Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
File: pmnxwhNwxE39EOKvaIyMTg6hKVU.mft (raw, json)
Hash identifier: bcLwqyBNjEICSTWlG0Out3gXDzwXiLnREuvr0vYxCe0=
Subject key identifier: 30:88:7E:9C:BE:25:44:29:D6:D2:94:1C:55:B5:4E:C6:DE:CC:46:70
Authority key identifier: A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
Certificate issuer: /CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Certificate serial: 0194BC050B0B39FDD5C09E0058D28CFF4B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
Manifest number: 0C72
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: pmnxwhNwxE39EOKvaIyMTg6hKVU.crl (hash: n3iDLTO3C9Ii107kt8b0gOZFVq7Yw6PQRfPuLrIEw4c=)
2: vdy1MmzFMK60AlIdpOXD1htDYPg.roa (hash: 0u0pMl1wwd/at2uaTP4vwjKf36kzodMgLoxEXn0lwwY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0b:0b:39:fd:d5:c0:9e:00:58:d2:8c:ff:4b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=30887e9cbe254429d6d2941c55b54ec6decc4670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:74:f5:bc:49:e2:8d:35:fa:65:39:d9:87:
60:2d:e9:a3:0d:c1:d1:e9:e3:ad:70:24:98:f5:fd:
8d:7c:ed:05:74:19:74:a5:51:85:47:3b:b1:08:60:
10:a3:84:53:03:d7:9f:c9:a0:d5:57:2f:d6:c8:57:
a5:99:8c:f2:1f:a4:5b:1d:2c:5d:f2:38:a1:de:40:
2a:fe:bd:1e:cf:d9:63:8e:9d:67:76:a2:df:f3:ce:
ac:06:61:79:c9:e0:7e:70:9e:da:47:e0:88:82:29:
e4:a0:2a:c2:74:7b:4d:09:fc:7d:28:b6:e9:d2:24:
6e:d1:94:de:1e:61:66:aa:b6:8b:13:f7:91:8f:d5:
dc:ac:8c:be:1f:dd:23:1f:6c:a1:a8:a6:ac:9d:bc:
82:9b:55:2f:1b:59:ee:1d:31:06:a7:33:7e:fb:11:
d7:d0:f4:a8:70:03:eb:80:bb:20:d8:89:57:f6:41:
68:63:48:e4:33:38:5f:f7:1a:6a:66:b4:ba:af:ea:
39:2d:9c:3b:55:c6:33:e7:dc:94:3a:9f:89:bc:a6:
df:e1:7d:64:6a:85:cc:62:54:27:4b:8c:eb:de:64:
a1:eb:33:c8:a2:4b:0f:a0:7b:91:7b:7d:f5:1d:bb:
30:3f:2e:70:98:7d:15:6b:51:1f:59:7f:7a:07:be:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:88:7E:9C:BE:25:44:29:D6:D2:94:1C:55:B5:4E:C6:DE:CC:46:70
X509v3 Authority Key Identifier:
keyid:A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:75:f3:5c:2c:39:6d:51:1f:b8:6f:9b:27:7d:3d:03:71:5c:
77:e1:76:11:25:d6:cb:78:e4:df:68:fb:32:22:68:7f:27:8c:
8c:1f:17:a9:5a:9c:16:5c:4a:dc:f1:77:0f:96:00:3f:70:b5:
f6:25:96:05:74:6c:12:70:54:d3:2a:38:d3:a1:5d:3b:21:f6:
28:c2:15:01:97:ee:92:50:9c:7b:9c:2c:e6:e4:59:da:fa:08:
26:b9:68:1c:cd:fa:ce:d3:cd:41:de:cf:ab:01:98:e1:a2:a2:
5b:51:03:77:20:6a:84:fb:ac:28:06:dc:e7:6f:85:2a:ad:9e:
22:16:da:82:97:84:8b:29:d1:e3:ef:2b:43:47:eb:97:3e:f0:
76:3a:64:0d:23:da:46:dc:09:73:20:e7:76:4f:f7:ac:0f:b2:
8e:1c:f4:52:64:56:44:53:3e:f0:ba:74:ae:82:bc:f2:71:61:
47:5a:f2:26:91:c1:48:e3:00:96:03:23:df:fb:69:bf:ce:50:
1c:a4:9c:49:2c:08:65:aa:a9:04:fd:35:0a:e1:b8:74:e6:48:
e0:db:0b:77:a3:48:01:59:fb:9e:e2:b0:d1:fb:cb:d7:00:55:
24:98:ba:50:66:0d:96:7a:d0:c7:da:80:9a:91:83:59:32:c1:
94:56:f8:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQsLOf3VwJ4AWNKM/0tTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NjlmMWMyMTM3MGM0NGRmZDEwZTJhZjY4OGM4YzRlMGVh
MTI5NTUwHhcNMjUwMTMxMTEwMDM0WhcNMjUwMjAxMTEwMDM0WjAzMTEwLwYDVQQD
EygzMDg4N2U5Y2JlMjU0NDI5ZDZkMjk0MWM1NWI1NGVjNmRlY2M0NjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsR09bxJ4o01+mU52YdgLemjDcHR
6eOtcCSY9f2NfO0FdBl0pVGFRzuxCGAQo4RTA9efyaDVVy/WyFelmYzyH6RbHSxd
8jih3kAq/r0ez9ljjp1ndqLf886sBmF5yeB+cJ7aR+CIginkoCrCdHtNCfx9KLbp
0iRu0ZTeHmFmqraLE/eRj9XcrIy+H90jH2yhqKasnbyCm1UvG1nuHTEGpzN++xHX
0PSocAPrgLsg2IlX9kFoY0jkMzhf9xpqZrS6r+o5LZw7VcYz59yUOp+JvKbf4X1k
aoXMYlQnS4zr3mSh6zPIoksPoHuRe331HbswPy5wmH0Va1EfWX96B763VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCIfpy+JUQp1tKUHFW1TsbezEZwMB8GA1UdIwQY
MBaAFKZp8cITcMRN/RDir2iMjE4OoSlVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lN2I0MGMtNDE0Yi00NzNhLWI4Yzct
YjdiMTQ4MTYyNWIxLzEvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lN2I0MGMtNDE0Yi00NzNhLWI4YzctYjdiMTQ4MTYyNWIx
LzEvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3XzXCw5
bVEfuG+bJ309A3Fcd+F2ESXWy3jk32j7MiJofyeMjB8XqVqcFlxK3PF3D5YAP3C1
9iWWBXRsEnBU0yo406FdOyH2KMIVAZfuklCce5ws5uRZ2voIJrloHM36ztPNQd7P
qwGY4aKiW1EDdyBqhPusKAbc52+FKq2eIhbagpeEiynR4+8rQ0frlz7wdjpkDSPa
RtwJcyDndk/3rA+yjhz0UmRWRFM+8Lp0roK88nFhR1ryJpHBSOMAlgMj3/tpv85Q
HKScSSwIZaqpBP01CuG4dOZI4NsLd6NIAVn7nuKw0fvL1wBVJJi6UGYNlnrQx9qA
mpGDWTLBlFb4bQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:48 2025 by rpki-client