Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
File: P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json)
Hash identifier: some3vRy+0ynOUXWBvqa7vgJxNMoKilxq4s4/ATag90=
Subject key identifier: 7E:4B:E9:88:97:D6:07:33:43:D9:61:04:64:4D:8C:8D:3C:0B:BE:CF
Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Certificate serial: 0194BCA9B72018B062FE13B36BA453171400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
Manifest number: 0368
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: I2T3vW_f2hKmlZWnd51x-GtOD7M.roa (hash: oNoWZuXx4HX98BE5ZXv2y66gUnUeaQrrJOmk84paoXM=)
2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: Ks9/b2xDLd9hei3s3xICFdsNR04l9UYM0upUAix948c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b7:20:18:b0:62:fe:13:b3:6b:a4:53:17:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=7e4be98897d6073343d96104644d8c8d3c0bbecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:37:84:e4:70:d4:dc:75:7c:40:d9:41:35:
96:49:88:7d:fc:a3:2b:79:11:ad:2d:d4:d5:1d:53:
2f:4e:28:77:f2:0e:8c:4e:1c:e1:a3:5a:06:5b:ee:
e8:93:7b:cc:14:c0:38:d2:3e:09:b9:35:a7:89:0d:
7e:bd:45:63:21:a9:3b:86:5e:38:20:7d:73:dd:ae:
03:f7:c9:26:eb:05:40:bd:41:41:ae:68:27:a2:aa:
57:53:21:62:ec:11:7f:cf:b5:69:09:1d:d1:78:c1:
22:12:df:0d:57:70:cf:80:04:9c:d2:91:5e:4b:39:
45:52:7f:e2:dc:bc:78:10:99:a6:b8:03:99:97:8a:
2b:7b:93:f5:07:ad:1b:92:8b:f3:ae:f0:7c:d5:99:
bf:f5:7b:f4:1e:be:a1:0f:ee:b6:69:e3:7e:ec:db:
b9:9d:97:be:2e:48:93:1a:c3:92:88:95:76:86:e5:
be:0e:cc:c9:63:9a:b8:ea:29:fe:33:fe:9e:bf:18:
07:9d:e3:69:ab:cf:c9:1b:c9:1c:76:ae:10:d1:34:
68:71:2e:3e:76:c2:ef:07:ce:99:7c:48:7b:be:6a:
e2:38:92:21:3b:6e:c2:f0:7c:3b:74:e3:46:70:76:
fd:ef:a4:de:32:73:52:c1:9b:42:7f:5f:b8:66:de:
1c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4B:E9:88:97:D6:07:33:43:D9:61:04:64:4D:8C:8D:3C:0B:BE:CF
X509v3 Authority Key Identifier:
keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:33:a8:1d:ac:12:ab:a6:cb:0a:ad:ea:74:43:95:c0:b6:e4:
12:af:d3:f2:97:ac:18:2f:3a:41:d9:30:11:77:c5:11:48:4d:
19:ca:15:95:70:2e:2a:60:01:3e:9a:5d:d5:be:dd:b7:03:57:
11:fd:aa:89:fb:9c:38:1e:fa:15:79:68:8f:41:34:37:b2:b5:
24:18:fd:9d:af:13:f9:1b:9c:81:8b:32:98:26:1c:51:14:04:
10:d5:73:78:9e:57:96:c4:fc:2e:27:94:72:53:ae:c6:62:41:
61:91:50:eb:65:e9:d7:76:49:ed:29:8c:9c:ca:29:d3:ea:08:
36:2d:f0:a0:d3:d7:ca:c5:1b:bc:78:1d:cb:e7:7f:bc:bb:87:
f5:2f:28:19:b6:1c:b3:d0:c4:6c:93:d5:90:23:36:00:2c:70:
94:a6:a4:40:45:e4:f3:58:4c:b5:63:e8:61:43:c9:a8:80:8a:
1f:f0:ea:ae:f8:5e:66:e7:85:b8:dd:f0:f2:72:67:68:fa:b5:
bd:c7:18:b6:5d:d7:cb:a4:98:6e:a1:27:aa:82:33:4d:94:c0:
c5:b8:9e:e4:ab:57:8e:65:79:58:fa:e9:25:3c:a2:d5:1b:a7:
f1:03:c8:b5:2f:63:5f:5b:84:1a:dc:ab:c3:c3:78:d7:03:b5:
09:92:37:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qbcgGLBi/hOza6RTFxQAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYWM0OTAxY2MyM2JlNDdiZmE5ZjEyYTYwNDRmYTYzNDUx
MjIxMDcwHhcNMjUwMTMxMTQwMDI2WhcNMjUwMjAxMTQwMDI2WjAzMTEwLwYDVQQD
Eyg3ZTRiZTk4ODk3ZDYwNzMzNDNkOTYxMDQ2NDRkOGM4ZDNjMGJiZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxII3hORw1Nx1fEDZQTWWSYh9/KMr
eRGtLdTVHVMvTih38g6MThzho1oGW+7ok3vMFMA40j4JuTWniQ1+vUVjIak7hl44
IH1z3a4D98km6wVAvUFBrmgnoqpXUyFi7BF/z7VpCR3ReMEiEt8NV3DPgASc0pFe
SzlFUn/i3Lx4EJmmuAOZl4ore5P1B60bkovzrvB81Zm/9Xv0Hr6hD+62aeN+7Nu5
nZe+LkiTGsOSiJV2huW+DszJY5q46in+M/6evxgHneNpq8/JG8kcdq4Q0TRocS4+
dsLvB86ZfEh7vmriOJIhO27C8Hw7dONGcHb976TeMnNSwZtCf1+4Zt4c3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5L6YiX1gczQ9lhBGRNjI08C77PMB8GA1UdIwQY
MBaAFD+sSQHMI75Hv6nxKmBE+mNFEiEHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZmZkOTUtOThlNi00Mjc5LTk4N2Yt
NzNhNjM0MTU1ZWU5LzEvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wZmZkOTUtOThlNi00Mjc5LTk4N2YtNzNhNjM0MTU1ZWU5
LzEvUDZ4SkFjd2p2a2VfcWZFcVlFVDZZMFVTSVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjOoHawS
q6bLCq3qdEOVwLbkEq/T8pesGC86QdkwEXfFEUhNGcoVlXAuKmABPppd1b7dtwNX
Ef2qifucOB76FXloj0E0N7K1JBj9na8T+RucgYsymCYcURQEENVzeJ5XlsT8LieU
clOuxmJBYZFQ62Xp13ZJ7SmMnMop0+oINi3woNPXysUbvHgdy+d/vLuH9S8oGbYc
s9DEbJPVkCM2ACxwlKakQEXk81hMtWPoYUPJqICKH/DqrvheZueFuN3w8nJnaPq1
vccYtl3Xy6SYbqEnqoIzTZTAxbie5KtXjmV5WPrpJTyi1Run8QPItS9jX1uEGtyr
w8N41wO1CZI36g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:40 2025 by rpki-client