Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
File: pHwKyKnV9ixJHUsXyyErUsDnVgc.mft (raw, json)
Hash identifier: 6+qMzEZqRYvNjDvD1zHSGO/NQEbVMLjXCVmpQ2IbQ8o=
Subject key identifier: 49:82:73:4D:52:40:6A:D0:A7:D3:7B:98:59:79:62:7E:3C:8F:CB:59
Authority key identifier: A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07
Certificate issuer: /CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607
Certificate serial: 0194BBCE1CB092A93D456D64B591B42FB3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
Manifest number: 106D
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: fFbdm0OeWE1GYVnCMSWrkaX1IWg.roa (hash: H5NNOHLLRS0hsZTLRHxW4ce45JGvEraIddrEMS924Cg=)
2: pHwKyKnV9ixJHUsXyyErUsDnVgc.crl (hash: NLNLgiHi9gCS/5WQsCVxnh/5yYMDgSIlEYR+soLVh+I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1c:b0:92:a9:3d:45:6d:64:b5:91:b4:2f:b3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=4982734d52406ad0a7d37b985979627e3c8fcb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:43:c7:09:35:0a:1d:b7:5d:4d:92:c8:e6:
4f:ae:6d:91:1f:f9:23:f8:78:6c:50:3f:3d:cf:7d:
b5:b3:1d:0d:c6:07:55:55:7f:83:56:74:94:6c:be:
35:31:0f:6a:5c:42:03:f5:57:35:5d:3d:02:5c:5c:
44:df:ae:00:03:df:62:d2:03:b9:2a:90:d6:e9:68:
d2:c3:88:3a:47:4a:b7:2e:86:8c:4d:14:59:01:3d:
4b:f6:0e:5c:42:55:be:bf:05:48:57:fb:ce:4a:ed:
50:a5:5b:0f:50:7e:86:02:00:77:a8:d8:89:f5:74:
09:9a:56:2a:73:a5:48:90:cc:3f:8f:64:e8:d2:a2:
de:4e:0c:66:9b:16:d3:f7:a3:51:38:e8:f4:84:92:
2c:32:11:97:14:e3:99:2c:25:c9:2d:98:c2:53:c8:
33:81:c8:f1:62:ac:f4:bf:28:c3:4a:58:b5:a1:e3:
81:2c:a2:7d:02:7c:72:9f:1a:85:d4:d2:92:d6:d9:
d1:d2:e1:2e:65:5b:59:bc:d2:f2:48:9d:8c:19:ba:
5a:bc:aa:95:d6:23:bf:a4:b4:55:3f:50:db:99:20:
37:67:6b:49:b8:50:5a:f3:9b:6a:d0:3a:1c:82:ac:
30:d8:d8:c0:ed:de:9a:13:9d:6f:3f:7e:bf:99:1f:
94:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:82:73:4D:52:40:6A:D0:A7:D3:7B:98:59:79:62:7E:3C:8F:CB:59
X509v3 Authority Key Identifier:
keyid:A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:39:73:f2:fb:4b:5d:28:c1:57:89:a6:e6:d4:b0:46:ce:7f:
72:48:87:ea:23:97:a5:ea:31:30:2a:9f:c3:3f:c7:8e:43:f5:
48:93:82:77:25:b7:22:02:72:23:00:2c:8c:7b:26:b2:e1:66:
9d:ed:e4:d8:bd:59:37:bd:4f:e3:95:f2:ad:bf:5d:87:0d:16:
2b:93:e4:62:99:6e:03:cd:46:3b:02:44:05:37:ca:d3:f0:35:
13:77:58:c0:18:0b:63:90:ed:cd:5a:01:38:fe:bb:eb:01:05:
24:15:85:a1:50:7c:99:9b:07:7f:d2:83:61:97:1c:3f:55:7f:
37:35:68:c4:de:f9:96:39:bb:7d:85:ca:27:e3:d6:5d:b2:2c:
17:f9:0e:0d:f9:af:ca:8d:a6:53:b6:ed:e8:d8:1b:66:fa:e3:
1a:b5:02:94:7f:19:5f:80:f2:28:64:e9:10:10:04:d1:dd:cb:
b3:63:6a:51:13:11:24:41:2e:78:ec:63:52:1e:42:17:99:49:
14:5f:7c:a0:58:27:b4:72:8e:0a:1f:50:03:2e:2d:de:da:af:
b1:e8:f5:d8:da:5c:3a:c4:8b:ff:44:30:0a:b4:00:a6:57:2c:
00:a2:57:a0:38:56:3e:56:7e:f2:46:b2:c9:3d:4f:36:0b:a9:
ea:c7:a4:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zhywkqk9RW1ktZG0L7PKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0N2MwYWM4YTlkNWY2MmM0OTFkNGIxN2NiMjEyYjUyYzBl
NzU2MDcwHhcNMjUwMTMxMTAwMDM0WhcNMjUwMjAxMTAwMDM0WjAzMTEwLwYDVQQD
Eyg0OTgyNzM0ZDUyNDA2YWQwYTdkMzdiOTg1OTc5NjI3ZTNjOGZjYjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDhDxwk1Ch23XU2SyOZPrm2RH/kj
+HhsUD89z321sx0NxgdVVX+DVnSUbL41MQ9qXEID9Vc1XT0CXFxE364AA99i0gO5
KpDW6WjSw4g6R0q3LoaMTRRZAT1L9g5cQlW+vwVIV/vOSu1QpVsPUH6GAgB3qNiJ
9XQJmlYqc6VIkMw/j2To0qLeTgxmmxbT96NROOj0hJIsMhGXFOOZLCXJLZjCU8gz
gcjxYqz0vyjDSli1oeOBLKJ9AnxynxqF1NKS1tnR0uEuZVtZvNLySJ2MGbpavKqV
1iO/pLRVP1DbmSA3Z2tJuFBa85tq0Docgqww2NjA7d6aE51vP36/mR+UxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmCc01SQGrQp9N7mFl5Yn48j8tZMB8GA1UdIwQY
MBaAFKR8Csip1fYsSR1LF8shK1LA51YHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yNWM5MWQtNWEwNS00NmEyLTlhNzkt
NDIwY2MyNTFlNWViLzEvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8yNWM5MWQtNWEwNS00NmEyLTlhNzktNDIwY2MyNTFlNWVi
LzEvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDlz8vtL
XSjBV4mm5tSwRs5/ckiH6iOXpeoxMCqfwz/HjkP1SJOCdyW3IgJyIwAsjHsmsuFm
ne3k2L1ZN71P45Xyrb9dhw0WK5PkYpluA81GOwJEBTfK0/A1E3dYwBgLY5DtzVoB
OP676wEFJBWFoVB8mZsHf9KDYZccP1V/NzVoxN75ljm7fYXKJ+PWXbIsF/kODfmv
yo2mU7bt6NgbZvrjGrUClH8ZX4DyKGTpEBAE0d3Ls2NqURMRJEEueOxjUh5CF5lJ
FF98oFgntHKOCh9QAy4t3tqvsej12NpcOsSL/0QwCrQAplcsAKJXoDhWPlZ+8kay
yT1PNgup6sekew==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:44:57 2025 by rpki-client