
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
File: PmxFIHWfOk74uamifiUzznMsVBE.mft (raw, json)
Hash identifier: V0jeapQ5Kv9F26FPD4n9Lc611J9vPF9l+kuyq5LU5Mo=
Subject key identifier: E2:F4:F2:D8:DA:0C:21:C6:03:04:B6:96:FD:70:9F:53:3C:E0:B7:CC
Authority key identifier: 3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
Certificate issuer: /CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Certificate serial: 0194BD8586FE5D2B172F85CBF97CA2F2A514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: PmxFIHWfOk74uamifiUzznMsVBE.crl (hash: Hca20ZF6nPi6x+54PzdyvaJtx9KD5Sj4rZMXr8/w7M8=)
2: f62uVetw4VLEAcyA7iUss0CmbKk.roa (hash: KfBTV0RaWF6oQ2oIYy/lZbeXGP7Rdv40K79+xRa2szk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:86:fe:5d:2b:17:2f:85:cb:f9:7c:a2:f2:a5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=e2f4f2d8da0c21c60304b696fd709f533ce0b7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0e:f5:07:48:bb:d4:aa:d0:0e:96:18:3a:c0:
d2:66:c4:64:76:55:a4:0a:ec:a5:f6:dc:ca:e2:a6:
1e:1f:9b:48:00:ed:e3:a3:aa:67:12:cb:14:11:b7:
19:e9:ab:7f:29:5b:08:95:34:fe:ba:c7:e4:64:ab:
15:b1:89:15:e7:49:1a:ab:e2:d5:d3:c6:2d:5e:73:
3f:fc:2e:62:19:8d:35:8d:bf:3b:e8:27:1f:a0:7d:
42:4e:d4:dd:2f:a9:a0:d0:96:ab:f9:60:05:a5:8f:
f4:e8:d0:92:7a:de:17:5e:4c:66:c7:45:a8:e4:0d:
5b:82:fa:7b:73:84:00:32:83:7f:4c:27:93:10:59:
02:e2:3e:e2:f5:39:74:ee:07:49:fb:67:14:21:b7:
3a:ef:95:33:32:a6:ed:e9:a5:88:0b:81:3f:e1:69:
04:ef:b9:7f:c7:b5:d1:81:dd:a6:20:03:80:90:f1:
81:86:e2:cc:75:db:c8:d3:d4:74:ec:83:16:0e:cd:
88:f7:86:d4:5e:c2:5f:f4:0e:90:54:fc:1e:51:e7:
0c:37:83:9e:29:78:ee:9d:0b:f5:cb:bf:32:cf:a8:
3b:a2:e4:1a:80:0a:e0:3a:d9:17:16:a6:6c:ff:a7:
e4:3d:32:ac:fc:6d:38:33:60:d4:bd:5d:3d:df:13:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F4:F2:D8:DA:0C:21:C6:03:04:B6:96:FD:70:9F:53:3C:E0:B7:CC
X509v3 Authority Key Identifier:
keyid:3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3e:dc:ba:3e:47:3d:2c:03:d2:c2:f0:c4:10:d8:68:4a:e9:
5d:56:a8:de:f1:9f:65:06:2e:16:44:32:07:e2:54:62:fc:00:
ed:d4:42:98:76:5d:d4:60:83:b5:9d:e0:e4:96:a2:40:8f:ef:
38:6b:20:01:f2:ea:57:89:22:db:44:eb:4b:48:71:7d:91:85:
44:f8:a6:cc:a9:8c:ee:ad:8e:e8:75:cc:e7:fc:8f:f8:4c:5e:
4a:c9:af:c7:79:20:f6:fc:eb:68:75:6e:26:e2:60:8d:2d:d2:
2c:10:93:b5:88:83:5f:90:ba:06:5d:b3:06:66:00:00:e9:f6:
da:f5:f3:18:8b:af:85:76:a3:15:be:5a:97:5d:29:0c:0a:92:
0d:59:44:af:ca:1d:1b:85:7c:62:f0:a0:94:c5:d6:55:75:72:
c8:65:52:1c:69:23:15:28:8e:8a:3f:3c:e3:5c:5f:8a:ae:73:
ab:32:c0:98:a3:20:60:33:56:49:23:3a:79:53:ec:39:fb:fb:
0c:93:48:0e:18:26:73:72:83:fb:f8:7e:28:27:f9:f0:63:ae:
9f:7c:d1:b9:52:15:27:dc:f4:ec:99:e4:96:b9:d8:c0:f1:39:
46:58:2c:22:f0:a7:ad:06:41:2b:11:a5:47:fd:71:ce:cd:43:
06:39:cb:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hYb+XSsXL4XL+Xyi8qUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNmM0NTIwNzU5ZjNhNGVmOGI5YTlhMjdlMjUzM2NlNzMy
YzU0MTEwHhcNMjUwMTMxMTgwMDMyWhcNMjUwMjAxMTgwMDMyWjAzMTEwLwYDVQQD
EyhlMmY0ZjJkOGRhMGMyMWM2MDMwNGI2OTZmZDcwOWY1MzNjZTBiN2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5w71B0i71KrQDpYYOsDSZsRkdlWk
Cuyl9tzK4qYeH5tIAO3jo6pnEssUEbcZ6at/KVsIlTT+usfkZKsVsYkV50kaq+LV
08YtXnM//C5iGY01jb876CcfoH1CTtTdL6mg0Jar+WAFpY/06NCSet4XXkxmx0Wo
5A1bgvp7c4QAMoN/TCeTEFkC4j7i9Tl07gdJ+2cUIbc675UzMqbt6aWIC4E/4WkE
77l/x7XRgd2mIAOAkPGBhuLMddvI09R07IMWDs2I94bUXsJf9A6QVPweUecMN4Oe
KXjunQv1y78yz6g7ouQagArgOtkXFqZs/6fkPTKs/G04M2DUvV093xPa6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOL08tjaDCHGAwS2lv1wn1M84LfMMB8GA1UdIwQY
MBaAFD5sRSB1nzpO+Lmpon4lM85zLFQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG14RklIV2ZPazc0dWFtaWZpVXp6bk1zVkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80ODNlMzMtYzc2Ny00NmI3LThmM2Et
OWMwYTBlMjc2N2FhLzEvUG14RklIV2ZPazc0dWFtaWZpVXp6bk1zVkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80ODNlMzMtYzc2Ny00NmI3LThmM2EtOWMwYTBlMjc2N2Fh
LzEvUG14RklIV2ZPazc0dWFtaWZpVXp6bk1zVkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADz7cuj5H
PSwD0sLwxBDYaErpXVao3vGfZQYuFkQyB+JUYvwA7dRCmHZd1GCDtZ3g5JaiQI/v
OGsgAfLqV4ki20TrS0hxfZGFRPimzKmM7q2O6HXM5/yP+ExeSsmvx3kg9vzraHVu
JuJgjS3SLBCTtYiDX5C6Bl2zBmYAAOn22vXzGIuvhXajFb5al10pDAqSDVlEr8od
G4V8YvCglMXWVXVyyGVSHGkjFSiOij8841xfiq5zqzLAmKMgYDNWSSM6eVPsOfv7
DJNIDhgmc3KD+/h+KCf58GOun3zRuVIVJ9z07JnklrnYwPE5RlgsIvCnrQZBKxGl
R/1xzs1DBjnLtQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:46 2025 by rpki-client