Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
File: PUJ2NzsED6msd-VmxbbN81tTuTc.mft (raw, json)
Hash identifier: mJTYDOBXzlKY+y+xKxKc4Fza01SmHUBBVqsnu0QaBPc=
Subject key identifier: 9C:94:5C:A6:28:55:3F:22:A7:0F:2B:80:64:F5:5E:E1:D7:1F:24:6C
Authority key identifier: 3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
Certificate issuer: /CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Certificate serial: 0194BCA996D886A1F4C594BEFABED12C1F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
Manifest number: 030C
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: JTpkIG2gAi87qZ4MaDyiSAhDmGs.roa (hash: pqYQEm9FQENA5hwqBQ6sbfRExLr5G9tm4QJ0ttI7KnA=)
2: PUJ2NzsED6msd-VmxbbN81tTuTc.crl (hash: Tm782Sya+IOhQgQSwTvDPI5qSo4KJWcarFA/D1Q/Vow=)
3: p62oDeoT4vvUHo4yGegZ6_TWKY0.roa (hash: JITepKVcCtsEzEyKS9PibwaqvpfOsAJXxc4iERP2W4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:96:d8:86:a1:f4:c5:94:be:fa:be:d1:2c:1f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=9c945ca628553f22a70f2b8064f55ee1d71f246c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:8e:c4:8d:90:14:32:2a:28:29:3c:6f:4c:
77:5e:d6:8e:b4:1c:54:6d:c1:21:74:8d:04:41:f0:
60:96:ff:40:bd:aa:09:54:1b:66:e8:74:1b:2f:50:
09:a3:38:ed:02:2d:88:ee:d8:e1:51:5b:43:b6:7c:
26:be:c7:7f:07:5a:31:11:4c:e4:eb:a9:b0:48:32:
d0:fd:1c:3b:96:1b:9b:31:0a:db:00:5b:a0:87:ba:
29:81:cd:95:8f:60:2e:68:dc:db:d8:12:b6:68:d7:
8b:22:52:b1:f8:c5:be:65:d7:87:7a:fd:e1:41:96:
37:ba:3e:d5:d3:b6:2f:19:a8:a8:20:73:f4:d1:3c:
99:e1:40:66:02:21:89:17:93:66:25:5b:70:fe:1a:
c6:db:55:4f:86:93:c5:fe:73:a8:37:12:bf:49:0d:
92:b6:dc:0b:5a:c4:72:48:49:84:22:8c:10:f6:5c:
6b:da:ec:eb:0f:1a:98:02:3c:ca:94:40:e8:34:64:
2f:9b:c8:06:31:f7:c3:6a:21:26:0a:a5:b4:04:a0:
a9:22:52:9d:4a:04:a6:3c:28:c6:09:7f:66:14:6d:
75:54:0b:5a:e4:23:78:10:81:cc:eb:5e:03:07:02:
36:25:b6:d1:38:2c:6a:03:55:ab:7b:4c:57:0c:f5:
3c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:94:5C:A6:28:55:3F:22:A7:0F:2B:80:64:F5:5E:E1:D7:1F:24:6C
X509v3 Authority Key Identifier:
keyid:3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:a2:04:4b:72:55:bc:b0:6f:11:87:13:05:ae:6e:54:7e:32:
97:56:fa:d8:7c:b0:6c:b1:87:c3:b9:a9:ca:58:4c:eb:0d:93:
b8:2e:55:89:79:c4:70:d7:4f:ed:1d:ee:f0:cf:c7:d5:d1:b9:
