Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
File: _PLPcoTXoDRugvN4rYMPV8OWG20.mft (raw, json)
Hash identifier: /OD3ppHFqMyZSiEkCFVHWJuEhG7yWuWCE6R5EOe9lvA=
Subject key identifier: 42:03:16:EB:D3:38:9C:C9:4D:2B:C1:0B:83:A8:F8:8F:97:9A:CA:2B
Authority key identifier: FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D
Certificate issuer: /CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
Certificate serial: 0194BD85885E9D50838A2BD928E4E7CCD4BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
Manifest number: 0737
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: _PLPcoTXoDRugvN4rYMPV8OWG20.crl (hash: koVqvqC7nv2domAPe+8FSlWLdLL+dQL7187uoHRAc+A=)
2: c1o3ffEqrdrU8ebbTBwhLFlhPXg.roa (hash: fm+w7SzhvawtVdf496aqLGV6dF6J/LTyEnyM1VppA6o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:88:5e:9d:50:83:8a:2b:d9:28:e4:e7:cc:d4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=420316ebd3389cc94d2bc10b83a8f88f979aca2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:83:9f:3c:01:6d:a6:85:41:c3:d2:b6:8a:
34:df:b1:16:85:21:0f:ea:e0:fe:a8:59:e5:44:ca:
b6:de:6b:d0:f7:e1:84:b8:0c:aa:9e:a8:da:61:ec:
42:7b:01:0b:b5:07:c8:15:75:03:f4:0a:00:3a:5d:
ef:bb:01:45:04:df:51:9d:d8:bf:63:4f:df:8b:2e:
43:ea:30:ad:9b:c9:1c:b7:fb:1b:3e:92:70:d1:5c:
4d:53:a0:a3:5a:be:de:60:09:94:c4:f1:0b:33:12:
ba:2e:75:5c:13:e0:32:bc:7b:ad:d3:e6:05:17:9d:
e9:19:19:1d:7c:d9:a5:83:dd:f3:51:aa:95:62:ac:
3d:a1:ca:e3:38:25:f9:e4:46:4e:5e:67:87:30:09:
1d:ed:30:92:b9:31:7a:a1:8e:28:55:fd:e1:73:88:
e7:7d:2b:5f:f8:84:b0:8b:b9:ba:98:4f:85:71:7e:
d9:75:17:b4:ae:ae:b6:07:aa:b2:7a:ed:ab:67:3a:
57:15:6f:7c:b2:dd:01:6f:6b:a5:cb:be:c7:32:e7:
f3:c7:56:40:99:87:fe:1d:15:f9:ca:49:24:50:c8:
98:de:60:01:d0:59:0c:59:90:3b:0c:8d:eb:ab:b2:
82:07:c7:0d:10:df:99:f0:a2:49:c4:df:3a:aa:99:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:03:16:EB:D3:38:9C:C9:4D:2B:C1:0B:83:A8:F8:8F:97:9A:CA:2B
X509v3 Authority Key Identifier:
keyid:FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:70:82:ea:a2:fa:92:8d:7a:9c:9c:85:f8:fb:90:0f:65:dd:
c0:a5:49:b1:a6:da:54:2d:04:ff:5d:d0:59:c5:76:a2:fe:f5:
fd:4d:9b:9d:0d:bd:06:7e:43:e7:f4:6d:2a:bd:33:3e:d5:9c:
95:2a:5b:cf:22:9c:ac:ca:12:71:01:34:6e:87:1a:1d:31:a0:
2e:53:86:f5:29:0c:66:10:98:db:3e:95:81:d9:71:2c:d5:dc:
83:f5:07:8e:b9:26:9c:e3:8a:79:44:a0:e1:4c:79:26:68:9d:
24:b8:0b:04:bb:35:ab:b4:45:d9:34:2e:fd:45:4f:ae:64:6f:
6a:ac:6b:b0:75:e4:64:7a:f9:06:13:1c:dc:f3:4d:87:c9:70:
56:13:0e:f2:bb:b1:0c:04:1e:6e:a1:d3:b4:55:ab:3c:c2:88:
d5:2f:fa:1f:cf:fc:43:c5:55:61:e8:d4:5c:31:48:96:64:0a:
08:a6:e0:d6:a2:b5:a0:40:e8:bd:2d:48:0a:11:ff:d8:ac:11:
4c:b9:c2:95:80:a7:ec:b8:c8:72:04:51:07:5d:5f:2c:0a:f5:
d7:62:00:bd:07:1e:59:5c:b0:3a:46:2a:a7:0d:fc:4b:f3:d9:
53:21:3e:c0:37:f2:0a:14:0a:42:73:a5:aa:96:6a:4e:27:99:
7d:2e:7e:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hYhenVCDiivZKOTnzNS8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZjJjZjcyODRkN2EwMzQ2ZTgyZjM3OGFkODMwZjU3YzM5
NjFiNmQwHhcNMjUwMTMxMTgwMDMyWhcNMjUwMjAxMTgwMDMyWjAzMTEwLwYDVQQD
Eyg0MjAzMTZlYmQzMzg5Y2M5NGQyYmMxMGI4M2E4Zjg4Zjk3OWFjYTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPuDnzwBbaaFQcPStoo037EWhSEP
6uD+qFnlRMq23mvQ9+GEuAyqnqjaYexCewELtQfIFXUD9AoAOl3vuwFFBN9Rndi/
Y0/fiy5D6jCtm8kct/sbPpJw0VxNU6CjWr7eYAmUxPELMxK6LnVcE+AyvHut0+YF
F53pGRkdfNmlg93zUaqVYqw9ocrjOCX55EZOXmeHMAkd7TCSuTF6oY4oVf3hc4jn
fStf+ISwi7m6mE+FcX7ZdRe0rq62B6qyeu2rZzpXFW98st0Bb2uly77HMufzx1ZA
mYf+HRX5ykkkUMiY3mAB0FkMWZA7DI3rq7KCB8cNEN+Z8KJJxN86qpmVswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIDFuvTOJzJTSvBC4Oo+I+XmsorMB8GA1UdIwQY
MBaAFPzyz3KE16A0boLzeK2DD1fDlhttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kZGFkOWItYzlmMS00MzFiLWIwOTMt
YjY4MzViNzMyYWQ2LzEvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kZGFkOWItYzlmMS00MzFiLWIwOTMtYjY4MzViNzMyYWQ2
LzEvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3CC6qL6
ko16nJyF+PuQD2XdwKVJsabaVC0E/13QWcV2ov71/U2bnQ29Bn5D5/RtKr0zPtWc
lSpbzyKcrMoScQE0bocaHTGgLlOG9SkMZhCY2z6VgdlxLNXcg/UHjrkmnOOKeUSg
4Ux5JmidJLgLBLs1q7RF2TQu/UVPrmRvaqxrsHXkZHr5BhMc3PNNh8lwVhMO8rux
DAQebqHTtFWrPMKI1S/6H8/8Q8VVYejUXDFIlmQKCKbg1qK1oEDovS1IChH/2KwR
TLnClYCn7LjIcgRRB11fLAr112IAvQceWVywOkYqpw38S/PZUyE+wDfyChQKQnOl
qpZqTieZfS5+eg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:38 2025 by rpki-client