Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
File: p72rJYCrs79ii11PidSXzZ2SpOM.mft (raw, json)
Hash identifier: Ec57SfOyWiM1PWmaZjkBjxkQLBwB4fKuf98hD2g3Ay0=
Subject key identifier: F6:46:1C:3B:D5:EC:C0:0B:4D:CA:4D:DB:4B:F5:00:34:39:C8:02:21
Authority key identifier: A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
Certificate issuer: /CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
Certificate serial: 0194BCE0D5DCBA0E67AD84AF3A718D269E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: GdFZWMri9TOgFT_NeIYkh_SHlw0.roa (hash: NbWz1qM9hdBHH2+QMgdXpTZoVY8ecNxlY44TCKHTwLo=)
2: p72rJYCrs79ii11PidSXzZ2SpOM.crl (hash: Csjdk4lejioWxW2TB+Eo3JNY41gg30jvo/2P+NIhABc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d5:dc:ba:0e:67:ad:84:af:3a:71:8d:26:9e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=f6461c3bd5ecc00b4dca4ddb4bf5003439c80221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f2:0f:1e:1f:01:8d:dc:51:9c:2b:01:43:08:
3e:e0:71:3b:c3:d3:93:94:42:2a:75:3f:48:50:fb:
40:a9:a6:0d:4c:96:88:15:78:34:33:21:9a:93:24:
b9:bb:a3:1d:1a:95:88:37:7a:12:fe:ab:4d:75:a7:
42:16:71:39:ca:7d:6c:55:be:ba:f2:9a:75:b8:ca:
8a:6d:a6:62:72:da:79:f4:6d:e3:4b:0a:6c:ae:f8:
4f:68:86:ff:ee:9c:fb:72:70:b7:4c:b5:10:09:29:
48:ee:d5:d0:6d:bb:54:c1:c0:63:d4:1c:9e:3f:4d:
0d:d9:a4:a9:dd:15:21:16:da:97:b0:09:d5:a5:3d:
40:f3:d3:8c:62:d5:fe:74:7d:0f:b7:e0:3d:fa:cd:
e8:7c:5a:a1:7e:9f:6a:96:bf:be:08:e2:42:0f:a7:
b6:c6:b5:e0:70:38:64:4c:d8:97:ee:28:34:69:b2:
07:b6:1e:03:5d:67:15:44:c6:16:1f:8a:f0:93:b5:
42:d8:c2:63:71:06:cb:a4:b1:94:54:80:63:c8:f0:
58:a4:69:c6:51:90:cf:a6:94:ae:1b:d2:56:0c:d0:
69:ec:74:a2:4a:59:9b:40:79:2d:df:b8:54:a3:37:
79:6a:24:8d:43:ad:39:f7:fb:4f:2d:1a:fe:39:1b:
60:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:46:1C:3B:D5:EC:C0:0B:4D:CA:4D:DB:4B:F5:00:34:39:C8:02:21
X509v3 Authority Key Identifier:
keyid:A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ef:82:f2:9a:3c:54:03:a1:68:b6:c1:d1:d3:d4:c5:02:57:
57:93:df:7e:ab:54:c7:1b:a1:60:96:3d:65:91:ea:47:4e:3f:
95:3e:36:78:e5:3c:6f:16:5b:2a:98:82:cf:4c:c3:e2:bd:6d:
ad:75:50:a3:6d:4b:aa:d2:07:82:9e:97:aa:51:7c:77:fd:0e:
b1:2f:d2:f4:84:e9:c4:3b:45:96:7e:4b:6e:30:64:48:12:a9:
fb:b3:45:8a:ac:c1:f4:4f:a2:ee:23:88:c1:d3:cc:d4:17:e8:
a6:9c:5e:a1:71:aa:1e:ea:86:e3:89:77:a1:0e:44:f1:2d:c7:
2a:bc:7a:fb:a2:d1:d6:49:82:48:69:09:17:17:b4:3c:12:67:
33:94:9b:85:55:d1:17:41:ad:bc:10:53:f6:61:69:49:24:37:
cb:5b:8c:7d:b9:d8:90:fd:18:ae:33:77:e5:72:10:3b:f6:3e:
01:12:3d:45:69:21:43:b9:a6:ca:8f:9d:f5:28:36:48:26:c7:
34:52:56:4f:85:b9:36:d2:c1:77:fd:dd:bb:3d:99:b6:bf:65:
5e:44:16:c5:3e:34:07:17:07:26:3b:42:c8:a4:6e:80:74:2d:
75:98:88:19:71:a6:64:3b:96:7a:12:82:76:7e:eb:f0:f4:90:
47:82:52:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84NXcug5nrYSvOnGNJp4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YmRhYjI1ODBhYmIzYmY2MjhiNWQ0Zjg5ZDQ5N2NkOWQ5
MmE0ZTMwHhcNMjUwMTMxMTUwMDM4WhcNMjUwMjAxMTUwMDM4WjAzMTEwLwYDVQQD
EyhmNjQ2MWMzYmQ1ZWNjMDBiNGRjYTRkZGI0YmY1MDAzNDM5YzgwMjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvIPHh8BjdxRnCsBQwg+4HE7w9OT
lEIqdT9IUPtAqaYNTJaIFXg0MyGakyS5u6MdGpWIN3oS/qtNdadCFnE5yn1sVb66
8pp1uMqKbaZictp59G3jSwpsrvhPaIb/7pz7cnC3TLUQCSlI7tXQbbtUwcBj1Bye
P00N2aSp3RUhFtqXsAnVpT1A89OMYtX+dH0Pt+A9+s3ofFqhfp9qlr++COJCD6e2
xrXgcDhkTNiX7ig0abIHth4DXWcVRMYWH4rwk7VC2MJjcQbLpLGUVIBjyPBYpGnG
UZDPppSuG9JWDNBp7HSiSlmbQHkt37hUozd5aiSNQ6059/tPLRr+ORtgpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZGHDvV7MALTcpN20v1ADQ5yAIhMB8GA1UdIwQY
MBaAFKe9qyWAq7O/YotdT4nUl82dkqTjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDcyckpZQ3JzNzlpaTExUGlkU1h6WjJTcE9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84ZjFiNDYtYTRiMS00ZmYyLWJiZWMt
MWQ3MDlhNWM2MTZiLzEvcDcyckpZQ3JzNzlpaTExUGlkU1h6WjJTcE9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi84ZjFiNDYtYTRiMS00ZmYyLWJiZWMtMWQ3MDlhNWM2MTZi
LzEvcDcyckpZQ3JzNzlpaTExUGlkU1h6WjJTcE9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhO+C8po8
VAOhaLbB0dPUxQJXV5PffqtUxxuhYJY9ZZHqR04/lT42eOU8bxZbKpiCz0zD4r1t
rXVQo21LqtIHgp6XqlF8d/0OsS/S9ITpxDtFln5LbjBkSBKp+7NFiqzB9E+i7iOI
wdPM1BfoppxeoXGqHuqG44l3oQ5E8S3HKrx6+6LR1kmCSGkJFxe0PBJnM5SbhVXR
F0GtvBBT9mFpSSQ3y1uMfbnYkP0YrjN35XIQO/Y+ARI9RWkhQ7mmyo+d9Sg2SCbH
NFJWT4W5NtLBd/3duz2Ztr9lXkQWxT40BxcHJjtCyKRugHQtdZiIGXGmZDuWehKC
dn7r8PSQR4JSlw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:30 2025 by rpki-client