Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier: x9qaql6okDuq892BzS6df8gEiECDJ0xdt0xGIezH5BU=
Subject key identifier: 38:06:B1:0A:C5:2C:22:D4:2C:12:B3:88:64:CD:1C:29:57:75:00:81
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 0194BD179EE75ADFAE2FA57CB4877CE72550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number: 1437
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: Clf1O67BMO2Rhs6Zi3d5eqYtS78.roa (hash: gEsGT+BkcxrPL5LEXQ9nd6Eso8OhYDY6ncvwiqyMT9o=)
2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: LomKGP8A8bwAodjhPlrqFBkpXVqtJ15lUL4oiMf3F4A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9e:e7:5a:df:ae:2f:a5:7c:b4:87:7c:e7:25:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=3806b10ac52c22d42c12b38864cd1c2957750081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:d4:33:20:cb:77:12:ff:04:90:47:09:eb:
35:81:4d:c2:e5:94:07:ef:ca:62:39:17:4e:64:13:
1c:4c:1d:6d:a3:c3:2e:7b:4d:97:a9:92:c4:30:36:
81:c6:a8:d8:a9:0b:4b:59:a9:a2:a6:4b:8a:15:95:
96:c6:72:e2:20:d9:3a:9a:98:82:b7:42:36:e2:5a:
eb:cb:25:7f:f9:17:63:86:97:d9:a1:5f:09:b3:28:
31:23:42:96:53:42:92:71:be:65:36:0b:37:6e:22:
67:a7:9c:52:36:04:aa:6e:bc:4c:53:20:96:79:9a:
cb:15:63:72:62:bd:cc:62:19:67:ba:6d:4a:9a:e4:
59:d1:1b:08:f8:ad:fb:58:0a:51:c8:1f:07:ad:a2:
f8:2e:9a:f4:a2:c8:dd:22:53:2e:40:6c:f5:ab:0c:
f3:ab:3a:c5:0e:06:35:df:0b:4a:b3:82:49:00:67:
7f:68:f6:f4:2a:8d:ae:66:db:43:d5:af:e8:52:0d:
b7:e8:4f:bc:d0:0f:8f:dd:d3:09:ad:4f:58:bf:92:
ab:92:7a:ce:aa:3a:1e:e8:35:f9:b6:52:1e:fd:ca:
3f:f4:3c:37:69:48:4e:5b:68:c2:61:40:35:1d:0c:
8d:9f:53:38:84:73:ba:7a:ff:52:93:33:87:9c:6e:
e2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:06:B1:0A:C5:2C:22:D4:2C:12:B3:88:64:CD:1C:29:57:75:00:81
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:38:cb:9c:89:7c:bf:d7:0a:c5:79:ef:68:4a:29:75:59:e7:
d1:d7:dd:7d:fa:6b:5a:ee:35:d8:6b:5f:75:18:eb:8f:ec:5e:
6e:96:3d:16:1a:90:93:a8:7d:02:ba:33:70:d0:45:40:5d:82:
64:da:af:a8:0b:60:66:d2:d9:81:49:97:65:aa:29:49:bf:0c:
08:65:8f:dd:e2:c7:52:5d:24:2e:cd:bb:c2:f8:5b:ad:84:5a:
53:e4:32:92:99:b2:e3:9d:4f:de:42:e4:48:3a:92:0d:9c:5a:
90:c4:db:9e:48:ea:eb:7c:0e:ce:02:4e:25:71:64:22:43:65:
81:f5:02:3d:41:71:c3:86:68:ad:db:57:49:91:ee:b9:83:42:
e1:df:61:06:6b:63:8c:95:64:d7:ec:61:fd:7d:d0:47:36:62:
41:f0:2e:c2:04:b2:1c:06:82:ea:53:08:c9:d7:be:16:96:d4:
74:e6:e7:eb:66:e9:a3:93:32:a6:18:74:8f:86:76:12:3a:89:
f9:a9:22:c4:43:fc:d3:71:66:13:76:fd:c6:01:f4:20:84:f9:
67:5a:ba:9d:79:3d:d1:a3:d8:be:37:d3:b3:cf:5a:a1:cc:2e:
6f:17:c4:4d:ec:a0:21:5a:24:e2:f7:d6:62:eb:c2:50:b1:db:
46:a7:f6:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F57nWt+uL6V8tId85yVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MWEyYTJkYjRkNzQxOGU5YmY0ZjkzYzhjMDQ2YTAxNjE2
NjNjNjIwHhcNMjUwMTMxMTYwMDI5WhcNMjUwMjAxMTYwMDI5WjAzMTEwLwYDVQQD
EygzODA2YjEwYWM1MmMyMmQ0MmMxMmIzODg2NGNkMWMyOTU3NzUwMDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwzUMyDLdxL/BJBHCes1gU3C5ZQH
78piORdOZBMcTB1to8Mue02XqZLEMDaBxqjYqQtLWamipkuKFZWWxnLiINk6mpiC
t0I24lrryyV/+RdjhpfZoV8JsygxI0KWU0KScb5lNgs3biJnp5xSNgSqbrxMUyCW
eZrLFWNyYr3MYhlnum1KmuRZ0RsI+K37WApRyB8HraL4Lpr0osjdIlMuQGz1qwzz
qzrFDgY13wtKs4JJAGd/aPb0Ko2uZttD1a/oUg236E+80A+P3dMJrU9Yv5KrknrO
qjoe6DX5tlIe/co/9Dw3aUhOW2jCYUA1HQyNn1M4hHO6ev9SkzOHnG7ijQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgGsQrFLCLULBKziGTNHClXdQCBMB8GA1UdIwQY
MBaAFKcaKi2010GOm/T5PIwEagFhZjxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2Ut
ZjFmMGI5NTk4ZjMyLzEvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2UtZjFmMGI5NTk4ZjMy
LzEvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjjLnIl8
v9cKxXnvaEopdVnn0dfdffprWu412GtfdRjrj+xebpY9FhqQk6h9ArozcNBFQF2C
ZNqvqAtgZtLZgUmXZaopSb8MCGWP3eLHUl0kLs27wvhbrYRaU+Qykpmy451P3kLk
SDqSDZxakMTbnkjq63wOzgJOJXFkIkNlgfUCPUFxw4ZordtXSZHuuYNC4d9hBmtj
jJVk1+xh/X3QRzZiQfAuwgSyHAaC6lMIyde+FpbUdObn62bpo5Myphh0j4Z2EjqJ
+akixEP803FmE3b9xgH0IIT5Z1q6nXk90aPYvjfTs89aocwubxfETeygIVok4vfW
YuvCULHbRqf2Ig==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:49 2025 by rpki-client