Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
File: PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft (raw, json)
Hash identifier: GgmR+h9F53x9SeKPyyC7SxTBAgnV6o4kQ2QeOHis8rY=
Subject key identifier: ED:21:8B:A4:3B:46:53:52:75:48:B3:26:12:3B:E9:F6:CE:D5:3D:ED
Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
Certificate issuer: /CN=3de4598e21736501a73944c107114c850c7d8b09
Certificate serial: 0194BBCDE4D4A94DE7A1C25B8E897562D046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
Manifest number: 1151
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl (hash: xtoJoKNOglnUKwPe5Jvv2HwfyoLwLj0vq2tJTY0KdHM=)
2: UMngkvwaRjIoN5eBBlFi84sCo3g.roa (hash: a8obNUaAoXy5QpQYwb8sCwj2NbkRTv7ZWZ/OkpJ4CGg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e4:d4:a9:4d:e7:a1:c2:5b:8e:89:75:62:d0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=ed218ba43b4653527548b326123be9f6ced53ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:8b:a5:c8:b9:20:1f:bc:38:d9:32:a8:ed:
01:7d:a4:4a:15:5a:e8:10:7f:fe:7d:58:c8:86:53:
f5:ee:30:38:38:74:19:26:aa:72:60:e5:65:d9:68:
a6:2f:0c:fa:fd:53:d1:b2:f2:36:6c:44:dd:1e:15:
7d:f0:3a:e2:38:04:2a:4e:43:ff:f2:45:49:cd:ab:
a0:60:53:88:4d:20:fe:ec:a6:a3:c8:e3:12:17:1b:
ff:06:77:05:df:e1:1c:86:ec:70:52:cc:4e:9a:35:
03:a1:7b:53:c0:81:18:0f:13:77:15:e5:57:15:f8:
fc:18:4f:8a:12:6c:45:d8:44:72:8d:ff:36:f1:00:
31:bf:b3:88:07:51:93:ce:3f:36:ff:7e:cc:8a:c6:
1e:e4:86:f0:b6:ba:b5:24:2b:50:66:6e:e7:0a:09:
40:31:a9:31:f3:a3:66:d0:0b:95:80:eb:17:81:b6:
b6:40:01:7a:a7:24:92:41:a9:c5:41:b5:a2:03:95:
fc:b8:ae:84:2c:74:40:32:80:13:17:68:83:23:44:
be:57:98:45:34:9c:66:a7:09:9e:e6:1c:f6:35:56:
f8:4d:6c:8b:7c:15:a3:1f:45:92:a2:fd:6a:98:42:
ad:da:f5:92:ef:14:40:ae:3e:2b:38:d6:70:36:08:
40:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:21:8B:A4:3B:46:53:52:75:48:B3:26:12:3B:E9:F6:CE:D5:3D:ED
X509v3 Authority Key Identifier:
keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:97:2f:69:d5:10:09:c0:05:1f:19:4d:8f:5c:95:0a:fe:e4:
ee:e2:f5:06:a2:e6:fa:c5:52:56:08:40:30:8f:49:5d:49:8f:
78:14:53:da:4d:a9:bb:97:2e:8b:13:99:17:90:ec:8c:6a:05:
9a:85:7d:ed:76:6e:10:91:c6:4b:76:49:80:19:52:ff:b1:8a:
ba:27:82:d3:d2:3f:c4:2a:e6:34:1a:f0:bf:bf:91:49:ad:b1:
39:63:7b:2c:b6:ff:26:96:65:95:dd:dd:ef:a9:16:04:e7:56:
9d:3c:e7:79:b1:f8:52:20:bf:69:1d:56:18:60:93:7c:6a:46:
44:3a:b4:e5:78:34:6f:5e:f1:a5:75:13:39:c6:47:9c:0d:d8:
6c:f3:7d:20:3b:b5:ab:cd:74:2d:0f:e4:3b:fb:08:9f:63:90:
05:34:a9:b3:6c:f2:3a:19:da:67:78:0b:b3:9b:02:0a:8f:f6:
20:0b:2b:01:84:56:98:e6:d3:4c:eb:6e:13:ea:4e:fc:cf:36:
90:9a:a0:68:9a:b4:4f:8b:76:9c:28:d6:09:01:0f:73:ce:ef:
21:7e:05:e0:e7:44:51:35:70:34:ef:e4:3f:6c:95:44:4e:c3:
83:c6:b4:31:77:c8:ff:5c:54:07:e0:8c:ea:49:75:ef:d5:7b:
00:1d:34:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeTUqU3nocJbjol1YtBGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZTQ1OThlMjE3MzY1MDFhNzM5NDRjMTA3MTE0Yzg1MGM3
ZDhiMDkwHhcNMjUwMTMxMTAwMDIwWhcNMjUwMjAxMTAwMDIwWjAzMTEwLwYDVQQD
EyhlZDIxOGJhNDNiNDY1MzUyNzU0OGIzMjYxMjNiZTlmNmNlZDUzZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGKLpci5IB+8ONkyqO0BfaRKFVro
EH/+fVjIhlP17jA4OHQZJqpyYOVl2WimLwz6/VPRsvI2bETdHhV98DriOAQqTkP/
8kVJzaugYFOITSD+7KajyOMSFxv/BncF3+EchuxwUsxOmjUDoXtTwIEYDxN3FeVX
Ffj8GE+KEmxF2ERyjf828QAxv7OIB1GTzj82/37MisYe5Ibwtrq1JCtQZm7nCglA
Makx86Nm0AuVgOsXgba2QAF6pySSQanFQbWiA5X8uK6ELHRAMoATF2iDI0S+V5hF
NJxmpwme5hz2NVb4TWyLfBWjH0WSov1qmEKt2vWS7xRArj4rONZwNghAawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0hi6Q7RlNSdUizJhI76fbO1T3tMB8GA1UdIwQY
MBaAFD3kWY4hc2UBpzlEwQcRTIUMfYsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGVSWmppRnpaUUduT1VUQkJ4Rk1oUXg5aXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80ZDNiOGMtNzIzOS00ODNjLWE0OGMt
N2Q2MDhiZWUzMTY3LzEvUGVSWmppRnpaUUduT1VUQkJ4Rk1oUXg5aXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80ZDNiOGMtNzIzOS00ODNjLWE0OGMtN2Q2MDhiZWUzMTY3
LzEvUGVSWmppRnpaUUduT1VUQkJ4Rk1oUXg5aXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpcvadUQ
CcAFHxlNj1yVCv7k7uL1BqLm+sVSVghAMI9JXUmPeBRT2k2pu5cuixOZF5DsjGoF
moV97XZuEJHGS3ZJgBlS/7GKuieC09I/xCrmNBrwv7+RSa2xOWN7LLb/JpZlld3d
76kWBOdWnTznebH4UiC/aR1WGGCTfGpGRDq05Xg0b17xpXUTOcZHnA3YbPN9IDu1
q810LQ/kO/sIn2OQBTSps2zyOhnaZ3gLs5sCCo/2IAsrAYRWmObTTOtuE+pO/M82
kJqgaJq0T4t2nCjWCQEPc87vIX4F4OdEUTVwNO/kP2yVRE7Dg8a0MXfI/1xUB+CM
6kl179V7AB00Pg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:18 2025 by rpki-client