Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier: OPB8mzmQKh2fQSQALTGtkcViiVJUl08YuqgdvkIs+Tk=
Subject key identifier: EF:87:18:60:E3:F0:B6:8B:6B:FF:94:BD:1C:76:34:E6:43:38:8B:D3
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 0194BC051CFDD066F36054721911CD0F9661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number: 0CF0
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: 8e7eehP1l-DLf5STdKJWnoHYbKQ.roa (hash: K8SacJP+Z6piM83BegnBqW6J1m/glPf8EgTcnUYrotM=)
2: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: ewcfKZiOiloHQtc2s+NIPRSsqtzERaczu6QelETttqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1c:fd:d0:66:f3:60:54:72:19:11:cd:0f:96:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=ef871860e3f0b68b6bff94bd1c7634e643388bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c6:7c:43:cf:5a:56:90:ef:90:96:76:73:14:
0b:e0:b6:e6:0f:4c:fb:92:61:07:a0:61:1d:b8:75:
76:8e:11:30:8a:e2:90:58:ae:8f:13:88:11:29:e5:
5d:2e:e0:58:19:fd:7d:40:ce:77:c2:7e:92:dc:6c:
45:9e:be:1a:df:4e:bd:1a:8a:16:56:3a:50:cb:10:
04:69:ff:87:32:9d:c5:60:6e:3c:fa:46:9b:22:ec:
c5:ab:c5:3e:d2:55:4b:20:58:fa:4d:8a:21:e2:13:
ef:70:8c:7d:6a:a8:44:33:23:24:1c:d2:68:ea:96:
a1:dc:34:4a:cf:77:99:e0:14:41:36:ee:e8:b4:97:
5b:57:57:2c:1b:ed:ea:a2:7f:56:78:2b:67:0f:ee:
65:1c:2f:40:f7:39:1f:6b:9d:71:2f:3b:e5:e6:d7:
b9:60:fa:40:0b:fa:73:97:bf:8c:94:2d:dd:97:3a:
c0:9d:85:73:b7:fb:9c:c0:22:07:bc:34:91:3e:42:
3a:b0:1c:84:59:88:f3:f9:61:5f:05:e1:7d:32:8b:
74:03:0a:10:c8:0d:a4:63:ac:cc:63:8c:76:7d:99:
54:ad:e2:db:6b:5f:34:c9:91:8e:f4:ef:62:ae:96:
8d:3c:5b:e5:f1:6d:9d:3e:fc:10:81:86:4f:d6:cd:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:87:18:60:E3:F0:B6:8B:6B:FF:94:BD:1C:76:34:E6:43:38:8B:D3
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6e:7b:e3:46:25:f3:50:a6:86:a6:fb:c6:69:e7:3d:7f:12:
25:40:50:29:c4:d6:97:74:4c:e0:4c:7a:53:3e:8e:15:5b:22:
33:a8:42:39:64:57:3c:fb:d4:bf:7a:b6:2e:af:1e:1b:29:8c:
c1:09:52:f5:3d:15:04:2a:df:7f:d4:85:1b:47:c5:4f:4b:3b:
79:36:23:47:cb:65:3f:2d:1b:fe:61:5a:43:c0:e7:1e:80:0e:
49:75:97:8b:09:dc:6f:cc:c8:fe:eb:41:2a:a4:e4:ca:e7:d6:
09:2a:10:32:8e:4f:7d:b7:ed:90:9e:f7:37:07:78:6d:95:0b:
40:73:18:c9:45:70:68:60:be:3b:5c:9d:f8:4b:c2:ba:06:69:
1c:f6:f7:9e:44:12:48:02:58:22:0b:d7:2b:8c:40:52:86:6d:
e7:76:41:7b:f5:c7:17:81:2d:cc:f6:4d:07:7b:5d:ff:9e:5a:
45:96:34:8a:9c:82:2d:1c:cd:23:d7:2d:bb:87:65:e3:bf:c3:
82:e6:dc:c7:39:fb:40:43:dc:25:78:a3:88:dc:e2:e0:9e:8c:
d4:74:7e:39:bb:19:96:62:0d:3c:b6:47:cd:37:13:29:6c:08:
dd:6f:fb:00:ca:a1:43:5a:6d:e0:53:e2:3c:9d:d7:63:98:00:
3b:e5:a8:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRz90GbzYFRyGRHND5ZhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTYwNzJjYTAyNTJmYWI1MDY1OGQ3MzZmZjJjNjBjMTYy
OWRjNzYwHhcNMjUwMTMxMTEwMDM5WhcNMjUwMjAxMTEwMDM5WjAzMTEwLwYDVQQD
EyhlZjg3MTg2MGUzZjBiNjhiNmJmZjk0YmQxYzc2MzRlNjQzMzg4YmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cZ8Q89aVpDvkJZ2cxQL4LbmD0z7
kmEHoGEduHV2jhEwiuKQWK6PE4gRKeVdLuBYGf19QM53wn6S3GxFnr4a3069GooW
VjpQyxAEaf+HMp3FYG48+kabIuzFq8U+0lVLIFj6TYoh4hPvcIx9aqhEMyMkHNJo
6pah3DRKz3eZ4BRBNu7otJdbV1csG+3qon9WeCtnD+5lHC9A9zkfa51xLzvl5te5
YPpAC/pzl7+MlC3dlzrAnYVzt/ucwCIHvDSRPkI6sByEWYjz+WFfBeF9Mot0AwoQ
yA2kY6zMY4x2fZlUreLba180yZGO9O9irpaNPFvl8W2dPvwQgYZP1s3jjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+HGGDj8LaLa/+UvRx2NOZDOIvTMB8GA1UdIwQY
MBaAFD0WByygJS+rUGWNc2/yxgwWKdx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yZmJmMmMtNTQyZi00Yzk4LTk5ZGIt
YTRlNWRlOGVlNzE2LzEvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8yZmJmMmMtNTQyZi00Yzk4LTk5ZGItYTRlNWRlOGVlNzE2
LzEvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANG5740Yl
81Cmhqb7xmnnPX8SJUBQKcTWl3RM4Ex6Uz6OFVsiM6hCOWRXPPvUv3q2Lq8eGymM
wQlS9T0VBCrff9SFG0fFT0s7eTYjR8tlPy0b/mFaQ8DnHoAOSXWXiwncb8zI/utB
KqTkyufWCSoQMo5PfbftkJ73Nwd4bZULQHMYyUVwaGC+O1yd+EvCugZpHPb3nkQS
SAJYIgvXK4xAUoZt53ZBe/XHF4EtzPZNB3td/55aRZY0ipyCLRzNI9ctu4dl47/D
gubcxzn7QEPcJXijiNzi4J6M1HR+ObsZlmINPLZHzTcTKWwI3W/7AMqhQ1pt4FPi
PJ3XY5gAO+Wobw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:15:09 2025 by rpki-client