Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
File: pPP3bj7O8kl-ET6ju664U_YvWP4.mft (raw, json)
Hash identifier: mlqsAutNX8ThoUL4uGIEN7hcMUj/z9MHvdeqVrh9aHE=
Subject key identifier: 6B:22:21:AE:FB:8D:5A:D1:AF:83:84:A9:00:B2:CF:D3:CC:4A:CF:1C
Authority key identifier: A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
Certificate issuer: /CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Certificate serial: 0194BCA9B0ED0C19F8D1CB09D65D37A28444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
Manifest number: 0ABF
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: 66ywR3ba4enexaVdWoqndnOvp4U.roa (hash: Qkz3r6su/bj0dLkhbVaX1i/95TsjjuS65tg9qxOjli4=)
2: pPP3bj7O8kl-ET6ju664U_YvWP4.crl (hash: SzFcegw+JhpGWsP2r3SI4EbWZmDJXJf7hjey5cAT/S4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b0:ed:0c:19:f8:d1:cb:09:d6:5d:37:a2:84:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=6b2221aefb8d5ad1af8384a900b2cfd3cc4acf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:46:3d:97:09:e0:cc:89:9a:dc:a5:ad:17:8c:
a6:a6:3f:d8:49:79:72:e6:03:d4:9b:fb:62:0e:14:
92:3f:92:fb:1b:9d:f7:02:af:f3:59:fc:bc:04:e5:
d7:c8:a7:57:59:b6:02:41:e6:89:d5:62:4d:79:b1:
ff:45:d9:2e:a3:48:43:3c:75:54:77:9b:4d:33:65:
e6:26:21:dc:2c:c0:25:0e:f5:8d:73:c0:5b:a4:9e:
e9:78:07:af:11:de:9b:7e:e4:5c:23:ba:67:b9:6a:
54:c6:2d:b5:12:84:37:4b:39:09:5d:c9:9b:f9:54:
c9:7e:e9:05:51:5e:61:90:d8:2a:7e:89:29:1d:83:
85:99:72:2a:c4:d4:5d:8a:d3:3a:37:d9:a1:1e:59:
cd:07:39:09:a1:b1:51:13:bf:3a:34:8a:cb:64:c5:
c0:36:04:3c:ed:cf:54:46:5e:8b:6c:25:dd:a4:e4:
a8:13:6a:ff:a6:10:ce:e6:19:7c:a7:8d:fe:0d:48:
39:53:2a:35:58:89:2d:8c:03:43:64:58:84:c5:18:
f8:29:57:5d:60:26:14:47:64:62:74:b4:67:de:77:
b0:d9:7b:20:ed:1e:3b:c4:66:12:3b:b1:e0:6e:4e:
1e:df:07:e4:0c:73:7d:ea:12:67:7d:47:94:ed:00:
56:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:22:21:AE:FB:8D:5A:D1:AF:83:84:A9:00:B2:CF:D3:CC:4A:CF:1C
X509v3 Authority Key Identifier:
keyid:A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b8:a5:ce:72:f4:e9:4c:0d:ce:f8:24:29:88:80:cb:d4:67:
7f:49:3b:7c:e9:5d:86:58:35:c4:45:82:07:8f:e6:43:bf:3b:
21:d8:24:26:c1:7d:44:4b:6e:03:79:ab:71:40:37:6b:78:3f:
86:4d:37:a3:9f:3f:7c:6b:d6:41:3c:bb:03:51:58:79:5e:49:
30:8b:e7:1c:51:11:c5:09:0b:ed:a3:2a:02:db:06:f8:7d:dd:
80:23:88:a7:6b:46:ef:b2:74:1c:d2:ba:ba:78:3e:63:c8:77:
60:8d:1d:b4:da:36:50:db:6a:a2:56:b6:88:be:7f:04:77:f4:
c2:5a:ad:23:f9:b1:41:e6:69:05:4f:a2:19:46:a8:4b:93:ee:
ae:dc:0f:68:33:39:c3:9e:43:5d:e6:98:81:f2:1c:fb:28:14:
cd:20:8b:24:b7:c5:9c:86:b5:aa:c4:5e:09:3d:80:31:c8:f9:
b3:a8:f8:cf:84:0d:e4:be:63:1b:10:3c:d8:ac:6e:9f:d3:a1:
f1:b9:ad:bc:4b:c4:b5:6e:5b:61:1f:ef:35:9d:80:29:9f:0d:
e8:6d:48:bb:33:e8:1a:94:ec:b8:01:5e:ab:ca:d4:5a:c3:68:
a1:5c:e0:a3:6f:a5:c8:37:b1:26:fb:40:11:52:eb:3d:b2:02:
4d:d8:28:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qbDtDBn40csJ1l03ooREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjNmNzZlM2VjZWYyNDk3ZTExM2VhM2JiYWViODUzZjYy
ZjU4ZmUwHhcNMjUwMTMxMTQwMDI0WhcNMjUwMjAxMTQwMDI0WjAzMTEwLwYDVQQD
Eyg2YjIyMjFhZWZiOGQ1YWQxYWY4Mzg0YTkwMGIyY2ZkM2NjNGFjZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EY9lwngzIma3KWtF4ympj/YSXly
5gPUm/tiDhSSP5L7G533Aq/zWfy8BOXXyKdXWbYCQeaJ1WJNebH/Rdkuo0hDPHVU
d5tNM2XmJiHcLMAlDvWNc8BbpJ7peAevEd6bfuRcI7pnuWpUxi21EoQ3SzkJXcmb
+VTJfukFUV5hkNgqfokpHYOFmXIqxNRditM6N9mhHlnNBzkJobFRE786NIrLZMXA
NgQ87c9URl6LbCXdpOSoE2r/phDO5hl8p43+DUg5Uyo1WIktjANDZFiExRj4KVdd
YCYUR2RidLRn3new2Xsg7R47xGYSO7Hgbk4e3wfkDHN96hJnfUeU7QBWnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsiIa77jVrRr4OEqQCyz9PMSs8cMB8GA1UdIwQY
MBaAFKTz924+zvJJfhE+o7uuuFP2L1j+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBQM2JqN084a2wtRVQ2anU2NjRVX1l2V1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNmM1NWEtODYyOC00MjlmLWEyZWMt
NGYyYzE5YmQ1NGQ3LzEvcFBQM2JqN084a2wtRVQ2anU2NjRVX1l2V1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9kNmM1NWEtODYyOC00MjlmLWEyZWMtNGYyYzE5YmQ1NGQ3
LzEvcFBQM2JqN084a2wtRVQ2anU2NjRVX1l2V1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbilznL0
6UwNzvgkKYiAy9Rnf0k7fOldhlg1xEWCB4/mQ787IdgkJsF9REtuA3mrcUA3a3g/
hk03o58/fGvWQTy7A1FYeV5JMIvnHFERxQkL7aMqAtsG+H3dgCOIp2tG77J0HNK6
ung+Y8h3YI0dtNo2UNtqola2iL5/BHf0wlqtI/mxQeZpBU+iGUaoS5PurtwPaDM5
w55DXeaYgfIc+ygUzSCLJLfFnIa1qsReCT2AMcj5s6j4z4QN5L5jGxA82Kxun9Oh
8bmtvEvEtW5bYR/vNZ2AKZ8N6G1IuzPoGpTsuAFeq8rUWsNooVzgo2+lyDexJvtA
EVLrPbICTdgoeA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:32:54 2025 by rpki-client