Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.mft
File: PS0a2mFMaOF0xN7fVZlqlUMW6uY.mft (raw, json)
Hash identifier: u2lqsAbyONu4x+OrsUs/H3DlQ+7lAszDhWHqwZJIofU=
Subject key identifier: 47:8A:86:2E:D2:77:13:38:6D:28:8A:B2:FD:CE:4A:D2:D3:E8:0B:5B
Authority key identifier: 3D:2D:1A:DA:61:4C:68:E1:74:C4:DE:DF:55:99:6A:95:43:16:EA:E6
Certificate issuer: /CN=3d2d1ada614c68e174c4dedf55996a954316eae6
Certificate serial: 0194BBCE98992B01C609A0B0F0D016D7D65F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS0a2mFMaOF0xN7fVZlqlUMW6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: PS0a2mFMaOF0xN7fVZlqlUMW6uY.crl (hash: 7bGpd/1ycEmBDfqCFZUt2c+8S1CHqUrTPyUefpZRIgo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:98:99:2b:01:c6:09:a0:b0:f0:d0:16:d7:d6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2d1ada614c68e174c4dedf55996a954316eae6
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=478a862ed27713386d288ab2fdce4ad2d3e80b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:ef:39:2c:09:4d:c8:64:5e:60:d1:eb:38:
2d:07:c9:30:a5:88:37:ca:28:dd:a3:ab:4e:40:9d:
32:b5:3b:da:cf:16:bf:a6:43:80:a0:7a:ad:b2:8b:
40:b9:a9:b8:b0:29:b9:e0:16:77:c5:2f:4f:b7:45:
68:85:14:9a:46:64:66:8a:93:02:e1:0c:fc:3e:eb:
a2:4c:35:62:e4:c8:c4:37:50:54:7e:59:32:5d:f7:
7a:d3:7c:99:46:43:51:c7:c5:c6:b6:ef:5d:f0:3f:
c7:1c:4b:cc:bc:64:3a:0a:8e:6d:12:91:ce:39:08:
ac:14:e4:60:62:ae:fe:1a:95:64:a9:97:b3:24:4b:
5c:c6:4e:f7:13:44:a7:ea:98:16:51:71:9d:8d:f6:
67:96:a2:8a:47:1f:d5:18:12:ed:62:2f:5c:43:91:
9d:29:2e:92:4f:8f:a4:4e:f5:6a:f4:9e:f3:30:88:
01:ff:9e:9e:09:f7:ba:1a:4f:7a:0b:e5:3f:e9:c2:
00:8e:be:22:b3:49:e8:b2:c8:c5:a1:ef:e7:d9:a2:
99:b9:22:32:c6:f2:85:6b:fa:e9:92:51:ab:3a:6e:
51:df:91:5e:97:c1:3e:5b:e6:33:a3:17:06:ad:9f:
c8:1e:a0:ab:50:64:ae:36:96:56:6b:82:50:21:ba:
9a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8A:86:2E:D2:77:13:38:6D:28:8A:B2:FD:CE:4A:D2:D3:E8:0B:5B
X509v3 Authority Key Identifier:
keyid:3D:2D:1A:DA:61:4C:68:E1:74:C4:DE:DF:55:99:6A:95:43:16:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS0a2mFMaOF0xN7fVZlqlUMW6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0b:47:f9:1a:02:ae:64:07:14:78:c0:81:87:ac:4b:9d:8d:
32:10:a5:58:e6:4e:46:c2:5a:5b:33:da:07:f9:b8:18:76:df:
09:a2:ab:e9:8e:6b:dd:28:70:b6:53:26:9d:e0:92:24:66:6b:
