Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
File: pPhiddwhxh2gzs0Sfpd0zKoysLs.mft (raw, json)
Hash identifier: BlIsTBUN7XWTsvrMlC2wRXUSuN59Fyp4cGx1hh6yWMQ=
Subject key identifier: 55:1C:EA:FB:F3:26:EB:0A:76:09:1B:00:94:04:AA:C0:B4:3F:E6:18
Authority key identifier: A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB
Certificate issuer: /CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb
Certificate serial: 0194BC04FEB99887E73796CFDA4D1131DB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: a0SjSsK93R47m4eRP1Kso9k59CQ.roa (hash: 4DqaXQky67MktM88+QkXZEvBSJRKln9MtvLpFVmXjJ0=)
2: pPhiddwhxh2gzs0Sfpd0zKoysLs.crl (hash: dND3ap0lEEtXZ3SB/RoVgKB40mCDS7cQis3A6zkNCL4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fe:b9:98:87:e7:37:96:cf:da:4d:11:31:db:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=551ceafbf326eb0a76091b009404aac0b43fe618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:85:93:40:ea:70:d4:0d:05:a2:a5:ad:67:
50:4d:f1:eb:3e:4d:0a:6c:fb:2f:84:e0:f8:29:71:
59:6b:76:4e:e0:d3:65:94:01:a2:10:18:42:dd:9b:
aa:04:65:22:7e:68:92:89:49:3d:47:5a:a9:37:b8:
18:bd:4e:7c:3a:2b:e1:f4:73:9d:4c:af:4b:c6:32:
15:ab:70:a0:90:ee:78:b9:07:d5:45:39:f0:4b:42:
16:54:fe:ed:56:ef:22:55:d8:65:e8:ed:af:6e:06:
7b:97:57:f7:df:06:10:cb:b6:db:d7:c3:54:1e:2b:
7b:73:8d:a0:0f:e0:b4:04:bb:0e:cf:02:41:c5:54:
92:ec:9e:14:75:28:10:ff:e2:8b:5e:4d:13:82:21:
59:10:b9:68:f3:c7:50:8d:a0:13:c2:d1:f5:13:12:
a2:7e:59:13:ab:70:44:48:b4:41:24:91:8f:23:73:
27:fc:02:14:91:03:2a:93:e2:e4:25:fc:f2:32:8e:
9e:10:88:e1:5a:d8:8e:d3:13:6e:b9:75:c0:04:82:
0a:18:e9:54:a6:70:c7:4e:6e:d4:d9:cd:2c:2b:08:
8c:8a:f3:6c:9b:6b:88:67:c4:f0:a7:09:fa:e8:9f:
63:12:86:d2:3b:5d:41:e0:69:7b:19:b9:43:f8:b6:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1C:EA:FB:F3:26:EB:0A:76:09:1B:00:94:04:AA:C0:B4:3F:E6:18
X509v3 Authority Key Identifier:
keyid:A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:39:4c:b2:56:e2:5e:e2:7e:18:19:85:14:a0:6d:d4:83:1b:
97:75:f9:c3:fa:f0:c7:7f:66:42:df:1f:53:a2:c3:24:8f:3d:
37:d7:e3:88:ca:62:7c:5f:6e:2d:13:6b:23:14:a6:65:31:d8:
f8:85:bc:69:fa:53:c8:2a:bc:a0:f6:1f:50:36:1f:76:d0:2e:
78:20:58:1e:25:c8:7a:7e:57:f8:7e:0a:a5:28:32:2a:65:17:
19:ed:e4:be:3c:16:ff:96:af:1a:02:49:27:44:26:57:03:40:
02:de:71:0d:a3:1e:07:8d:6c:b5:8b:e8:7f:f2:f1:b6:7a:97:
27:ae:51:52:f9:ac:ab:a1:ae:be:31:e2:c6:cf:6e:6b:45:65:
61:9e:c4:a5:5d:5a:da:d2:c8:7f:1f:a0:20:b2:68:7f:17:00:
28:5d:c8:d3:68:dd:ea:24:09:f5:2d:e7:ed:fe:a1:fa:2e:5f:
05:69:97:46:40:bf:8e:fc:dc:34:24:09:a6:0b:0d:f8:f9:b1:
15:85:ec:26:37:1e:47:67:a8:30:4b:53:66:ae:fe:23:42:29:
c2:3f:65:de:39:6e:ac:18:b3:ee:30:56:d5:1d:d9:51:8d:a2:
9a:5f:cc:98:3b:1f:13:50:6a:03:a8:40:52:94:5e:df:b0:5d:
10:80:5d:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BP65mIfnN5bP2k0RMdt3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Zjg2Mjc1ZGMyMWM2MWRhMGNlY2QxMjdlOTc3NGNjYWEz
MmIwYmIwHhcNMjUwMTMxMTEwMDMxWhcNMjUwMjAxMTEwMDMxWjAzMTEwLwYDVQQD
Eyg1NTFjZWFmYmYzMjZlYjBhNzYwOTFiMDA5NDA0YWFjMGI0M2ZlNjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspSFk0DqcNQNBaKlrWdQTfHrPk0K
bPsvhOD4KXFZa3ZO4NNllAGiEBhC3ZuqBGUifmiSiUk9R1qpN7gYvU58Oivh9HOd
TK9LxjIVq3CgkO54uQfVRTnwS0IWVP7tVu8iVdhl6O2vbgZ7l1f33wYQy7bb18NU
Hit7c42gD+C0BLsOzwJBxVSS7J4UdSgQ/+KLXk0TgiFZELlo88dQjaATwtH1ExKi
flkTq3BESLRBJJGPI3Mn/AIUkQMqk+LkJfzyMo6eEIjhWtiO0xNuuXXABIIKGOlU
pnDHTm7U2c0sKwiMivNsm2uIZ8Twpwn66J9jEobSO11B4Gl7GblD+LYVIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUc6vvzJusKdgkbAJQEqsC0P+YYMB8GA1UdIwQY
MBaAFKT4YnXcIcYdoM7NEn6XdMyqMrC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBoaWRkd2h4aDJnenMwU2ZwZDB6S295c0xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YThiZjItNmNiMy00OWFlLTllMzIt
ODgyOWVlNjYxYzY0LzEvcFBoaWRkd2h4aDJnenMwU2ZwZDB6S295c0xzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YThiZjItNmNiMy00OWFlLTllMzItODgyOWVlNjYxYzY0
LzEvcFBoaWRkd2h4aDJnenMwU2ZwZDB6S295c0xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjlMslbi
XuJ+GBmFFKBt1IMbl3X5w/rwx39mQt8fU6LDJI89N9fjiMpifF9uLRNrIxSmZTHY
+IW8afpTyCq8oPYfUDYfdtAueCBYHiXIen5X+H4KpSgyKmUXGe3kvjwW/5avGgJJ
J0QmVwNAAt5xDaMeB41stYvof/LxtnqXJ65RUvmsq6GuvjHixs9ua0VlYZ7EpV1a
2tLIfx+gILJofxcAKF3I02jd6iQJ9S3n7f6h+i5fBWmXRkC/jvzcNCQJpgsN+Pmx
FYXsJjceR2eoMEtTZq7+I0Ipwj9l3jlurBiz7jBW1R3ZUY2iml/MmDsfE1BqA6hA
UpRe37BdEIBdVw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:42 2025 by rpki-client