:3d:31:76:ae:ba:29:
74:1f:5c:f7:2d:24:4b:be:7f:bd:c2:e9:4d:0b:0b:
29:1a:89:47:3e:68:e5:20:d0:38:a9:1a:9c:b0:43:
7c:76:7f:4c:6d:a6:a1:d1:e8:5b:57:1a:b0:c6:2f:
6d:5d:b1:1c:28:97:ba:11:c8:cc:88:a6:ed:fe:b6:
df:3a:ff:a3:46:26:c5:14:1a:2e:c9:c1:62:8a:03:
c1:3d:28:84:5a:38:7f:43:07:f1:31:70:e9:7c:8e:
eb:74:36:c1:f3:b7:13:47:42:9b:67:0f:1d:f6:7d:
f2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4B:F7:FA:17:77:DB:15:2F:E4:8E:87:4A:25:AD:DE:4C:E7:A3:98
X509v3 Authority Key Identifier:
keyid:D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2c:48:9f:8e:f6:f8:37:ca:19:d6:f8:3e:c4:0a:ce:e5:e0:
c3:85:d5:8d:36:80:37:76:90:a1:11:e5:9e:75:db:c2:9c:38:
a3:38:8b:ce:f3:42:89:b7:13:c2:8e:c2:10:9e:8f:84:97:10:
74:d0:4c:67:87:53:67:97:1b:3f:b1:e9:fd:bf:75:ae:79:88:
8f:f4:e3:b7:3f:3a:da:66:b2:a7:c7:ed:16:81:49:66:01:cd:
c1:0d:39:22:88:86:c5:8f:d7:89:d2:d0:22:29:aa:c4:cf:84:
0d:36:6d:8a:5a:66:64:20:9d:aa:4e:3a:71:00:18:a8:5e:3b:
f0:d1:d6:76:f9:04:53:e3:5c:c4:e6:8d:d5:54:fe:39:c9:27:
6a:7e:c2:da:98:3e:c2:75:22:d9:a4:5b:92:aa:ef:67:ef:cd:
fa:c8:03:e1:5d:1a:c2:5c:b0:31:c9:18:63:ec:e9:ac:45:c1:
4d:5d:c6:c9:0f:7c:94:1f:34:60:05:16:3f:62:51:23:97:5b:
e8:fc:92:cc:36:2c:91:4c:da:9d:95:73:e1:0b:6a:32:68:f8:
b6:4d:75:38:1e:f4:95:9a:6f:d1:15:51:92:78:7a:00:e5:4d:
93:dc:e5:08:1c:24:62:2d:07:d6:89:59:91:f6:61:d9:0e:e5:
d7:36:95:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PElCS06GHfZlvoaFC/aOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjE0YjhhMDhjYjVmODA1N2Q0OGIwM2U1M2Y0NThiOGUx
ZmVlZDYwHhcNMjUwMTMxMTIwMDU1WhcNMjUwMjAxMTIwMDU1WjAzMTEwLwYDVQQD
Eyg2ZDRiZjdmYTE3NzdkYjE1MmZlNDhlODc0YTI1YWRkZTRjZTdhMzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOfxe3k1Q4ilhqNUZnB0g67Ea4BF
1ckLR3JyKBHZF4czAbSg3CtoAN1IvlbuKp9K9SjFzKuklRDEgc2JZr/Zzz7MMey9
2Q8WKYEdivJdhzvGuhPoxGmHjY4jGJdxxFUtih7s5E2K0FLkrIs6/UxG9NOZVXUk
AE4wXDoX8I5z+bsctGUoawuWHAAI2VFmmCw9MXauuil0H1z3LSRLvn+9wulNCwsp
GolHPmjlINA4qRqcsEN8dn9Mbaah0ehbVxqwxi9tXbEcKJe6EcjMiKbt/rbfOv+j
RibFFBouycFiigPBPSiEWjh/QwfxMXDpfI7rdDbB87cTR0KbZw8d9n3yRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1L9/oXd9sVL+SOh0olrd5M56OYMB8GA1UdIwQY
MBaAFNDxS4oIy1+AV9SLA+U/RYuOH+7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBGTGlnakxYNEJYMUlzRDVUOUZpNDRmN3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMWJkYmItODU2Zi00MWRkLWFhZDkt
MDY2ZGRmMzJiZmNjLzEvMFBGTGlnakxYNEJYMUlzRDVUOUZpNDRmN3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yMWJkYmItODU2Zi00MWRkLWFhZDktMDY2ZGRmMzJiZmNj
LzEvMFBGTGlnakxYNEJYMUlzRDVUOUZpNDRmN3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnyxIn472
+DfKGdb4PsQKzuXgw4XVjTaAN3aQoRHlnnXbwpw4oziLzvNCibcTwo7CEJ6PhJcQ
dNBMZ4dTZ5cbP7Hp/b91rnmIj/Tjtz862mayp8ftFoFJZgHNwQ05IoiGxY/XidLQ
IimqxM+EDTZtilpmZCCdqk46cQAYqF478NHWdvkEU+NcxOaN1VT+Ocknan7C2pg+
wnUi2aRbkqrvZ+/N+sgD4V0awlywMckYY+zprEXBTV3GyQ98lB80YAUWP2JRI5db
6PySzDYskUzanZVz4QtqMmj4tk11OB70lZpv0RVRknh6AOVNk9zlCBwkYi0H1olZ
kfZh2Q7l1zaVbA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:44:51 2025 by rpki-client