Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
File: pPAKrld-dFH4jqYEv2ozc0zQMAk.mft (raw, json)
Hash identifier: bRsTU28iLMvd53Q69tjH6N7BaBfQlR8Y6eEAycfNAzM=
Subject key identifier: 94:AA:04:D4:6B:A4:55:D6:37:8E:34:92:30:01:60:1F:07:B0:34:FA
Authority key identifier: A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
Certificate issuer: /CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Certificate serial: 0194BCAA0A3503DE1EEBF6601D609F42845B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
Manifest number: 0C89
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: XRYyvh6J7DkVdKbz1yypWyD6-m0.roa (hash: 6+dNcwPteiKzyDYvKh6xy6mmMEyhqVqNL5Sm9+oU6rA=)
2: pPAKrld-dFH4jqYEv2ozc0zQMAk.crl (hash: OYTYsufqNoixi4x8F4Wjkew3XWu73Lht0s8NZ342mBY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0a:35:03:de:1e:eb:f6:60:1d:60:9f:42:84:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=94aa04d46ba455d6378e34923001601f07b034fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3a:0a:e4:43:89:ee:0e:f9:93:e5:19:e5:81:
fb:3d:c5:64:63:6b:af:3e:37:48:73:c2:7a:41:96:
5c:ea:94:49:d9:01:e7:2d:f2:44:ba:16:f0:f2:4f:
f2:f5:8b:74:d0:b7:28:a5:af:f9:89:9b:6a:c5:40:
07:ca:6d:ce:17:a1:e0:93:f9:19:a1:58:0c:17:cf:
77:37:6c:c0:22:83:8f:e5:af:c1:8e:00:d3:78:30:
85:7e:c7:91:83:e8:70:35:9d:6a:1c:18:c3:0e:79:
55:25:65:7c:87:ff:0a:29:04:a2:66:df:86:8b:5e:
3f:2f:94:af:1f:e6:1a:c8:31:21:52:29:f2:42:cb:
81:3d:e8:1b:7b:73:73:f6:3b:56:f2:69:26:54:6b:
a4:3f:c0:b5:20:aa:ac:bc:2a:a5:6e:3a:63:31:e4:
6b:c2:00:f7:8b:52:06:ea:27:b0:97:24:44:d6:00:
58:dd:66:c1:58:93:6f:98:7b:b8:76:eb:b3:0b:6e:
e8:2b:bc:64:a7:90:65:0d:82:c6:ce:b2:d6:35:eb:
d2:17:59:77:fc:be:27:57:72:fb:64:22:03:a2:f1:
8c:e1:c3:87:df:07:62:a7:69:38:6d:59:99:a0:45:
db:df:5c:df:0d:c5:41:62:e5:3b:6e:bd:24:6c:02:
15:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AA:04:D4:6B:A4:55:D6:37:8E:34:92:30:01:60:1F:07:B0:34:FA
X509v3 Authority Key Identifier:
keyid:A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:02:2f:16:37:f3:b7:c1:ce:0f:32:97:1b:cc:85:31:09:49:
15:61:bb:1e:dd:82:d6:d3:ee:87:4c:cd:51:6a:5a:7b:38:8f:
26:da:e4:b6:4d:bb:df:8b:04:3d:0e:ae:00:82:d1:37:2b:18:
cc:b7:28:b6:b3:71:2f:b6:b1:10:37:93:1a:c1:6c:c9:f1:a8:
0d:de:1d:91:2f:e7:9c:cb:0b:ee:11:73:83:ca:dc:5f:a1:20:
0a:70:a9:d9:2c:ef:63:57:60:a2:b0:3c:73:c1:f0:d0:ee:07:
65:ad:6c:d2:cf:26:53:e7:14:19:b5:25:c6:e4:7e:b7:b2:b7:
e9:4c:0d:6d:44:9c:70:7e:87:fe:e7:45:4a:8f:5b:cc:b9:38:
ac:19:57:18:1b:ac:2e:46:dc:4e:11:21:68:81:d4:da:29:57:
99:c0:5e:7e:07:12:6a:e9:7f:f1:aa:1b:2e:65:4e:49:a1:74:
b6:bb:e9:06:8e:bc:ba:11:fe:8b:1b:96:9b:2c:71:6b:21:32:
30:b7:c9:ce:a1:1b:dc:92:16:10:eb:07:00:46:5c:3f:2d:a7:
61:19:d7:f7:7f:77:11:ca:df:43:a6:ab:d3:52:b2:86:69:ce:
cf:1b:2b:ee:e6:e9:ed:11:30:4f:e5:6b:f8:0e:1c:3b:34:97:
7c:aa:cc:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgo1A94e6/ZgHWCfQoRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjAwYWFlNTc3ZTc0NTFmODhlYTYwNGJmNmEzMzczNGNk
MDMwMDkwHhcNMjUwMTMxMTQwMDQ3WhcNMjUwMjAxMTQwMDQ3WjAzMTEwLwYDVQQD
Eyg5NGFhMDRkNDZiYTQ1NWQ2Mzc4ZTM0OTIzMDAxNjAxZjA3YjAzNGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDoK5EOJ7g75k+UZ5YH7PcVkY2uv
PjdIc8J6QZZc6pRJ2QHnLfJEuhbw8k/y9Yt00Lcopa/5iZtqxUAHym3OF6Hgk/kZ
oVgMF893N2zAIoOP5a/BjgDTeDCFfseRg+hwNZ1qHBjDDnlVJWV8h/8KKQSiZt+G
i14/L5SvH+YayDEhUinyQsuBPegbe3Nz9jtW8mkmVGukP8C1IKqsvCqlbjpjMeRr
wgD3i1IG6iewlyRE1gBY3WbBWJNvmHu4duuzC27oK7xkp5BlDYLGzrLWNevSF1l3
/L4nV3L7ZCIDovGM4cOH3wdip2k4bVmZoEXb31zfDcVBYuU7br0kbAIV6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSqBNRrpFXWN440kjABYB8HsDT6MB8GA1UdIwQY
MBaAFKTwCq5XfnRR+I6mBL9qM3NM0DAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBBS3JsZC1kRkg0anFZRXYyb3pjMHpRTUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi81OGE5NGEtOWUyOC00N2E1LTlmZDYt
OWM5MWIxYzUxNThhLzEvcFBBS3JsZC1kRkg0anFZRXYyb3pjMHpRTUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi81OGE5NGEtOWUyOC00N2E1LTlmZDYtOWM5MWIxYzUxNThh
LzEvcFBBS3JsZC1kRkg0anFZRXYyb3pjMHpRTUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgIvFjfz
t8HODzKXG8yFMQlJFWG7Ht2C1tPuh0zNUWpaeziPJtrktk2734sEPQ6uAILRNysY
zLcotrNxL7axEDeTGsFsyfGoDd4dkS/nnMsL7hFzg8rcX6EgCnCp2SzvY1dgorA8
c8Hw0O4HZa1s0s8mU+cUGbUlxuR+t7K36UwNbUSccH6H/udFSo9bzLk4rBlXGBus
LkbcThEhaIHU2ilXmcBefgcSaul/8aobLmVOSaF0trvpBo68uhH+ixuWmyxxayEy
MLfJzqEb3JIWEOsHAEZcPy2nYRnX9393EcrfQ6ar01KyhmnOzxsr7ubp7REwT+Vr
+A4cOzSXfKrM7A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:01 2025 by rpki-client