Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
File: pkDHUev7SAfYRiLoBss9C53YEGk.mft (raw, json)
Hash identifier: J1fpfZEPRAgflkw5q/g5kgZz8STcjvmBPf5ujDyYlck=
Subject key identifier: E1:A2:9F:89:0C:37:CC:A3:C8:5C:9F:0F:B1:81:91:BA:BD:83:9F:2F
Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Certificate serial: 0194BD8549EF87B190B054924A5860944234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: CqoX7DJIz6T-m3NHJ01LCtyGJFE.roa (hash: 32gG2ZUMfd1jjxqZY90ktdKNZmqWxjZXungJm+FeL3s=)
2: ZCRNSq91ZKzRcSK6x3pKdZV_4Rw.roa (hash: SLb/dN4BABY7//UWc03uIXxQcoqVDd7HnpJMkhWH2bA=)
3: pkDHUev7SAfYRiLoBss9C53YEGk.crl (hash: YRp7Q9gDz6aga0dr0xUWbVANFFedOrXgoACxfBkLwok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:49:ef:87:b1:90:b0:54:92:4a:58:60:94:42:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=e1a29f890c37cca3c85c9f0fb18191babd839f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:c1:4e:f6:49:bb:98:98:3d:30:4f:54:a0:
81:aa:b8:aa:e7:67:b1:d1:25:62:c7:df:9a:28:e9:
70:a4:81:00:a4:79:bd:a5:c3:ff:64:ac:31:c0:c9:
0d:0f:86:66:b7:a0:14:90:ed:e0:0e:a2:3f:bd:8e:
0f:d7:f6:58:75:31:48:85:f6:0c:49:77:83:01:3b:
98:2c:4c:04:f8:8f:9b:dc:21:56:93:40:db:08:81:
39:a0:51:36:50:01:bb:ad:6f:ba:d9:8f:24:48:ab:
2c:a1:b3:a1:72:b4:8e:74:9b:67:5e:b0:a8:71:24:
d2:f1:c5:a4:42:81:d7:c9:98:9a:53:5b:09:94:7a:
cc:b8:05:10:ef:c6:c6:3e:17:ab:6d:ba:aa:e6:8c:
a2:32:ce:79:b8:65:c3:30:13:90:51:2a:ce:5b:d0:
96:e1:f2:1c:51:bd:16:dc:3a:a8:39:ed:10:72:27:
1f:63:08:fc:08:7a:94:a3:29:87:29:a3:19:05:bb:
95:38:16:eb:dc:11:55:d3:50:5b:80:df:59:72:7e:
b4:ce:1b:fc:08:43:89:a0:4e:e2:55:41:c1:2a:b7:
52:bf:b7:86:eb:36:6c:eb:74:0a:39:ee:ae:1f:d5:
12:3e:e1:88:b5:ed:32:97:fd:2e:59:25:89:b5:dc:
d8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A2:9F:89:0C:37:CC:A3:C8:5C:9F:0F:B1:81:91:BA:BD:83:9F:2F
X509v3 Authority Key Identifier:
keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:51:7e:5b:87:03:12:51:f7:8d:65:b3:f9:1f:7e:e8:e5:43:
c4:17:aa:b3:bb:bf:1d:8f:51:fa:98:ed:2d:6a:f9:af:40:3e:
56:5c:87:88:e8:b5:9d:75:79:25:99:f8:1c:55:f2:93:46:50:
6d:6a:7a:19:f9:ea:dd:79:cf:b5:de:5f:4f:94:77:2b:4c:16:
bb:6d:5e:f7:23:86:11:09:e9:f8:d0:70:f3:3b:fb:97:34:5a:
dd:3b:f6:e3:49:15:24:0b:bf:1f:99:c9:27:c2:37:7b:aa:fc:
e3:a8:e8:de:91:32:81:77:40:76:be:a6:be:a2:6e:e6:9b:b5:
3c:ee:fd:dd:2a:c4:51:cd:82:88:d2:0d:10:da:0c:71:d1:59:
dc:16:22:a0:dd:10:f3:7d:15:f9:0a:9d:72:9a:fc:e2:57:49:
68:36:91:67:d3:1f:c9:e5:30:f7:07:fa:5a:f3:2d:c1:e6:cc:
07:40:27:a3:f2:f1:31:3a:84:7d:6a:e6:e9:0a:58:81:b6:7e:
2e:56:21:8d:f3:86:89:5b:a2:6e:d2:6a:81:30:13:f1:88:9c:
29:d8:96:98:aa:6b:fe:99:2b:6d:1b:c4:57:2e:55:9b:88:07:
76:fb:15:0f:d7:1c:f0:01:4b:1c:33:b2:40:2d:9f:b6:10:4d:
6e:eb:60:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUnvh7GQsFSSSlhglEI0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDBjNzUxZWJmYjQ4MDdkODQ2MjJlODA2Y2IzZDBiOWRk
ODEwNjkwHhcNMjUwMTMxMTgwMDE2WhcNMjUwMjAxMTgwMDE2WjAzMTEwLwYDVQQD
EyhlMWEyOWY4OTBjMzdjY2EzYzg1YzlmMGZiMTgxOTFiYWJkODM5ZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzfBTvZJu5iYPTBPVKCBqriq52ex
0SVix9+aKOlwpIEApHm9pcP/ZKwxwMkND4Zmt6AUkO3gDqI/vY4P1/ZYdTFIhfYM
SXeDATuYLEwE+I+b3CFWk0DbCIE5oFE2UAG7rW+62Y8kSKssobOhcrSOdJtnXrCo
cSTS8cWkQoHXyZiaU1sJlHrMuAUQ78bGPherbbqq5oyiMs55uGXDMBOQUSrOW9CW
4fIcUb0W3DqoOe0QcicfYwj8CHqUoymHKaMZBbuVOBbr3BFV01BbgN9Zcn60zhv8
CEOJoE7iVUHBKrdSv7eG6zZs63QKOe6uH9USPuGIte0yl/0uWSWJtdzYqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGin4kMN8yjyFyfD7GBkbq9g58vMB8GA1UdIwQY
MBaAFKZAx1Hr+0gH2EYi6AbLPQud2BBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84YTVhMmUtNGQzMy00YTJjLWFkZjMt
MDI2YjhjZjY5MWJhLzEvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84YTVhMmUtNGQzMy00YTJjLWFkZjMtMDI2YjhjZjY5MWJh
LzEvcGtESFVldjdTQWZZUmlMb0JzczlDNTNZRUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFF+W4cD
ElH3jWWz+R9+6OVDxBeqs7u/HY9R+pjtLWr5r0A+VlyHiOi1nXV5JZn4HFXyk0ZQ
bWp6Gfnq3XnPtd5fT5R3K0wWu21e9yOGEQnp+NBw8zv7lzRa3Tv240kVJAu/H5nJ
J8I3e6r846jo3pEygXdAdr6mvqJu5pu1PO793SrEUc2CiNINENoMcdFZ3BYioN0Q
830V+Qqdcpr84ldJaDaRZ9MfyeUw9wf6WvMtwebMB0Ano/LxMTqEfWrm6QpYgbZ+
LlYhjfOGiVuibtJqgTAT8YicKdiWmKpr/pkrbRvEVy5Vm4gHdvsVD9cc8AFLHDOy
QC2fthBNbutgXQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:34 2025 by rpki-client