Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File: pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier: 9ZH2+wHrVxFaMrlf2qA0k2i732Vyv9v6I6t0OhPE/f0=
Subject key identifier: BE:21:6B:4B:D5:CA:A7:D0:BD:A1:8D:E7:1D:22:17:2E:7F:46:4F:4F
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial: 0194BC04E6B9DAC8B0AC27F1DB8E904B73C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number: 0ABF
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: 2Qr4P6TtNG8XIKkXI_c0cLDbaUc.roa (hash: MYKMpqtjE4XkNANAGzzsCBedfNhF2YMsBN5+jKHyoYI=)
2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: H/gP/ARLecotdfzyZum920fW5JKUJRvFlHniS/d/ozY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e6:b9:da:c8:b0:ac:27:f1:db:8e:90:4b:73:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=be216b4bd5caa7d0bda18de71d22172e7f464f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:42:2c:c9:60:b3:79:10:23:34:94:66:dc:
d5:d2:cb:28:bd:83:c5:c2:3a:4b:75:30:1f:81:7b:
a2:4d:cd:4a:01:2c:8f:2b:bb:e8:86:9f:43:47:19:
3d:11:ea:0a:8f:7b:d7:7c:57:09:f1:3b:0a:e4:73:
c9:e3:a1:c1:c4:fb:a9:ed:9b:97:e0:48:ad:05:04:
84:bd:67:18:d4:aa:68:5a:2f:b1:5c:80:12:bd:bb:
53:36:87:be:12:3a:30:99:11:95:dc:f5:01:7d:1c:
70:d8:f9:89:f2:0a:65:bf:72:e7:4c:73:52:6b:26:
f9:0d:1d:b5:71:1d:cb:d5:a1:1f:68:e5:4a:aa:0d:
f9:9d:b8:b1:c1:72:c0:40:35:07:c9:07:a7:3a:4b:
be:7a:ba:b4:b5:7d:a5:d1:a6:5f:c9:16:cd:e8:73:
f4:c1:ed:8e:c0:48:e6:d3:24:fd:46:71:9b:1b:a8:
30:e5:d6:c1:a1:40:2c:98:98:27:52:d2:a5:e0:f4:
b1:87:df:52:e9:b2:37:c1:4d:92:9e:07:40:6f:04:
93:1f:5f:8a:e3:cd:19:a9:7c:db:0e:dd:fe:08:14:
c0:fc:15:74:a5:e2:17:38:99:3f:86:7b:db:47:f1:
4d:f4:01:8b:de:d4:97:42:7f:b6:01:e3:6e:a9:69:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:21:6B:4B:D5:CA:A7:D0:BD:A1:8D:E7:1D:22:17:2E:7F:46:4F:4F
X509v3 Authority Key Identifier:
keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:86:c4:af:45:d8:ba:fd:5d:f6:67:02:a3:ee:08:9a:cb:6c:
7f:2d:de:b7:51:44:7e:69:cb:ea:33:f7:cd:8c:98:f4:14:79:
a0:c6:c4:d6:3a:03:6e:e1:cb:66:8a:8c:7f:10:b7:fd:d1:8c:
5c:ed:51:bc:4f:cd:99:0d:5c:07:0b:96:c9:d9:9b:47:ca:40:
92:e0:45:40:80:2e:6c:14:0b:24:87:21:50:5d:dd:eb:7b:ab:
94:92:fe:4c:ff:92:95:67:21:c9:83:82:ab:f3:39:60:70:ab:
db:9c:25:f9:59:03:cb:f7:0c:3d:fb:6c:05:a9:5d:da:4f:bd:
ae:b2:ad:f7:04:2b:e6:ca:16:fb:c4:f7:8f:50:a1:76:53:86:
f1:75:8f:40:14:db:bd:66:38:4a:e2:45:82:0c:01:0a:5b:bd:
1c:95:0d:5e:a1:37:a7:75:11:f9:e2:cb:8b:d1:74:89:37:5b:
e9:ba:ca:3f:b0:ce:27:6b:6d:b5:a8:25:d4:a7:a2:de:2e:fb:
fb:74:1e:d9:a2:cc:52:8e:61:9d:11:24:ef:91:ee:87:ac:10:
4a:fe:60:47:eb:6c:19:b8:7d:e4:d5:92:fe:99:dd:2e:59:4b:
4e:15:61:d9:ba:68:a1:6b:ad:ff:16:d1:5e:6a:0c:8d:a2:a0:
5d:ce:2d:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOa52siwrCfx246QS3PDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YTAxNWIyZDNkM2U5MDliNjAyZjlmZGQ0ZjZmNmY2MTg4
NzNjNTgwHhcNMjUwMTMxMTEwMDI1WhcNMjUwMjAxMTEwMDI1WjAzMTEwLwYDVQQD
EyhiZTIxNmI0YmQ1Y2FhN2QwYmRhMThkZTcxZDIyMTcyZTdmNDY0ZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ9CLMlgs3kQIzSUZtzV0ssovYPF
wjpLdTAfgXuiTc1KASyPK7vohp9DRxk9EeoKj3vXfFcJ8TsK5HPJ46HBxPup7ZuX
4EitBQSEvWcY1KpoWi+xXIASvbtTNoe+EjowmRGV3PUBfRxw2PmJ8gplv3LnTHNS
ayb5DR21cR3L1aEfaOVKqg35nbixwXLAQDUHyQenOku+erq0tX2l0aZfyRbN6HP0
we2OwEjm0yT9RnGbG6gw5dbBoUAsmJgnUtKl4PSxh99S6bI3wU2SngdAbwSTH1+K
480ZqXzbDt3+CBTA/BV0peIXOJk/hnvbR/FN9AGL3tSXQn+2AeNuqWn2MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4ha0vVyqfQvaGN5x0iFy5/Rk9PMB8GA1UdIwQY
MBaAFKSgFbLT0+kJtgL5/dT29vYYhzxYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iOWJkYTMtYjYxMS00MzM4LWJiZTgt
YTdkZDE2MzQzMjk3LzEvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iOWJkYTMtYjYxMS00MzM4LWJiZTgtYTdkZDE2MzQzMjk3
LzEvcEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4bEr0XY
uv1d9mcCo+4Imstsfy3et1FEfmnL6jP3zYyY9BR5oMbE1joDbuHLZoqMfxC3/dGM
XO1RvE/NmQ1cBwuWydmbR8pAkuBFQIAubBQLJIchUF3d63urlJL+TP+SlWchyYOC
q/M5YHCr25wl+VkDy/cMPftsBald2k+9rrKt9wQr5soW+8T3j1ChdlOG8XWPQBTb
vWY4SuJFggwBClu9HJUNXqE3p3UR+eLLi9F0iTdb6brKP7DOJ2tttagl1Kei3i77
+3Qe2aLMUo5hnREk75Huh6wQSv5gR+tsGbh95NWS/pndLllLThVh2bpooWut/xbR
XmoMjaKgXc4tHA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:08 2025 by rpki-client