2e:06:20:90:9e:9b:6a:6f:d6:6f:9d:03:22:54:94:a6:a5:de:
b6:11:50:81:3e:e1:60:8e:a1:af:76:49:59:e7:2b:b2:3c:99:
9a:b7:c4:16:4d:97:87:77:4b:b6:70:9c:c2:dc:3c:0a:03:a1:
f6:89:f4:3a:df:6a:f6:3f:79:a3:2e:7f:2c:fc:57:10:6c:63:
f6:83:a4:54:7e:54:a3:23:61:4b:45:f0:6f:ed:fc:1e:76:65:
a3:78:d6:0e:4c:ac:61:18:35:63:7a:f7:27:9c:4e:73:38:b2:
c6:2a:80:4a:6e:31:48:5c:87:52:44:d8:6f:46:7b:22:87:a9:
39:a2:cd:b0:62:cd:27:e7:a3:a5:a4:b8:cb:f8:bf:1a:1b:99:
1b:17:1f:f9:f9:93:e0:3c:68:e4:e4:a8:7d:6d:82:30:73:50:
3d:28:1d:e4:7b:bc:05:46:ec:02:e8:aa:15:ad:4a:89:e6:a9:
41:73:79:37:a7:d4:ed:56:5f:c3:8a:41:c7:dc:4d:ae:7a:9b:
62:36:d1:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZbYhqH0xZS++r7RLB90MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNDI3NjM3M2IwNDBmYTlhYzc3ZTU2NmM1YjZjZGYzNWI1
M2I5MzcwHhcNMjUwMTMxMTQwMDE4WhcNMjUwMjAxMTQwMDE4WjAzMTEwLwYDVQQD
Eyg5Yzk0NWNhNjI4NTUzZjIyYTcwZjJiODA2NGY1NWVlMWQ3MWYyNDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHGOxI2QFDIqKCk8b0x3XtaOtBxU
bcEhdI0EQfBglv9AvaoJVBtm6HQbL1AJozjtAi2I7tjhUVtDtnwmvsd/B1oxEUzk
66mwSDLQ/Rw7lhubMQrbAFugh7opgc2Vj2AuaNzb2BK2aNeLIlKx+MW+ZdeHev3h
QZY3uj7V07YvGaioIHP00TyZ4UBmAiGJF5NmJVtw/hrG21VPhpPF/nOoNxK/SQ2S
ttwLWsRySEmEIowQ9lxr2uzrDxqYAjzKlEDoNGQvm8gGMffDaiEmCqW0BKCpIlKd
SgSmPCjGCX9mFG11VAta5CN4EIHM614DBwI2JbbROCxqA1Wre0xXDPU8sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyUXKYoVT8ipw8rgGT1XuHXHyRsMB8GA1UdIwQY
MBaAFD1Cdjc7BA+prHflZsW2zfNbU7k3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFVKMk56c0VENm1zZC1WbXhiYk44MXRUdVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9hMTlkNTEtMDdlNS00ZGI1LTlkMGUt
NjZkMzE5OGJmMWEyLzEvUFVKMk56c0VENm1zZC1WbXhiYk44MXRUdVRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9hMTlkNTEtMDdlNS00ZGI1LTlkMGUtNjZkMzE5OGJmMWEy
LzEvUFVKMk56c0VENm1zZC1WbXhiYk44MXRUdVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxaIES3JV
vLBvEYcTBa5uVH4yl1b62HywbLGHw7mpylhM6w2TuC5ViXnEcNdP7R3u8M/H1dG5
LgYgkJ6bam/Wb50DIlSUpqXethFQgT7hYI6hr3ZJWecrsjyZmrfEFk2Xh3dLtnCc
wtw8CgOh9on0Ot9q9j95oy5/LPxXEGxj9oOkVH5UoyNhS0Xwb+38HnZlo3jWDkys
YRg1Y3r3J5xOcziyxiqASm4xSFyHUkTYb0Z7IoepOaLNsGLNJ+ejpaS4y/i/GhuZ
Gxcf+fmT4Dxo5OSofW2CMHNQPSgd5Hu8BUbsAuiqFa1KieapQXN5N6fU7VZfw4pB
x9xNrnqbYjbRYA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:11 2025 by rpki-client