Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
File: PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft (raw, json)
Hash identifier: H3koRm6L78YLjbEtHmhH4RJUA5XC1M3opogXtZnHw/k=
Subject key identifier: F7:02:28:43:77:DC:3F:1D:B5:36:BA:0C:09:DB:C6:63:D9:D2:BE:45
Authority key identifier: 3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
Certificate issuer: /CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Certificate serial: 0194BBCDD174195CC1D83D5BB73BFF856E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl (hash: 2g6UXzO8vqS6GIdsMpyABuZ6EWeItxpkpxxF98CEfkk=)
2: baHbcRR9kf1ghjeGFAS82cVbM5E.roa (hash: ryV49aEsL3mdbzWN2VnZ4BiiOTM51N9BlYGHQV8L9fI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d1:74:19:5c:c1:d8:3d:5b:b7:3b:ff:85:6e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=f702284377dc3f1db536ba0c09dbc663d9d2be45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:27:ae:b1:32:4c:34:e6:19:da:a2:36:46:fe:
51:3c:b8:11:40:4b:12:50:9b:69:6c:85:fd:6b:69:
f7:4f:29:66:c9:97:c3:b5:81:1b:8b:92:91:ca:0b:
fc:71:3e:c6:3b:e9:d5:70:0d:2c:e1:d7:f9:51:35:
14:d0:a3:62:d2:27:ba:d8:de:67:98:c6:86:a6:5b:
e9:e5:6d:45:9c:b9:98:c4:a5:35:49:66:ad:0c:f7:
83:a1:11:bf:a7:5d:3b:8a:31:9f:fc:95:6c:0e:7e:
5a:7b:27:cd:9b:6d:88:91:79:a1:5b:91:17:22:70:
33:e8:93:9c:08:18:90:09:dc:9d:1b:6b:89:82:98:
23:14:49:5d:c9:b0:43:fe:39:43:c9:0c:d0:2d:cb:
bc:91:bc:78:5b:40:27:48:05:56:1c:b7:f2:9d:93:
7e:14:9b:ef:14:8b:0e:3c:33:85:da:c9:c1:38:b7:
5b:58:ef:54:66:53:9a:e4:de:94:6b:81:87:a6:18:
49:f9:fe:cb:c7:6d:fb:03:9d:25:e4:d8:3b:03:c6:
ed:f0:62:f5:df:55:32:bd:84:4d:09:e0:08:16:5d:
ff:64:87:3c:58:65:9e:a8:16:05:b8:0f:6d:cb:f7:
63:1f:34:8f:ac:0c:00:e4:59:b5:06:2d:d4:df:ae:
e7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:02:28:43:77:DC:3F:1D:B5:36:BA:0C:09:DB:C6:63:D9:D2:BE:45
X509v3 Authority Key Identifier:
keyid:3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5b:30:d3:2b:73:6b:98:9a:c8:49:72:b4:fb:be:07:4f:8d:
0d:6b:c6:d0:03:70:34:ce:1f:c5:cf:9a:02:9d:5d:ec:a3:92:
a9:44:fe:11:76:f9:46:a3:71:e4:9a:e4:d7:61:ce:bc:0b:7d:
a6:0c:b6:23:99:50:9d:ad:a9:8f:ea:2a:05:0e:08:62:ba:e8:
6a:67:fb:2c:04:aa:f3:b8:7c:3c:0a:76:0e:3a:66:26:5d:ef:
f2:b4:3d:78:4c:1a:5c:13:df:4c:36:71:4c:9f:d3:96:44:e1:
39:ba:45:eb:8e:51:6d:ee:55:aa:9f:c9:1f:d4:83:a4:2e:81:
d0:66:bf:a0:f9:3b:96:66:b3:5b:46:6e:05:a4:4a:1b:b2:45:
05:04:e1:92:d1:a1:5a:c7:42:46:bf:81:e1:81:48:d8:92:99:
e7:09:17:e2:b5:19:58:b3:94:0b:dc:6d:92:9b:d3:91:a7:f2:
92:eb:25:42:d9:73:59:7d:c3:fc:8c:b5:29:8a:33:93:92:0d:
08:65:8d:d9:ba:5c:68:7e:7a:6d:92:cc:bf:ba:8a:1b:1e:fc:
98:9a:14:73:ce:b0:1a:46:43:9e:0f:cc:1f:45:e0:66:9b:e1:
10:01:7b:90:4b:a2:75:25:8a:c6:0d:53:0e:f5:00:06:f5:7f:
50:df:f7:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdF0GVzB2D1btzv/hW5AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMGVmNDM1OGFkYjA0MGYzMzNkOTM2MWE0MjYxZWEwZTUw
ZDM4YWIwHhcNMjUwMTMxMTAwMDE1WhcNMjUwMjAxMTAwMDE1WjAzMTEwLwYDVQQD
EyhmNzAyMjg0Mzc3ZGMzZjFkYjUzNmJhMGMwOWRiYzY2M2Q5ZDJiZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ieusTJMNOYZ2qI2Rv5RPLgRQEsS
UJtpbIX9a2n3TylmyZfDtYEbi5KRygv8cT7GO+nVcA0s4df5UTUU0KNi0ie62N5n
mMaGplvp5W1FnLmYxKU1SWatDPeDoRG/p107ijGf/JVsDn5aeyfNm22IkXmhW5EX
InAz6JOcCBiQCdydG2uJgpgjFEldybBD/jlDyQzQLcu8kbx4W0AnSAVWHLfynZN+
FJvvFIsOPDOF2snBOLdbWO9UZlOa5N6Ua4GHphhJ+f7Lx237A50l5Ng7A8bt8GL1
31UyvYRNCeAIFl3/ZIc8WGWeqBYFuA9ty/djHzSPrAwA5Fm1Bi3U367n8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcCKEN33D8dtTa6DAnbxmPZ0r5FMB8GA1UdIwQY
MBaAFD0O9DWK2wQPMz2TYaQmHqDlDTirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFE3ME5ZcmJCQTh6UFpOaHBDWWVvT1VOT0tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mOTQ2ZWYtOTYxOS00YmRkLTlmNDct
ZDJiYzk2YTk4YTE4LzEvUFE3ME5ZcmJCQTh6UFpOaHBDWWVvT1VOT0tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9mOTQ2ZWYtOTYxOS00YmRkLTlmNDctZDJiYzk2YTk4YTE4
LzEvUFE3ME5ZcmJCQTh6UFpOaHBDWWVvT1VOT0tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFsw0ytz
a5iayElytPu+B0+NDWvG0ANwNM4fxc+aAp1d7KOSqUT+EXb5RqNx5Jrk12HOvAt9
pgy2I5lQna2pj+oqBQ4IYrroamf7LASq87h8PAp2DjpmJl3v8rQ9eEwaXBPfTDZx
TJ/TlkThObpF645Rbe5Vqp/JH9SDpC6B0Ga/oPk7lmazW0ZuBaRKG7JFBQThktGh
WsdCRr+B4YFI2JKZ5wkX4rUZWLOUC9xtkpvTkafykuslQtlzWX3D/Iy1KYozk5IN
CGWN2bpcaH56bZLMv7qKGx78mJoUc86wGkZDng/MH0XgZpvhEAF7kEuidSWKxg1T
DvUABvV/UN/3cg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:55 2025 by rpki-client