Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
File: PSGIrVl7WKqllwA_jwhDSWxsfJM.mft (raw, json)
Hash identifier: Jy2wjwXhAgyOo7CTGKvpG2saBTNeCVl53qx0QXIHYdU=
Subject key identifier: E3:C3:CE:48:BC:71:8F:8F:75:76:1E:EC:A5:88:1F:9E:CC:C3:E6:7E
Authority key identifier: 3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
Certificate issuer: /CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Certificate serial: 0194BCA9791A511D8E7D6D378FBB3AF00896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
Manifest number: 0D2D
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: K-fnSlqCnsMuB-NlWaWBJUmC4FM.roa (hash: j54MZjizcVLzs5xFTxfuwkhp1hDwpOUSaYB4Ws5FVDc=)
2: PSGIrVl7WKqllwA_jwhDSWxsfJM.crl (hash: gK7/YzSR7EPZ2rOcpi0FxMM8go7k/zKDWEGRG8e5M8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:79:1a:51:1d:8e:7d:6d:37:8f:bb:3a:f0:08:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=e3c3ce48bc718f8f75761eeca5881f9eccc3e67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:96:9b:88:86:f3:38:fb:a1:89:fb:37:95:
6c:63:d5:bd:04:73:9c:8c:fb:44:08:8e:65:64:dc:
bd:55:94:42:2c:80:ef:76:cc:2a:c2:9f:aa:ab:cf:
48:cb:b5:da:f6:4c:d8:15:8a:4e:0a:9b:a8:c2:76:
bb:e4:ae:e2:b9:84:c5:da:82:c7:da:f2:0a:ed:a9:
4b:96:ec:40:83:8a:30:de:8a:47:d0:9b:2f:6a:77:
b9:77:74:94:3e:bb:6d:d0:2c:29:69:6d:34:c0:93:
1f:b8:73:89:71:84:e3:6a:48:eb:88:1b:fb:97:bb:
4c:46:e2:22:39:2f:c6:4c:4a:2c:0a:96:4c:df:92:
ba:39:22:ce:2f:07:60:b5:11:48:51:6c:48:74:8d:
02:7c:d7:18:87:52:41:4d:73:f9:ae:b3:e9:ac:40:
e1:0c:38:39:bd:d6:37:b7:04:d6:c3:48:03:55:d3:
89:dd:fe:47:32:2e:28:ba:78:14:46:21:a3:a0:ab:
10:17:e9:86:93:53:f0:35:5d:aa:fb:32:20:05:f8:
1c:0d:b5:b1:62:e7:1b:e6:9e:e2:8b:3d:12:e7:fe:
00:e7:5b:e4:57:25:d1:61:43:53:39:c9:58:bf:f5:
22:df:fc:ab:6c:a5:69:e0:11:4d:21:e5:2e:6c:c9:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C3:CE:48:BC:71:8F:8F:75:76:1E:EC:A5:88:1F:9E:CC:C3:E6:7E
X509v3 Authority Key Identifier:
keyid:3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:58:d0:c3:6c:83:fa:f7:c2:24:d5:6d:d0:84:b2:0e:73:83:
7b:4d:be:92:8f:53:ea:9b:3c:80:01:8d:01:9d:7d:ec:32:e5:
b0:e0:09:ae:1e:c7:30:ff:ea:3f:78:b9:00:7b:40:92:8a:d7:
d7:f0:e0:d9:93:bb:c6:c1:c5:8d:68:19:9d:c3:03:7e:ae:c7:
5b:3c:74:29:a4:fd:a8:d3:b3:dd:57:08:59:13:b8:10:51:15:
93:9c:ef:50:22:d3:00:c3:b3:59:f9:59:04:6e:e1:3b:9b:ba:
80:71:51:59:8d:77:5b:78:b3:3b:6c:a2:e9:53:3f:f8:60:7c:
d9:46:a5:13:91:6a:a0:df:0a:6a:09:1f:a2:ae:90:db:40:8e:
8f:8e:2d:0a:b1:e1:eb:17:e9:41:dd:52:7d:dd:37:ae:2d:49:
25:d8:67:62:d8:a7:2d:f2:bd:68:21:47:db:b9:d7:52:40:c6:
97:7a:08:f5:35:35:3e:64:1a:49:1a:34:a7:df:1d:6b:4b:42:
4b:3f:16:ff:bc:fc:a5:9e:fc:a4:bb:f8:6f:ad:fe:a6:67:aa:
8d:a3:92:e4:b8:80:7d:2f:b3:95:59:61:b4:6c:71:ba:a2:10:
34:84:65:0c:1e:5a:4c:65:84:a9:0c:35:a4:14:12:13:4e:51:
cd:6c:82:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qXkaUR2OfW03j7s68AiWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMjE4OGFkNTk3YjU4YWFhNTk3MDAzZjhmMDg0MzQ5NmM2
YzdjOTMwHhcNMjUwMTMxMTQwMDEwWhcNMjUwMjAxMTQwMDEwWjAzMTEwLwYDVQQD
EyhlM2MzY2U0OGJjNzE4ZjhmNzU3NjFlZWNhNTg4MWY5ZWNjYzNlNjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN2Wm4iG8zj7oYn7N5VsY9W9BHOc
jPtECI5lZNy9VZRCLIDvdswqwp+qq89Iy7Xa9kzYFYpOCpuowna75K7iuYTF2oLH
2vIK7alLluxAg4ow3opH0Jsvane5d3SUPrtt0CwpaW00wJMfuHOJcYTjakjriBv7
l7tMRuIiOS/GTEosCpZM35K6OSLOLwdgtRFIUWxIdI0CfNcYh1JBTXP5rrPprEDh
DDg5vdY3twTWw0gDVdOJ3f5HMi4oungURiGjoKsQF+mGk1PwNV2q+zIgBfgcDbWx
Yucb5p7iiz0S5/4A51vkVyXRYUNTOclYv/Ui3/yrbKVp4BFNIeUubMlcxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPDzki8cY+PdXYe7KWIH57Mw+Z+MB8GA1UdIwQY
MBaAFD0hiK1Ze1iqpZcAP48IQ0lsbHyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFNHSXJWbDdXS3FsbHdBX2p3aERTV3hzZkpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYmZkMGEtMDE3Zi00ODFmLWI2NzYt
YmMzNmZlZWI5MGIzLzEvUFNHSXJWbDdXS3FsbHdBX2p3aERTV3hzZkpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYmZkMGEtMDE3Zi00ODFmLWI2NzYtYmMzNmZlZWI5MGIz
LzEvUFNHSXJWbDdXS3FsbHdBX2p3aERTV3hzZkpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVjQw2yD
+vfCJNVt0ISyDnODe02+ko9T6ps8gAGNAZ197DLlsOAJrh7HMP/qP3i5AHtAkorX
1/Dg2ZO7xsHFjWgZncMDfq7HWzx0KaT9qNOz3VcIWRO4EFEVk5zvUCLTAMOzWflZ
BG7hO5u6gHFRWY13W3izO2yi6VM/+GB82UalE5FqoN8Kagkfoq6Q20COj44tCrHh
6xfpQd1Sfd03ri1JJdhnYtinLfK9aCFH27nXUkDGl3oI9TU1PmQaSRo0p98da0tC
Sz8W/7z8pZ78pLv4b63+pmeqjaOS5LiAfS+zlVlhtGxxuqIQNIRlDB5aTGWEqQw1
pBQSE05RzWyCeA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:47:39 2025 by rpki-client