Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
File: px4O7lkN4v2N7Epn6HvIlv_IsrU.mft (raw, json)
Hash identifier: vy0x4KWpsSWRy6Pgui8HsF/m6vyWHkRIhP8DGXm59ho=
Subject key identifier: F3:B2:CB:12:03:6D:24:94:EB:BE:9E:C2:31:62:88:31:69:F6:33:B7
Authority key identifier: A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5
Certificate issuer: /CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5
Certificate serial: 0194BCA9F93C76560FB385848E872689D8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: gACG_CZ-Iug99I2lwvBj2F9-h5o.roa (hash: nmlBka4iP6DO0ZjdL5pCRw7PZdQRFau0PkO/pT9dD0g=)
2: px4O7lkN4v2N7Epn6HvIlv_IsrU.crl (hash: P/XCZgGzEKm3TIoIMRlc71tpKGJzR/4JM/JEU2nZYFg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f9:3c:76:56:0f:b3:85:84:8e:87:26:89:d8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=f3b2cb12036d2494ebbe9ec23162883169f633b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:81:9c:87:7d:26:e9:73:d5:f9:57:53:3b:
4f:47:d7:9a:04:06:6e:7c:5e:bf:23:95:66:18:e8:
ea:ed:19:8b:42:29:91:1c:70:4a:66:bc:9a:0c:8e:
a6:51:7a:8b:59:03:ba:d2:c8:3d:48:97:4b:05:f3:
a7:88:c0:13:04:d2:3b:21:8c:5f:12:2c:2d:5c:52:
93:40:7d:38:91:05:d0:91:1e:f9:43:2b:bb:88:88:
a2:3b:6e:80:49:37:19:bc:cf:0b:f4:02:18:97:96:
3c:b6:f4:ff:7c:61:0b:3e:ea:ca:be:33:48:be:49:
15:95:16:5a:a8:6b:2c:9b:7f:67:6c:f6:90:c6:f8:
5d:86:38:85:d0:5b:79:20:93:0c:7b:1b:b7:db:08:
3f:74:af:79:b1:c5:99:b7:f5:4d:df:a2:2b:e8:a2:
7d:67:08:1d:0d:42:fb:0e:07:c3:67:63:30:ce:3c:
ff:75:de:f0:7d:cf:4e:9a:19:69:18:a4:23:25:b2:
8b:fe:72:ac:df:8c:1f:9a:74:30:77:e0:8f:5c:dc:
ad:d6:43:77:dd:bd:0c:8b:ab:86:0b:f1:4b:af:08:
34:c7:60:89:23:0a:3a:c5:46:47:a7:33:22:bf:99:
2d:36:5c:df:f8:47:32:ad:73:82:b6:16:6e:c4:84:
0d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B2:CB:12:03:6D:24:94:EB:BE:9E:C2:31:62:88:31:69:F6:33:B7
X509v3 Authority Key Identifier:
keyid:A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2b:30:0d:7b:91:ae:76:9a:40:6a:7e:09:e7:75:37:38:33:
c4:eb:44:20:79:6e:78:cc:28:9a:e1:62:ef:57:a9:89:bb:e5:
e5:8f:ac:96:1c:8b:4f:ba:06:25:9b:6c:af:15:c4:f5:bc:3b:
6c:cf:5e:4b:98:64:d8:74:b4:1b:35:da:32:88:7f:12:8a:f4:
29:1f:2c:54:ee:3a:9c:aa:51:16:54:60:09:05:b8:6b:41:7c:
41:d5:65:64:e9:0d:c6:a9:7b:82:f6:cc:f6:33:29:4c:97:8a:
47:a3:4a:e5:7c:4c:99:a7:d1:4a:6b:01:fc:0c:d3:f7:cc:0c:
65:55:f7:56:05:7a:98:b1:ab:84:ae:73:4b:f5:54:60:50:3d:
2d:ff:fb:80:84:b1:6d:a5:bc:f8:b4:06:96:02:50:fa:f1:ca:
8b:e4:94:b0:b7:b5:28:bb:8c:76:f8:d3:3f:4b:32:22:61:8c:
ba:48:a4:9f:a8:f2:61:25:0e:b0:a1:d9:06:84:81:83:7b:cd:
fb:61:cf:80:e3:0c:a7:87:d0:2f:f5:90:62:54:3b:09:e7:4b:
0e:66:9f:15:9b:9e:25:70:73:02:1e:33:2f:93:d1:ea:a8:08:
80:18:46:5e:0d:83:68:a2:e9:50:b1:ed:da:cb:2f:04:31:69:
3c:d6:69:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfk8dlYPs4WEjocmidioMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MWUwZWVlNTkwZGUyZmQ4ZGVjNGE2N2U4N2JjODk2ZmZj
OGIyYjUwHhcNMjUwMTMxMTQwMDQzWhcNMjUwMjAxMTQwMDQzWjAzMTEwLwYDVQQD
EyhmM2IyY2IxMjAzNmQyNDk0ZWJiZTllYzIzMTYyODgzMTY5ZjYzM2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulmBnId9Julz1flXUztPR9eaBAZu
fF6/I5VmGOjq7RmLQimRHHBKZryaDI6mUXqLWQO60sg9SJdLBfOniMATBNI7IYxf
EiwtXFKTQH04kQXQkR75Qyu7iIiiO26ASTcZvM8L9AIYl5Y8tvT/fGELPurKvjNI
vkkVlRZaqGssm39nbPaQxvhdhjiF0Ft5IJMMexu32wg/dK95scWZt/VN36Ir6KJ9
ZwgdDUL7DgfDZ2Mwzjz/dd7wfc9OmhlpGKQjJbKL/nKs34wfmnQwd+CPXNyt1kN3
3b0Mi6uGC/FLrwg0x2CJIwo6xUZHpzMiv5ktNlzf+EcyrXOCthZuxIQN0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOyyxIDbSSU676ewjFiiDFp9jO3MB8GA1UdIwQY
MBaAFKceDu5ZDeL9jexKZ+h7yJb/yLK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHg0Tzdsa040djJON0VwbjZIdklsdl9Jc3JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jNTFmZDYtM2QwOC00MjA1LWI3NDct
YjgwNTMwYTVlMDQyLzEvcHg0Tzdsa040djJON0VwbjZIdklsdl9Jc3JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9jNTFmZDYtM2QwOC00MjA1LWI3NDctYjgwNTMwYTVlMDQy
LzEvcHg0Tzdsa040djJON0VwbjZIdklsdl9Jc3JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyswDXuR
rnaaQGp+Ced1NzgzxOtEIHlueMwomuFi71epibvl5Y+slhyLT7oGJZtsrxXE9bw7
bM9eS5hk2HS0GzXaMoh/Eor0KR8sVO46nKpRFlRgCQW4a0F8QdVlZOkNxql7gvbM
9jMpTJeKR6NK5XxMmafRSmsB/AzT98wMZVX3VgV6mLGrhK5zS/VUYFA9Lf/7gISx
baW8+LQGlgJQ+vHKi+SUsLe1KLuMdvjTP0syImGMukikn6jyYSUOsKHZBoSBg3vN
+2HPgOMMp4fQL/WQYlQ7CedLDmafFZueJXBzAh4zL5PR6qgIgBhGXg2DaKLpULHt
2ssvBDFpPNZprA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:00 2025 by rpki-client