Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
File: PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json)
Hash identifier: BlmDSwxbgRDXN3AEBI5/NoZkUDwsouhiMz8rlYvOYY4=
Subject key identifier: 8B:14:9E:BB:93:3C:10:20:6A:58:AF:FC:62:A7:11:7C:B9:7E:3A:59
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Certificate issuer: /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial: 0194BCAA07FEE3AD6747C14E677E622F34B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
Manifest number: 08A2
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: 8UJJGtq_kUeMGpA_LxLMvT6KUOA.roa (hash: scssOWu2Z8G04tK1VSokYhRpEIxnZd24NU6YQjvW3tc=)
2: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: jUX12lfhQvVhg/bAkfzgXKHgCKONGavfaaCV0BxCKFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:07:fe:e3:ad:67:47:c1:4e:67:7e:62:2f:34:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=8b149ebb933c10206a58affc62a7117cb97e3a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:e5:f8:0e:be:f8:49:fb:2b:fc:6d:5b:c4:
fa:05:f4:cc:68:18:18:5f:ae:cf:c7:8a:7d:cc:ad:
98:d8:58:62:22:75:78:96:a1:56:50:f0:c5:95:00:
13:72:1d:8d:f3:78:ee:fc:0d:df:22:cd:e2:07:29:
ba:63:06:1d:41:98:20:f8:24:97:2b:40:f3:6d:1b:
0c:1b:d2:45:b3:0d:57:13:cc:8e:1e:49:42:c7:d3:
e0:74:4f:7c:60:d4:81:45:86:db:71:62:25:de:57:
3a:ab:8c:5a:9e:d5:c8:92:96:43:0b:30:66:44:ff:
c1:84:36:9b:20:7c:29:5d:3a:ee:20:fe:5f:d8:a6:
c8:0e:e3:fd:bb:e0:8e:ac:e4:01:b0:b1:13:92:a5:
e1:4d:34:29:b9:16:75:bf:39:34:df:dd:c1:99:7a:
79:cc:93:ca:10:02:1a:d1:5a:c5:4e:22:1c:a0:e7:
d2:2a:fd:16:11:49:b8:e4:3f:ea:ef:b6:6c:db:a7:
1b:a7:61:15:fb:44:fc:1c:c5:3b:e5:f7:d2:8d:91:
36:53:2b:f2:f8:3a:7e:3a:38:92:f5:e3:52:4f:e5:
5d:21:29:c2:8f:e2:da:e8:ad:15:bc:5b:40:c3:7e:
05:b6:b0:ad:b1:64:ae:91:99:4d:fd:31:fa:ae:3f:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:14:9E:BB:93:3C:10:20:6A:58:AF:FC:62:A7:11:7C:B9:7E:3A:59
X509v3 Authority Key Identifier:
keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ac:f1:52:c9:45:2d:a1:d0:65:f8:20:36:92:61:db:79:d3:
19:31:fa:5f:af:d0:f3:19:20:2d:95:bf:26:af:e7:b7:f5:aa:
b1:2e:86:ab:9b:58:13:a5:60:d1:5a:8f:32:9a:3d:ca:45:f3:
cf:0d:b5:e5:cb:6c:82:95:0b:9b:a6:27:70:ee:e3:9c:74:61:
3b:2a:63:3d:2b:1e:a8:79:2f:26:50:d6:43:1b:5e:33:c8:93:
6d:f1:c0:2e:5f:96:d7:e4:85:8b:52:aa:87:f0:00:33:27:ec:
e5:57:64:85:b9:3b:61:d6:4f:09:7a:67:8a:24:f2:4e:58:b9:
7b:da:95:2b:80:4b:4b:be:05:63:46:e5:ab:8b:af:6f:d9:79:
98:81:fa:ce:0d:ea:ad:b5:d7:e1:50:a7:29:20:2a:37:13:e3:
89:70:e5:98:f3:fd:07:cf:fb:40:53:6d:8b:b3:ec:44:eb:20:
41:a9:97:3e:2d:3a:96:58:24:04:53:04:2d:38:35:fe:f8:72:
77:49:a2:ef:a1:5c:ff:38:54:d1:6f:17:67:85:65:7c:6d:b1:
dc:54:ba:85:5b:34:4d:fd:ef:4a:ad:f4:6c:ae:d8:fe:5a:77:
82:37:6d:7b:1b:66:74:0c:71:88:34:ec:9e:ae:b8:4b:6c:66:
5d:3b:d2:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgf+461nR8FOZ35iLzSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNzc1ZTFiOWZiMGFjOTNkNTYzYmE4ZTk3MDg4NGRhNTdi
NmUxOTcwHhcNMjUwMTMxMTQwMDQ3WhcNMjUwMjAxMTQwMDQ3WjAzMTEwLwYDVQQD
Eyg4YjE0OWViYjkzM2MxMDIwNmE1OGFmZmM2MmE3MTE3Y2I5N2UzYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSPl+A6++En7K/xtW8T6BfTMaBgY
X67Px4p9zK2Y2FhiInV4lqFWUPDFlQATch2N83ju/A3fIs3iBym6YwYdQZgg+CSX
K0DzbRsMG9JFsw1XE8yOHklCx9PgdE98YNSBRYbbcWIl3lc6q4xantXIkpZDCzBm
RP/BhDabIHwpXTruIP5f2KbIDuP9u+COrOQBsLETkqXhTTQpuRZ1vzk0393BmXp5
zJPKEAIa0VrFTiIcoOfSKv0WEUm45D/q77Zs26cbp2EV+0T8HMU75ffSjZE2Uyvy
+Dp+OjiS9eNST+VdISnCj+La6K0VvFtAw34FtrCtsWSukZlN/TH6rj8x5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsUnruTPBAgaliv/GKnEXy5fjpZMB8GA1UdIwQY
MBaAFDx3XhufsKyT1WO6jpcIhNpXtuGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMWRiYjctYmNmZC00YTYxLWE2NDEt
NGU1Njg2YmU2YjgyLzEvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMWRiYjctYmNmZC00YTYxLWE2NDEtNGU1Njg2YmU2Yjgy
LzEvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqazxUslF
LaHQZfggNpJh23nTGTH6X6/Q8xkgLZW/Jq/nt/WqsS6Gq5tYE6Vg0VqPMpo9ykXz
zw215ctsgpULm6YncO7jnHRhOypjPSseqHkvJlDWQxteM8iTbfHALl+W1+SFi1Kq
h/AAMyfs5Vdkhbk7YdZPCXpniiTyTli5e9qVK4BLS74FY0blq4uvb9l5mIH6zg3q
rbXX4VCnKSAqNxPjiXDlmPP9B8/7QFNti7PsROsgQamXPi06llgkBFMELTg1/vhy
d0mi76Fc/zhU0W8XZ4VlfG2x3FS6hVs0Tf3vSq30bK7Y/lp3gjdtextmdAxxiDTs
nq64S2xmXTvSjQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:21 2025 by rpki-client