cf:fb:b8:88:42:02:d7:59:cf:6d:f9:7b:be:a8:39:c1:65:a7:
eb:f2:cc:6d:a0:18:3d:d0:52:e2:2f:3f:6e:4e:12:35:49:d3:
b7:3f:6d:ed:f1:a8:3c:9e:74:34:f4:b3:1a:a9:bd:57:f9:c2:
4b:df:ad:bc:ce:d0:fe:80:ad:0b:4c:7f:a5:5b:6f:e1:05:50:
a1:5d:d3:03:66:3d:d8:3f:f1:81:a7:42:c9:4e:fe:02:ef:fe:
86:d9:41:51:16:51:53:b1:b7:a1:bf:a4:57:bc:b1:fa:69:06:
73:0f:bd:9c:45:3b:9b:0d:69:d2:f0:99:4f:82:48:de:3a:9c:
48:aa:29:e3:cf:5b:8d:95:bb:71:f5:d7:51:58:6b:bc:88:22:
20:d5:9a:7b:cb:a0:5a:8b:f3:62:11:07:f6:60:d0:34:b7:ee:
b9:dd:42:9e:c9:9e:02:d7:44:b6:d6:b2:69:32:b6:54:b4:53:
d1:8a:cf:5d:7c:d5:ba:fb:4b:9e:b0:6c:41:c6:03:2a:0c:78:
7a:f2:6b:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zpiZKwHGCaCw8NAW19ZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMmQxYWRhNjE0YzY4ZTE3NGM0ZGVkZjU1OTk2YTk1NDMx
NmVhZTYwHhcNMjUwMTMxMTAwMTA2WhcNMjUwMjAxMTAwMTA2WjAzMTEwLwYDVQQD
Eyg0NzhhODYyZWQyNzcxMzM4NmQyODhhYjJmZGNlNGFkMmQzZTgwYjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytzvOSwJTchkXmDR6zgtB8kwpYg3
yijdo6tOQJ0ytTvazxa/pkOAoHqtsotAuam4sCm54BZ3xS9Pt0VohRSaRmRmipMC
4Qz8PuuiTDVi5MjEN1BUflkyXfd603yZRkNRx8XGtu9d8D/HHEvMvGQ6Co5tEpHO
OQisFORgYq7+GpVkqZezJEtcxk73E0Sn6pgWUXGdjfZnlqKKRx/VGBLtYi9cQ5Gd
KS6ST4+kTvVq9J7zMIgB/56eCfe6Gk96C+U/6cIAjr4is0nossjFoe/n2aKZuSIy
xvKFa/rpklGrOm5R35Fel8E+W+YzoxcGrZ/IHqCrUGSuNpZWa4JQIbqaGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeKhi7SdxM4bSiKsv3OStLT6AtbMB8GA1UdIwQY
MBaAFD0tGtphTGjhdMTe31WZapVDFurmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFMwYTJtRk1hT0YweE43ZlZabHFsVU1XNnVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9mY2JmZDctZDc4NS00YjA2LTg4YzUt
NDg2Y2FlMDQxZTBlLzEvUFMwYTJtRk1hT0YweE43ZlZabHFsVU1XNnVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9mY2JmZDctZDc4NS00YjA2LTg4YzUtNDg2Y2FlMDQxZTBl
LzEvUFMwYTJtRk1hT0YweE43ZlZabHFsVU1XNnVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAtH+RoC
rmQHFHjAgYesS52NMhClWOZORsJaWzPaB/m4GHbfCaKr6Y5r3ShwtlMmneCSJGZr
z/u4iEIC11nPbfl7vqg5wWWn6/LMbaAYPdBS4i8/bk4SNUnTtz9t7fGoPJ50NPSz
Gqm9V/nCS9+tvM7Q/oCtC0x/pVtv4QVQoV3TA2Y92D/xgadCyU7+Au/+htlBURZR
U7G3ob+kV7yx+mkGcw+9nEU7mw1p0vCZT4JI3jqcSKop489bjZW7cfXXUVhrvIgi
INWae8ugWovzYhEH9mDQNLfuud1CnsmeAtdEttayaTK2VLRT0YrPXXzVuvtLnrBs
QcYDKgx4evJrSg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:39 2025 by rpki-client