Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
File: pQnoZXbAZeFL--6PZSq2wnnM3hI.mft (raw, json)
Hash identifier: g7Kaj9OZ0g4egtKkFT5KGS4DC46jrq17Q6N7sxxSsu0=
Subject key identifier: EE:05:01:1F:5B:9B:83:E9:76:AF:B3:5E:CF:24:02:A7:92:1B:00:54
Authority key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
Certificate issuer: /CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Certificate serial: 0194BCA9766CAC16A54533E599E37C778A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
Manifest number: 0D67
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: eoOnLGiO6CFkl49Rw92BKVWZ1YY.roa (hash: 5KK2WxAAZ4SHFL6JTNlCRgBRKCCitoVvyQFa3VeriMw=)
2: pQnoZXbAZeFL--6PZSq2wnnM3hI.crl (hash: 7CmEl40yAktj7fdn1fTn5fScbEvSqFUOPKOTz/SbKVI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:76:6c:ac:16:a5:45:33:e5:99:e3:7c:77:8a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=ee05011f5b9b83e976afb35ecf2402a7921b0054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3d:a2:f5:7b:c9:01:1b:9b:aa:a1:48:d5:eb:
a5:b9:e2:22:e1:15:21:c9:f3:6d:bb:80:ef:73:11:
d5:34:e5:9a:51:6a:da:d8:89:ee:af:12:dd:23:89:
a2:6c:23:b3:aa:8a:ba:73:c4:5d:49:61:e1:4f:65:
f7:35:af:7c:d9:65:f9:b7:2c:33:5b:d5:33:50:4b:
d1:12:f2:69:3d:42:d7:b4:f8:17:a3:62:3a:44:56:
cd:b0:f9:39:f2:5e:f3:dd:2f:8c:09:95:5d:07:e9:
42:b4:2f:b8:a5:27:83:23:e6:7d:00:76:7c:d3:1b:
34:df:27:df:5c:1f:00:cf:ec:ab:b7:e0:6f:d2:a5:
02:65:41:c4:ec:dc:47:20:39:c0:b0:9d:a2:0e:d0:
da:86:9f:74:6d:7a:cf:60:f8:a0:65:5b:05:b3:6e:
6e:2e:e0:a3:c5:2f:07:8b:a2:21:84:97:63:f0:2c:
e8:47:ce:3e:06:10:50:f8:71:96:eb:bd:4d:fc:c0:
5d:3e:25:68:ac:58:60:4d:8b:a6:7e:f0:c0:d2:b6:
17:3e:cb:30:ad:c8:38:8a:d8:e3:2e:00:9f:70:64:
11:53:98:18:5b:88:fc:99:b7:69:48:74:1f:da:ee:
bd:03:c6:b0:4b:e8:56:6e:8f:29:e9:c6:49:45:1c:
c1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:05:01:1F:5B:9B:83:E9:76:AF:B3:5E:CF:24:02:A7:92:1B:00:54
X509v3 Authority Key Identifier:
keyid:A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:df:e1:f8:bc:f1:9e:4a:a0:5b:ec:53:03:2f:f4:76:ae:b1:
ec:30:bc:d1:a3:c9:0b:d2:2e:9a:30:07:4f:36:26:09:46:b1:
c3:1f:7a:55:fc:40:31:cd:04:3a:77:64:8f:ec:0f:b0:bc:1b:
90:a9:73:d9:0a:31:4b:9e:cb:1d:67:01:0e:89:03:3b:b9:97:
b2:e7:74:ff:dc:a5:92:ba:0c:1d:e2:73:9d:a8:3e:f7:a9:33:
9a:87:84:4c:2a:9c:22:f0:a4:5d:f1:8a:3e:27:3d:2b:09:65:
49:a2:b5:a1:f2:fa:dd:00:dc:ef:d4:7e:c6:95:e7:44:16:e0:
b5:9f:9b:89:72:40:49:74:3f:6c:0b:ed:e3:f3:94:b7:13:e1:
64:71:6f:99:bb:29:4f:43:66:13:5f:d9:20:dc:10:bf:be:1f:
cd:e0:67:1e:8e:26:1f:14:25:2a:36:d5:a2:14:72:8c:23:04:
4f:71:dd:d8:de:77:b1:c8:13:be:a3:2d:f4:4a:fd:e3:7d:65:
db:6b:f1:15:c3:0c:7b:ae:47:dd:30:cd:a2:37:1c:9b:96:3e:
be:b3:10:57:cf:9f:ad:e5:a7:d2:bd:a9:db:cd:02:0c:3e:6c:
ff:3a:92:0d:ff:43:a7:78:90:dc:b1:8d:b2:74:8a:7b:af:0a:
b3:06:bc:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qXZsrBalRTPlmeN8d4pUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MDllODY1NzZjMDY1ZTE0YmZiZWU4ZjY1MmFiNmMyNzlj
Y2RlMTIwHhcNMjUwMTMxMTQwMDEwWhcNMjUwMjAxMTQwMDEwWjAzMTEwLwYDVQQD
EyhlZTA1MDExZjViOWI4M2U5NzZhZmIzNWVjZjI0MDJhNzkyMWIwMDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD2i9XvJARubqqFI1eulueIi4RUh
yfNtu4DvcxHVNOWaUWra2InurxLdI4mibCOzqoq6c8RdSWHhT2X3Na982WX5tywz
W9UzUEvREvJpPULXtPgXo2I6RFbNsPk58l7z3S+MCZVdB+lCtC+4pSeDI+Z9AHZ8
0xs03yffXB8Az+yrt+Bv0qUCZUHE7NxHIDnAsJ2iDtDahp90bXrPYPigZVsFs25u
LuCjxS8Hi6IhhJdj8CzoR84+BhBQ+HGW671N/MBdPiVorFhgTYumfvDA0rYXPssw
rcg4itjjLgCfcGQRU5gYW4j8mbdpSHQf2u69A8awS+hWbo8p6cZJRRzBvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4FAR9bm4Ppdq+zXs8kAqeSGwBUMB8GA1UdIwQY
MBaAFKUJ6GV2wGXhS/vuj2UqtsJ5zN4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wMTQyNDUtODY4NS00YWYzLTkzODct
YTBmNTc0MmIxYjA0LzEvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wMTQyNDUtODY4NS00YWYzLTkzODctYTBmNTc0MmIxYjA0
LzEvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqN/h+Lzx
nkqgW+xTAy/0dq6x7DC80aPJC9IumjAHTzYmCUaxwx96VfxAMc0EOndkj+wPsLwb
kKlz2QoxS57LHWcBDokDO7mXsud0/9ylkroMHeJznag+96kzmoeETCqcIvCkXfGK
Pic9KwllSaK1ofL63QDc79R+xpXnRBbgtZ+biXJASXQ/bAvt4/OUtxPhZHFvmbsp
T0NmE1/ZINwQv74fzeBnHo4mHxQlKjbVohRyjCMET3Hd2N53scgTvqMt9Er9431l
22vxFcMMe65H3TDNojccm5Y+vrMQV8+freWn0r2p280CDD5s/zqSDf9Dp3iQ3LGN
snSKe68Kswa8Cw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:44 2025 by rpki-client