Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
File: P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft (raw, json)
Hash identifier: 5WPstuSaEtu1BwgfbpaPv9ndbknV/4ge+4Wc4TMf6UQ=
Subject key identifier: B1:3B:15:6B:FB:58:57:78:6B:7B:F6:03:E4:64:47:37:CC:38:B5:88
Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
Certificate issuer: /CN=3fda630213cd423880f9fef16d78fb436e08f247
Certificate serial: 0194BD17CBCBA08A50417884FD5C1E834EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
Manifest number: 0B0B
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl (hash: Po/JaC7Jyttp7iARY6QUZRtM9Nd+OO1wMhhZtlkfPdA=)
2: gDeneKJTQtX9OIr5MlGy6dCHOYA.roa (hash: 3GvtE0X7YdCyMroXXNh2AEtxzHBHmy4owPJWbBMbbzo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cb:cb:a0:8a:50:41:78:84:fd:5c:1e:83:4e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=b13b156bfb5857786b7bf603e4644737cc38b588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f4:48:21:00:22:79:60:51:b4:f0:d0:5b:59:
c4:85:8e:a0:ef:0b:ed:af:76:2a:4e:7b:8d:e0:ff:
f6:85:f4:30:c5:16:db:be:96:82:d1:72:d0:bb:73:
e6:e7:41:31:6f:ef:bc:77:ed:35:f9:b5:47:b9:d1:
fc:dd:e8:f6:49:bb:6f:6a:c3:5b:5c:6e:2a:86:cf:
a4:27:dd:e8:4c:2b:4d:7a:3c:ad:dd:70:9a:67:1a:
63:4e:10:4a:f9:58:c8:99:0b:09:02:a3:4b:53:1d:
96:23:4d:98:19:4d:0e:97:78:89:b2:94:ee:63:a6:
21:44:1a:e0:d0:cf:1f:3e:cf:8f:7f:2c:80:8f:9a:
92:1f:b3:64:82:70:8d:d4:ac:c8:74:2f:4f:eb:7c:
7a:1f:e6:9c:42:67:16:87:28:03:68:5a:be:d8:a0:
85:51:83:de:f8:bb:ed:f9:08:7e:d8:2a:d3:8e:a5:
1d:a3:ad:77:92:3d:6d:0d:ab:08:b2:5e:ff:ca:8a:
06:82:dc:c1:3e:64:6b:1e:96:c5:bb:1e:3f:f1:ad:
16:00:b8:9a:c4:88:bf:fc:7d:03:4a:d5:3a:fd:4b:
f0:1c:65:51:e6:c9:e2:48:42:08:f0:26:72:89:db:
c8:39:bb:48:84:0f:e4:69:1e:cf:dc:69:52:28:89:
7b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3B:15:6B:FB:58:57:78:6B:7B:F6:03:E4:64:47:37:CC:38:B5:88
X509v3 Authority Key Identifier:
keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:56:c4:9d:2d:db:4a:a1:de:d7:92:ea:c0:aa:7f:9d:9a:14:
be:cd:b0:70:da:f7:c4:3f:23:92:0e:50:e6:d0:aa:2f:e3:36:
87:f8:fe:c6:bd:41:6c:ae:8e:e9:3c:df:65:ea:48:ec:b1:d4:
70:f8:60:24:e6:f8:f1:31:67:31:bb:00:78:5c:8a:45:0e:3a:
9b:1d:9d:58:21:fb:00:fc:9b:cd:c1:a6:10:33:4c:ad:8c:58:
d7:58:3b:c9:8a:09:74:88:b5:49:0f:a3:e2:ee:07:be:98:05:
17:ed:8a:09:69:55:ad:11:18:38:8c:cf:f7:97:a0:92:4e:ba:
13:9c:61:ff:bf:0b:08:61:50:3f:52:61:39:6c:c7:43:44:84:
77:8c:0e:88:b8:85:dc:e9:fd:02:93:d2:36:88:95:62:fe:b7:
8d:d4:ab:bf:ed:2f:ee:c5:05:31:97:03:b3:42:fd:4f:da:5a:
28:46:e5:cb:be:7e:15:7e:e3:d4:6d:aa:2d:c2:d8:d2:32:a5:
6f:dc:c4:ea:5a:ba:dc:9c:fa:b0:e6:d3:12:01:9e:14:c8:91:
74:3a:68:b4:94:b0:4a:27:6c:ed:8b:09:d5:c6:ef:5c:4d:ff:
0c:9c:ff:ea:05:fc:56:61:3e:1c:31:6e:8f:ae:37:1f:8d:7d:
18:95:39:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8vLoIpQQXiE/Vweg07qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZGE2MzAyMTNjZDQyMzg4MGY5ZmVmMTZkNzhmYjQzNmUw
OGYyNDcwHhcNMjUwMTMxMTYwMDQwWhcNMjUwMjAxMTYwMDQwWjAzMTEwLwYDVQQD
EyhiMTNiMTU2YmZiNTg1Nzc4NmI3YmY2MDNlNDY0NDczN2NjMzhiNTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PRIIQAieWBRtPDQW1nEhY6g7wvt
r3YqTnuN4P/2hfQwxRbbvpaC0XLQu3Pm50Exb++8d+01+bVHudH83ej2SbtvasNb
XG4qhs+kJ93oTCtNejyt3XCaZxpjThBK+VjImQsJAqNLUx2WI02YGU0Ol3iJspTu
Y6YhRBrg0M8fPs+PfyyAj5qSH7NkgnCN1KzIdC9P63x6H+acQmcWhygDaFq+2KCF
UYPe+Lvt+Qh+2CrTjqUdo613kj1tDasIsl7/yooGgtzBPmRrHpbFux4/8a0WALia
xIi//H0DStU6/UvwHGVR5sniSEII8CZyidvIObtIhA/kaR7P3GlSKIl73QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLE7FWv7WFd4a3v2A+RkRzfMOLWIMB8GA1UdIwQY
MBaAFD/aYwITzUI4gPn+8W14+0NuCPJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My81NGM2OTEtOWZiYi00MzhhLWE1NWYt
MzgyMzdmZTRlNDE0LzEvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My81NGM2OTEtOWZiYi00MzhhLWE1NWYtMzgyMzdmZTRlNDE0
LzEvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFbEnS3b
SqHe15LqwKp/nZoUvs2wcNr3xD8jkg5Q5tCqL+M2h/j+xr1BbK6O6TzfZepI7LHU
cPhgJOb48TFnMbsAeFyKRQ46mx2dWCH7APybzcGmEDNMrYxY11g7yYoJdIi1SQ+j
4u4HvpgFF+2KCWlVrREYOIzP95egkk66E5xh/78LCGFQP1JhOWzHQ0SEd4wOiLiF
3On9ApPSNoiVYv63jdSrv+0v7sUFMZcDs0L9T9paKEbly75+FX7j1G2qLcLY0jKl
b9zE6lq63Jz6sObTEgGeFMiRdDpotJSwSids7YsJ1cbvXE3/DJz/6gX8VmE+HDFu
j643H419GJU5Xw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:32 2025 by rpki-client