Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
File: PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft (raw, json)
Hash identifier: JTMocV/Wj6H3N/FK9AnkmPJU1MyQjeiLGNTCRteE/nw=
Subject key identifier: 74:E2:80:08:F2:B8:D2:EB:2E:8B:2F:4F:F7:C6:33:84:91:1A:1E:A8
Authority key identifier: 3D:72:A5:F4:BF:74:66:A6:14:62:AC:B8:88:08:C7:F0:36:D4:D6:D8
Certificate issuer: /CN=3d72a5f4bf7466a61462acb88808c7f036d4d6d8
Certificate serial: 0194BD17AFF9F38A77F473AD5FB87B8679CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl (hash: 0GClXvb/eK7688V1mleTpjo15j5bOsqj1XyA5cLmimI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:af:f9:f3:8a:77:f4:73:ad:5f:b8:7b:86:79:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d72a5f4bf7466a61462acb88808c7f036d4d6d8
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=74e28008f2b8d2eb2e8b2f4ff7c63384911a1ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bf:31:cf:02:21:73:f7:e6:d9:d7:8c:74:d4:
a1:5b:af:17:c4:60:34:ce:5d:8d:60:fa:cf:53:35:
08:a1:d1:ba:f9:c3:f3:f0:e0:bf:d8:4c:70:69:72:
b2:18:b0:c2:e0:b1:c4:88:82:3b:bc:67:2f:23:9c:
1f:05:bc:e1:20:4d:96:38:5b:54:f4:b9:82:0a:f6:
1a:19:15:d5:78:6d:24:44:8f:26:af:72:08:96:ab:
76:fc:ef:a2:3e:b4:c6:8f:11:85:af:49:2e:a8:3e:
5f:33:6f:97:48:31:22:45:12:f7:0c:11:b0:53:72:
db:c3:8a:cd:e1:4d:4b:b6:f5:e6:db:cd:56:bc:77:
6f:63:bb:e9:be:dc:14:b4:1e:73:c0:d5:3e:de:f3:
3e:28:b2:c0:5a:aa:bf:00:00:13:9d:66:5b:fe:05:
e5:ab:29:7c:12:0e:a9:78:8b:a5:63:9f:c1:0e:6f:
62:fa:18:cb:3a:2b:28:9a:bc:da:f1:a4:65:66:39:
c9:11:1e:f7:b2:12:a4:b3:f2:79:35:0e:09:17:ee:
31:cf:e3:56:0e:3e:59:7b:88:9b:a8:64:d5:1b:86:
f7:71:18:d0:18:f3:ec:a0:4c:40:ec:4b:3d:09:fb:
9f:15:0c:50:e8:7c:ef:2b:3e:e4:33:4a:a4:3c:5f:
28:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E2:80:08:F2:B8:D2:EB:2E:8B:2F:4F:F7:C6:33:84:91:1A:1E:A8
X509v3 Authority Key Identifier:
keyid:3D:72:A5:F4:BF:74:66:A6:14:62:AC:B8:88:08:C7:F0:36:D4:D6:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:11:77:27:8e:b8:43:d9:2e:ab:0f:f3:4c:bc:5f:85:0a:11:
98:3c:57:22:6a:fe:9f:7e:d9:f3:28:69:8d:dd:04:54:a0:5d:
99:b2:2f:ec:ad:bd:46:29:d6:cd:5b:b1:e5:30:be:28:3c:dc:
3f:0e:dd:49:29:b4:72:05:5a:60:13:ed:65:8d:87:26:ea:d6:
0a:ea:00:48:43:6f:29:57:ec:62:0b:07:f6:71:ca:46:fb:80:
57:ff:95:8a:45:d4:02:66:e0:df:da:42:0e:13:de:96:89:37:
0d:d2:bc:82:ed:23:98:ae:96:f8:c0:94:a5:2d:c4:0e:c0:1b:
90:24:4a:5a:e1:e0:e7:5a:4a:a1:60:7b:7c:5b:13:4d:6a:49:
36:73:cf:d2:2a:34:1f:2c:e4:dc:b7:1c:59:bf:b0:d2:5b:17:
78:7e:56:dc:07:f2:79:bc:d2:e0:25:8b:95:03:f2:61:dc:c4:
95:b5:61:fc:f3:1c:2a:1e:40:51:81:52:5a:6c:c1:9f:4c:65:
43:28:43:5a:c8:86:a1:fc:cc:c5:d5:3f:ce:1b:de:21:b3:fa:
46:7b:74:f2:ce:26:12:3a:6f:3a:b5:d8:4b:f6:b1:f5:30:2c:
4a:91:d5:7a:d7:8f:0d:17:22:eb:40:00:74:aa:fb:24:db:74:
21:91:65:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6/584p39HOtX7h7hnnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNzJhNWY0YmY3NDY2YTYxNDYyYWNiODg4MDhjN2YwMzZk
NGQ2ZDgwHhcNMjUwMTMxMTYwMDMzWhcNMjUwMjAxMTYwMDMzWjAzMTEwLwYDVQQD
Eyg3NGUyODAwOGYyYjhkMmViMmU4YjJmNGZmN2M2MzM4NDkxMWExZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL8xzwIhc/fm2deMdNShW68XxGA0
zl2NYPrPUzUIodG6+cPz8OC/2ExwaXKyGLDC4LHEiII7vGcvI5wfBbzhIE2WOFtU
9LmCCvYaGRXVeG0kRI8mr3IIlqt2/O+iPrTGjxGFr0kuqD5fM2+XSDEiRRL3DBGw
U3Lbw4rN4U1LtvXm281WvHdvY7vpvtwUtB5zwNU+3vM+KLLAWqq/AAATnWZb/gXl
qyl8Eg6peIulY5/BDm9i+hjLOisomrza8aRlZjnJER73shKks/J5NQ4JF+4xz+NW
Dj5Ze4ibqGTVG4b3cRjQGPPsoExA7Es9CfufFQxQ6HzvKz7kM0qkPF8oOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTigAjyuNLrLosvT/fGM4SRGh6oMB8GA1UdIwQY
MBaAFD1ypfS/dGamFGKsuIgIx/A21NbYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFhLbDlMOTBacVlVWXF5NGlBakg4RGJVMXRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lODlhYTktYTNjYi00Zjc1LWE0NDIt
ODBjMGYxNGVkYWUxLzEvUFhLbDlMOTBacVlVWXF5NGlBakg4RGJVMXRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9lODlhYTktYTNjYi00Zjc1LWE0NDItODBjMGYxNGVkYWUx
LzEvUFhLbDlMOTBacVlVWXF5NGlBakg4RGJVMXRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRF3J464
Q9kuqw/zTLxfhQoRmDxXImr+n37Z8yhpjd0EVKBdmbIv7K29RinWzVux5TC+KDzc
Pw7dSSm0cgVaYBPtZY2HJurWCuoASENvKVfsYgsH9nHKRvuAV/+VikXUAmbg39pC
DhPelok3DdK8gu0jmK6W+MCUpS3EDsAbkCRKWuHg51pKoWB7fFsTTWpJNnPP0io0
Hyzk3LccWb+w0lsXeH5W3AfyebzS4CWLlQPyYdzElbVh/PMcKh5AUYFSWmzBn0xl
QyhDWsiGofzMxdU/zhveIbP6Rnt08s4mEjpvOrXYS/ax9TAsSpHVetePDRci60AA
dKr7JNt0IZFl8Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:52 2025 by rpki-client