Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
File: PRgTEVbDK1enN4cYxgiq46mWXCs.mft (raw, json)
Hash identifier: /IS2iP4AkMgObJj510iMetyajNGyu5pqlO93iu2NLSo=
Subject key identifier: 7F:ED:BF:4E:58:7D:08:7D:0D:4F:41:E0:D7:06:5E:35:13:F1:4E:DB
Authority key identifier: 3D:18:13:11:56:C3:2B:57:A7:37:87:18:C6:08:AA:E3:A9:96:5C:2B
Certificate issuer: /CN=3d18131156c32b57a7378718c608aae3a9965c2b
Certificate serial: 0194BBCDBE34F1CFC0A6CDC29050AFCFE35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: PRgTEVbDK1enN4cYxgiq46mWXCs.crl (hash: H8NqcHl3WdA85J9LWbHe+7cHwSEh0hPCRKiV6sq4iyg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:be:34:f1:cf:c0:a6:cd:c2:90:50:af:cf:e3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d18131156c32b57a7378718c608aae3a9965c2b
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=7fedbf4e587d087d0d4f41e0d7065e3513f14edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:86:da:94:63:37:e7:1d:65:6b:22:d9:d8:
ab:e8:8a:e2:43:30:77:ad:f5:0f:07:52:37:52:c3:
7d:54:84:67:ab:1f:98:3f:65:a1:5c:67:49:86:cb:
18:70:62:29:ba:23:5d:71:0b:04:62:3c:ba:a5:b6:
6d:bf:21:e3:03:18:06:9f:a3:c0:9a:47:53:61:91:
8e:fd:e2:bd:47:1a:99:0a:1d:e4:84:62:9d:11:c4:
f7:cc:0a:09:be:e2:a0:b5:36:c7:7b:77:5d:23:b4:
67:86:a7:61:81:f4:8f:2b:65:ef:d0:55:9b:fd:8d:
f7:fa:25:df:4a:90:e5:3a:38:8f:bb:6e:72:3f:34:
24:6d:79:04:80:4f:1b:e6:06:0c:b3:4d:99:5f:6a:
e7:02:42:b5:cb:b8:ce:b0:3f:48:3b:be:ac:71:ba:
00:0f:f7:54:4a:b1:0b:e5:fb:d9:5a:8b:27:c3:ed:
00:32:80:df:e2:cd:93:75:87:0a:24:7c:db:32:0f:
ca:c6:cb:83:f3:87:e0:d0:ab:40:2f:ca:07:5e:67:
b5:82:43:5a:1d:5a:db:b8:7f:c6:d1:2e:da:30:ca:
92:82:10:b8:40:ae:dd:20:39:30:0d:2f:c2:5e:40:
bf:f5:60:cf:cc:be:c1:e0:a3:f2:fa:aa:af:f1:95:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:ED:BF:4E:58:7D:08:7D:0D:4F:41:E0:D7:06:5E:35:13:F1:4E:DB
X509v3 Authority Key Identifier:
keyid:3D:18:13:11:56:C3:2B:57:A7:37:87:18:C6:08:AA:E3:A9:96:5C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c1:2c:21:b6:53:d1:6e:01:75:87:07:54:8c:63:a2:2e:f7:
27:c7:20:c1:73:fd:04:39:e9:e5:fb:ad:17:7b:3b:d1:c1:96:
2f:37:eb:c4:47:01:57:a7:71:28:46:69:52:ee:c7:25:06:6b:
f7:cb:9d:0a:34:1e:4a:c1:96:ee:17:92:67:c2:ad:d3:b6:a6:
46:62:6d:03:22:84:21:ad:8f:62:84:0b:9b:20:93:2e:4e:a1:
c1:1c:dd:79:a9:6a:af:7c:38:15:6e:66:0f:f7:16:70:f2:d0:
e8:db:4b:5d:16:b5:d8:b9:98:aa:3d:7b:71:42:ab:3b:c4:09:
90:2f:2c:fa:1e:e6:31:42:1c:89:1b:68:44:95:98:5f:86:cd:
c8:d1:93:3d:12:b6:bc:41:e9:89:cb:46:af:57:68:21:65:80:
42:c1:fc:3c:b6:a6:0e:73:11:3e:b1:5c:81:6d:a1:f1:80:f7:
8f:72:73:cb:5f:83:e0:e1:59:01:ad:2b:de:92:d7:06:dd:5f:
51:e7:10:fa:0f:b6:f3:05:05:f3:19:17:b7:0b:41:08:d3:1f:
07:eb:52:93:90:a1:8b:45:8e:26:fa:87:83:a8:eb:da:b9:06:
ab:9b:5b:ef:fe:1a:91:de:42:53:e2:16:58:a0:b5:fc:1d:53:
48:f7:60:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zb408c/Aps3CkFCvz+NaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTgxMzExNTZjMzJiNTdhNzM3ODcxOGM2MDhhYWUzYTk5
NjVjMmIwHhcNMjUwMTMxMTAwMDEwWhcNMjUwMjAxMTAwMDEwWjAzMTEwLwYDVQQD
Eyg3ZmVkYmY0ZTU4N2QwODdkMGQ0ZjQxZTBkNzA2NWUzNTEzZjE0ZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzWG2pRjN+cdZWsi2dir6IriQzB3
rfUPB1I3UsN9VIRnqx+YP2WhXGdJhssYcGIpuiNdcQsEYjy6pbZtvyHjAxgGn6PA
mkdTYZGO/eK9RxqZCh3khGKdEcT3zAoJvuKgtTbHe3ddI7RnhqdhgfSPK2Xv0FWb
/Y33+iXfSpDlOjiPu25yPzQkbXkEgE8b5gYMs02ZX2rnAkK1y7jOsD9IO76scboA
D/dUSrEL5fvZWosnw+0AMoDf4s2TdYcKJHzbMg/KxsuD84fg0KtAL8oHXme1gkNa
HVrbuH/G0S7aMMqSghC4QK7dIDkwDS/CXkC/9WDPzL7B4KPy+qqv8ZVb2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/tv05YfQh9DU9B4NcGXjUT8U7bMB8GA1UdIwQY
MBaAFD0YExFWwytXpzeHGMYIquOpllwrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJnVEVWYkRLMWVuTjRjWXhnaXE0Nm1XWENzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9hYWUwMTctNWFmZC00YmZkLThmZGQt
ZDZlN2RjYzUyNzk5LzEvUFJnVEVWYkRLMWVuTjRjWXhnaXE0Nm1XWENzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9hYWUwMTctNWFmZC00YmZkLThmZGQtZDZlN2RjYzUyNzk5
LzEvUFJnVEVWYkRLMWVuTjRjWXhnaXE0Nm1XWENzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8EsIbZT
0W4BdYcHVIxjoi73J8cgwXP9BDnp5futF3s70cGWLzfrxEcBV6dxKEZpUu7HJQZr
98udCjQeSsGW7heSZ8Kt07amRmJtAyKEIa2PYoQLmyCTLk6hwRzdealqr3w4FW5m
D/cWcPLQ6NtLXRa12LmYqj17cUKrO8QJkC8s+h7mMUIciRtoRJWYX4bNyNGTPRK2
vEHpictGr1doIWWAQsH8PLamDnMRPrFcgW2h8YD3j3Jzy1+D4OFZAa0r3pLXBt1f
UecQ+g+28wUF8xkXtwtBCNMfB+tSk5Chi0WOJvqHg6jr2rkGq5tb7/4akd5CU+IW
WKC1/B1TSPdg2g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:07 2025 by rpki-client