Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: l3gmKRuXEhW+PGnKSmRcdRFnVms8SL8NLNTLqT744iI=
Subject key identifier: 11:7F:8B:63:22:A2:09:4D:0B:75:F6:9E:27:C3:3D:E2:1F:AB:1D:F7
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 0194BBCDFE72D514FC7F9424C00812E61875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: 1-GwxGdQdSDv0GNH37kCGFbw_26Q.roa (hash: 8CUzx4XPAhE8seJ5BK68QhEaKNzFZcIoKPr1Lhqpte4=)
2: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: kFdO52k5YsUf3jeVhlGaO05qXg6ZAJSCLJRrdibVpVY=)
3: tLZE9xN0wEMlciA44LFiADYH8LI.roa (hash: wSS87TjmYV1lgJuaVAo3xUhNdr4f/voSLt3pqfbBM5Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fe:72:d5:14:fc:7f:94:24:c0:08:12:e6:18:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=117f8b6322a2094d0b75f69e27c33de21fab1df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:3f:04:45:0e:9f:1e:9d:65:bb:6f:ae:bb:
b2:1e:56:22:68:97:ba:06:5d:49:c3:a7:cf:90:da:
75:cf:e2:06:7e:ed:50:8d:a3:d8:eb:da:b7:45:73:
f1:01:8a:5c:2b:9b:ad:2f:db:c1:d7:29:4f:48:eb:
54:f6:55:7f:27:24:34:13:89:bb:27:98:1c:f6:f7:
72:d0:c3:5d:da:47:10:9a:93:73:0a:d1:a4:cc:49:
da:a1:2c:9a:a4:dd:03:52:ff:22:4f:67:b7:1b:3c:
0a:eb:3e:3f:97:1e:4f:a9:10:38:36:96:44:29:22:
a3:a5:ce:e0:37:48:9d:c5:25:a3:83:ef:3f:50:b7:
45:96:d8:a1:ad:6e:84:e6:69:d3:31:f1:24:64:f9:
10:e5:19:f2:de:c8:31:c7:94:1f:fc:b1:84:0b:de:
3f:88:d7:21:21:37:91:55:5a:8b:8e:d9:ef:2d:dc:
44:2b:39:fc:b1:f1:cc:5b:b0:bd:be:ed:29:df:b4:
b6:8b:6e:1c:ad:3e:f5:92:1d:49:1e:e8:3f:d0:bc:
25:fb:8c:df:25:28:cd:28:a6:da:ca:28:46:92:ac:
47:58:5c:12:ed:7c:92:f3:5e:94:52:02:76:22:cc:
0f:65:4b:54:f7:d0:29:a8:44:fe:99:99:04:d9:a8:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7F:8B:63:22:A2:09:4D:0B:75:F6:9E:27:C3:3D:E2:1F:AB:1D:F7
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6f:85:d5:94:03:29:bb:93:38:71:a7:f5:22:25:ff:38:31:
f8:85:91:a2:06:cf:79:9c:1f:4c:0e:62:64:15:39:12:86:fc:
f4:4b:f5:03:80:17:bf:b3:f5:a5:3f:a1:8d:f2:80:bd:88:4c:
d4:bd:3c:6c:ff:41:19:29:c5:3e:03:45:ff:81:ec:a6:60:38:
0a:fc:67:cd:a6:8f:4a:af:45:5a:10:7c:66:fe:a3:db:09:5c:
57:f1:73:11:0e:98:12:e2:50:9c:03:a1:b3:cb:f7:22:24:68:
5d:2b:00:d5:4a:8d:9e:61:3f:d6:25:a9:da:15:ac:d6:26:72:
40:37:c9:d8:b3:28:a3:45:2c:87:73:0b:8d:53:e7:bf:33:11:
ce:d7:f2:dd:7b:b7:fd:24:0a:4a:29:0b:3f:fe:36:49:f1:6e:
52:c8:58:d5:aa:44:6e:f9:43:a5:d6:bc:d3:73:58:f0:f5:4e:
6c:51:0a:66:e6:f5:b2:85:70:d9:7e:93:9b:2e:de:34:44:de:
e1:b7:dd:c6:7d:a8:74:45:e8:cd:eb:f4:11:a9:94:1f:7c:f6:
d6:4b:f9:e4:74:20:68:d4:cc:80:f4:1a:77:72:e7:ff:36:de:
56:17:74:97:d7:e5:d8:78:97:73:60:5d:4a:e3:ea:71:e9:04:
3b:58:7b:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zf5y1RT8f5QkwAgS5hh1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ODg2MDRkMjViODdiODJmZDEyNTlkZmUyOTRjZDhmYjlm
ZjQ5YjQwHhcNMjUwMTMxMTAwMDI2WhcNMjUwMjAxMTAwMDI2WjAzMTEwLwYDVQQD
EygxMTdmOGI2MzIyYTIwOTRkMGI3NWY2OWUyN2MzM2RlMjFmYWIxZGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVE/BEUOnx6dZbtvrruyHlYiaJe6
Bl1Jw6fPkNp1z+IGfu1QjaPY69q3RXPxAYpcK5utL9vB1ylPSOtU9lV/JyQ0E4m7
J5gc9vdy0MNd2kcQmpNzCtGkzEnaoSyapN0DUv8iT2e3GzwK6z4/lx5PqRA4NpZE
KSKjpc7gN0idxSWjg+8/ULdFltihrW6E5mnTMfEkZPkQ5Rny3sgxx5Qf/LGEC94/
iNchITeRVVqLjtnvLdxEKzn8sfHMW7C9vu0p37S2i24crT71kh1JHug/0Lwl+4zf
JSjNKKbayihGkqxHWFwS7XyS816UUgJ2IswPZUtU99ApqET+mZkE2aihPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBF/i2MioglNC3X2nifDPeIfqx33MB8GA1UdIwQY
MBaAFKWIYE0luHuC/RJZ3+KUzY+5/0m0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2It
MjBkZGRiYzEyODFkLzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2ItMjBkZGRiYzEyODFk
LzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2+F1ZQD
KbuTOHGn9SIl/zgx+IWRogbPeZwfTA5iZBU5Eob89Ev1A4AXv7P1pT+hjfKAvYhM
1L08bP9BGSnFPgNF/4HspmA4CvxnzaaPSq9FWhB8Zv6j2wlcV/FzEQ6YEuJQnAOh
s8v3IiRoXSsA1UqNnmE/1iWp2hWs1iZyQDfJ2LMoo0Ush3MLjVPnvzMRztfy3Xu3
/SQKSikLP/42SfFuUshY1apEbvlDpda803NY8PVObFEKZub1soVw2X6Tmy7eNETe
4bfdxn2odEXozev0EamUH3z21kv55HQgaNTMgPQad3Ln/zbeVhd0l9fl2HiXc2Bd
SuPqcekEO1h7/A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:58:56 2025 by rpki-client