Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
File: pdroBcyUvdKfwnEHzWOwvSfJFNA.mft (raw, json)
Hash identifier: yGpbtiBWSrGl2QviAulfGqA4bhnb65MoBw1Hzil43qM=
Subject key identifier: 0C:88:B3:55:34:A5:F1:03:63:01:C1:5A:EF:DC:CA:03:9C:CF:84:30
Authority key identifier: A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
Certificate issuer: /CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Certificate serial: 0194BCA98BFC96ECE0F8AD10B22F36FB1FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: jRK4xjLjW0AS7WU026pDGWREkHo.roa (hash: ER6luwoElNhKf2QyVxJrryvA3AGyV4wY+yOa5rcowpY=)
2: pdroBcyUvdKfwnEHzWOwvSfJFNA.crl (hash: xq9/PN++Xm3loGmnfWPK2JxAtit9xHsdY/dno0URRXc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8b:fc:96:ec:e0:f8:ad:10:b2:2f:36:fb:1f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=0c88b35534a5f1036301c15aefdcca039ccf8430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:d1:ae:79:37:56:2c:ce:a1:97:c8:f0:9f:
dc:cc:35:c6:74:17:a3:63:e4:db:6f:c4:29:35:34:
64:fa:70:05:89:37:a6:69:ed:c2:68:dd:e2:5d:81:
c2:da:40:22:b9:e2:f2:0e:8b:43:ff:a4:de:99:68:
1c:c9:7a:b2:d4:63:16:bc:54:0e:de:4e:ee:1d:13:
54:f2:57:f6:eb:e5:d1:67:8e:c0:ce:26:3d:a1:32:
c9:ad:7c:96:4e:ac:f1:3a:a6:ba:8b:cb:de:3f:98:
0c:cb:68:f2:d1:4c:ae:4c:1a:0f:21:39:03:19:98:
1d:23:6c:25:d6:74:94:a1:83:83:7a:ff:36:0c:19:
bb:f4:c6:b2:c5:3d:08:bb:a3:e6:c4:32:7d:e1:2c:
08:ea:5f:b8:1d:0b:aa:9a:c0:16:a0:fc:99:a8:05:
3c:b1:ca:83:f6:15:3c:96:ba:11:2a:a2:19:dd:ce:
e2:4d:89:8d:b3:62:38:7c:eb:a3:ae:90:a3:8f:37:
7f:89:aa:ec:fa:f7:44:ad:e8:fe:eb:34:ec:d3:7e:
ba:2a:94:5c:9e:fb:86:d9:f1:34:0a:3f:ab:f9:4a:
a1:2d:95:8b:44:c7:83:bb:9f:07:2b:e9:23:b3:35:
fc:98:b7:11:b9:2a:bd:04:a9:94:e1:5e:bf:cc:ab:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:88:B3:55:34:A5:F1:03:63:01:C1:5A:EF:DC:CA:03:9C:CF:84:30
X509v3 Authority Key Identifier:
keyid:A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:eb:76:84:f1:df:cf:d3:32:ef:b9:fb:95:51:63:18:a6:c0:
e6:4c:80:91:d4:7f:07:10:66:22:88:98:12:91:45:e5:5c:9d:
23:eb:bd:50:93:fd:cd:e7:f8:71:5a:0c:30:73:bd:bd:6a:a2:
89:94:0e:f4:93:48:db:b4:e0:65:f2:17:1b:0e:dc:9f:d5:1b:
b6:b0:55:9f:42:14:3d:96:d3:8a:96:88:f4:31:21:27:ff:10:
8c:cc:5b:51:75:fb:c2:36:ad:f4:e3:9b:be:19:64:93:91:c9:
ee:24:18:86:37:4e:3c:69:78:d5:c9:c2:79:98:c8:8e:81:70:
d6:f2:92:37:cf:81:8c:6e:2d:bb:81:4f:d8:23:fe:37:59:9b:
bd:f7:3b:b2:d3:66:a7:00:1f:85:81:18:87:dd:45:4f:11:50:
f6:1d:6b:25:2e:d3:ec:34:80:0e:b6:68:5b:a0:b1:08:45:fb:
6b:2d:8b:91:7b:3a:e4:a6:98:97:14:38:9a:81:66:f1:47:3b:
ce:6f:c6:f0:59:ce:55:0b:39:d7:13:1e:ad:58:86:2f:d3:ae:
10:f9:82:80:9a:aa:dd:b9:1a:5e:62:9b:08:c1:94:0a:9c:1b:
61:9d:a2:e9:97:43:7e:37:46:cb:29:09:f6:54:92:7a:fa:3c:
2a:45:52:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYv8luzg+K0Qsi82+x/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZGFlODA1Y2M5NGJkZDI5ZmMyNzEwN2NkNjNiMGJkMjdj
OTE0ZDAwHhcNMjUwMTMxMTQwMDE1WhcNMjUwMjAxMTQwMDE1WjAzMTEwLwYDVQQD
EygwYzg4YjM1NTM0YTVmMTAzNjMwMWMxNWFlZmRjY2EwMzljY2Y4NDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZbRrnk3VizOoZfI8J/czDXGdBej
Y+Tbb8QpNTRk+nAFiTemae3CaN3iXYHC2kAiueLyDotD/6TemWgcyXqy1GMWvFQO
3k7uHRNU8lf26+XRZ47AziY9oTLJrXyWTqzxOqa6i8veP5gMy2jy0UyuTBoPITkD
GZgdI2wl1nSUoYODev82DBm79MayxT0Iu6PmxDJ94SwI6l+4HQuqmsAWoPyZqAU8
scqD9hU8lroRKqIZ3c7iTYmNs2I4fOujrpCjjzd/iars+vdErej+6zTs0366KpRc
nvuG2fE0Cj+r+UqhLZWLRMeDu58HK+kjszX8mLcRuSq9BKmU4V6/zKtl8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyIs1U0pfEDYwHBWu/cygOcz4QwMB8GA1UdIwQY
MBaAFKXa6AXMlL3Sn8JxB81jsL0nyRTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jOGUwMDEtYWRhMy00NWJmLWFhNDYt
ZmQ1MTU2ODE2MjBjLzEvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jOGUwMDEtYWRhMy00NWJmLWFhNDYtZmQ1MTU2ODE2MjBj
LzEvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbet2hPHf
z9My77n7lVFjGKbA5kyAkdR/BxBmIoiYEpFF5VydI+u9UJP9zef4cVoMMHO9vWqi
iZQO9JNI27TgZfIXGw7cn9UbtrBVn0IUPZbTipaI9DEhJ/8QjMxbUXX7wjat9OOb
vhlkk5HJ7iQYhjdOPGl41cnCeZjIjoFw1vKSN8+BjG4tu4FP2CP+N1mbvfc7stNm
pwAfhYEYh91FTxFQ9h1rJS7T7DSADrZoW6CxCEX7ay2LkXs65KaYlxQ4moFm8Uc7
zm/G8FnOVQs51xMerViGL9OuEPmCgJqq3bkaXmKbCMGUCpwbYZ2i6ZdDfjdGyykJ
9lSSevo8KkVSTA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:41 2025 by rpki-client