Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
File: P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft (raw, json)
Hash identifier: F2ATLReYRXyT7a9Ulj+NXjL1kzlKhMbAV8zM7oXzTxo=
Subject key identifier: 36:0F:18:D6:FE:70:15:C2:D9:A2:A6:A8:7C:B6:4B:DF:FE:DE:15:DA
Authority key identifier: 3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8
Certificate issuer: /CN=3f8138fea066d6f504436001cc9d7f339db734c8
Certificate serial: 0194BD858ED9E92AA254AFD464164F430E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
Manifest number: AD
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl (hash: ypNMMLFnWH3pBaYSyTulR6na6gqexrpOeudtSUyChd4=)
2: a7YNlS63NsZTTW2uGzFrnfKok9w.roa (hash: A6Vj/t1HktktvRKs1GT2mBgPnzQ8ZrkihcAERAUHOMs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8e:d9:e9:2a:a2:54:af:d4:64:16:4f:43:0e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8138fea066d6f504436001cc9d7f339db734c8
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=360f18d6fe7015c2d9a2a6a87cb64bdffede15da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c8:cb:7b:0d:21:b1:1d:ad:dd:ef:5c:9e:3c:
f1:c2:ed:1c:5d:0b:78:4b:6b:50:60:79:e6:fa:3c:
e5:bb:4c:1e:e6:af:3e:ce:70:ce:24:c8:c8:3c:05:
7b:6f:ff:81:8e:a1:77:d2:ef:a9:27:90:13:bd:60:
c2:73:9c:7e:0a:0a:c7:6a:3c:92:62:04:76:20:9b:
4d:38:9b:5e:8b:bd:10:7f:76:35:e8:20:80:7f:23:
e5:65:a9:ee:2f:8c:04:cf:18:5e:a8:45:c4:a1:89:
fb:94:b0:f8:75:e3:ca:ff:b2:ff:2d:df:61:86:dc:
f2:e7:7b:f5:1c:2e:db:ae:38:61:27:68:0d:c9:d8:
31:17:42:0a:40:eb:1b:11:75:58:49:41:15:aa:d3:
5f:e2:fe:7e:f3:dd:5e:eb:c0:c5:ad:83:29:5d:1a:
71:6b:0c:24:cc:36:da:d1:fa:0d:f2:38:d6:01:a6:
c8:59:5b:c6:1d:28:98:d6:07:cf:aa:73:fa:f7:c7:
5c:48:95:72:04:3b:23:c9:fb:78:95:3e:ee:d8:48:
db:de:e0:0f:93:33:af:ed:ec:eb:cf:c8:6f:6b:60:
9c:8c:33:22:e0:97:8c:1e:4c:8d:0b:db:44:48:e9:
93:e6:6b:fc:2e:18:54:b6:94:e8:61:d2:9d:5c:32:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0F:18:D6:FE:70:15:C2:D9:A2:A6:A8:7C:B6:4B:DF:FE:DE:15:DA
X509v3 Authority Key Identifier:
keyid:3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:86:78:56:aa:c8:fe:4e:ff:d9:12:fc:7c:eb:2c:e6:a7:e7:
8c:f1:41:5c:61:dc:b8:3f:dc:15:0d:85:d1:0d:1a:80:30:0d:
ce:c2:c6:a3:45:06:ec:ce:b3:1c:8e:e2:06:d9:01:b9:3b:7a:
a0:3c:cb:b2:66:0a:bd:52:4e:69:de:c2:23:8d:d6:ee:65:e3:
36:f2:00:c9:92:aa:f5:e9:4f:e3:b8:48:c9:d4:62:d8:5d:b5:
5a:28:25:21:6d:de:c3:94:60:d8:bb:e7:56:f1:5b:50:57:93:
99:cc:96:a3:5b:bd:94:e0:11:8f:d9:c2:9e:d1:3b:38:7d:3c:
c5:7e:d1:c9:41:9a:8d:1a:b5:95:58:3a:79:50:bf:f5:28:80:
a2:96:db:f8:2d:7d:06:8d:5e:0b:22:65:21:22:d2:27:d5:3f:
2b:c8:35:8e:2f:bc:4c:e1:c5:b4:22:a8:f8:e3:1a:35:43:22:
bc:b3:bc:d9:60:ad:51:aa:32:36:a2:c1:76:7c:8f:a2:7e:4d:
1e:19:2a:6f:7e:f5:0b:5d:b5:81:31:ea:d9:d9:cc:b1:46:81:
7f:77:0a:24:46:ac:65:0a:17:90:e2:0f:ba:d4:84:58:23:99:
80:69:34:dd:f1:2d:b8:ca:37:4a:f6:6b:be:cc:a3:8d:f2:bd:
74:75:f7:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hY7Z6SqiVK/UZBZPQw5NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmODEzOGZlYTA2NmQ2ZjUwNDQzNjAwMWNjOWQ3ZjMzOWRi
NzM0YzgwHhcNMjUwMTMxMTgwMDM0WhcNMjUwMjAxMTgwMDM0WjAzMTEwLwYDVQQD
EygzNjBmMThkNmZlNzAxNWMyZDlhMmE2YTg3Y2I2NGJkZmZlZGUxNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cjLew0hsR2t3e9cnjzxwu0cXQt4
S2tQYHnm+jzlu0we5q8+znDOJMjIPAV7b/+BjqF30u+pJ5ATvWDCc5x+CgrHajyS
YgR2IJtNOJtei70Qf3Y16CCAfyPlZanuL4wEzxheqEXEoYn7lLD4dePK/7L/Ld9h
htzy53v1HC7brjhhJ2gNydgxF0IKQOsbEXVYSUEVqtNf4v5+891e68DFrYMpXRpx
awwkzDba0foN8jjWAabIWVvGHSiY1gfPqnP698dcSJVyBDsjyft4lT7u2Ejb3uAP
kzOv7ezrz8hva2CcjDMi4JeMHkyNC9tESOmT5mv8LhhUtpToYdKdXDKAnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYPGNb+cBXC2aKmqHy2S9/+3hXaMB8GA1UdIwQY
MBaAFD+BOP6gZtb1BENgAcydfzOdtzTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDRFNF9xQm0xdlVFUTJBQnpKMV9NNTIzTk1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8yNjE4ZjgtMTI2NC00MDExLTliODgt
ZTMyN2U1MjI3MDY2LzEvUDRFNF9xQm0xdlVFUTJBQnpKMV9NNTIzTk1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8yNjE4ZjgtMTI2NC00MDExLTliODgtZTMyN2U1MjI3MDY2
LzEvUDRFNF9xQm0xdlVFUTJBQnpKMV9NNTIzTk1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4Z4VqrI
/k7/2RL8fOss5qfnjPFBXGHcuD/cFQ2F0Q0agDANzsLGo0UG7M6zHI7iBtkBuTt6
oDzLsmYKvVJOad7CI43W7mXjNvIAyZKq9elP47hIydRi2F21WiglIW3ew5Rg2Lvn
VvFbUFeTmcyWo1u9lOARj9nCntE7OH08xX7RyUGajRq1lVg6eVC/9SiAopbb+C19
Bo1eCyJlISLSJ9U/K8g1ji+8TOHFtCKo+OMaNUMivLO82WCtUaoyNqLBdnyPon5N
Hhkqb371C121gTHq2dnMsUaBf3cKJEasZQoXkOIPutSEWCOZgGk03fEtuMo3SvZr
vsyjjfK9dHX3XQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:52 2025 by rpki-client