Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json)
Hash identifier: 1k+qVgIbFtmhqlp/pmvdbYQQtaQF1M8ECgoRdrwaFFM=
Subject key identifier: D0:29:A2:99:0F:D4:C8:06:64:E8:75:DE:19:3F:8A:63:91:41:4C:AE
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial: 0194BC72819AC4B2BB1F9DD03469885958DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
Manifest number: 0679
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: LMuPVyFTIR+L0pIFbHc31yPCbOHIwPgEDvEoFfPtMro=)
2: uXWEOT5kLicjM9eRqYG2MPSav7U.roa (hash: WztCPaYNfJzy3qntVN7a2OFcCyo/yo2zpUp1jJXzcgs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:81:9a:c4:b2:bb:1f:9d:d0:34:69:88:59:58:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=d029a2990fd4c80664e875de193f8a6391414cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:24:eb:3a:de:81:93:bb:b9:39:ba:9d:99:
ce:5e:59:42:20:fe:36:e9:ce:2f:d7:9d:6c:2d:6f:
57:b6:82:1e:d9:57:96:9c:40:68:ba:3e:91:22:22:
a2:09:fa:d8:2e:56:be:38:60:36:59:60:0f:86:27:
c7:3b:82:aa:f0:08:12:72:ea:58:6f:ad:4a:ef:b4:
18:18:a1:8d:62:82:99:e3:69:7c:ca:9a:33:5e:5b:
82:ec:41:79:fa:1a:80:e4:b0:4c:f4:6e:1d:b2:15:
a2:33:74:81:4c:10:c6:1e:b3:02:75:4f:b4:e1:cf:
9c:04:1d:ee:7a:c8:22:20:2f:48:14:f0:07:29:a1:
4f:35:17:9a:5e:0b:ab:1e:82:43:10:c1:8f:ae:2a:
a2:24:1f:6a:2f:36:2e:fa:b4:17:96:b0:66:cf:36:
06:f5:20:4b:e0:54:7c:75:a3:c9:63:d1:37:bf:94:
f6:b8:f6:67:bc:7a:1d:be:4d:d3:45:04:5c:91:e7:
ae:51:d3:21:ad:de:c0:9d:6d:d7:57:bc:91:72:e9:
cf:84:ae:c6:26:1a:61:a4:87:67:5a:1d:9d:e5:4f:
e1:81:0d:c0:bf:23:3d:e6:6c:83:c4:c8:ad:37:1e:
e0:1d:fc:5a:ec:fa:99:b9:51:ce:47:89:81:e9:64:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:29:A2:99:0F:D4:C8:06:64:E8:75:DE:19:3F:8A:63:91:41:4C:AE
X509v3 Authority Key Identifier:
keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9c:6b:81:1d:47:d2:8f:67:86:59:2e:48:e2:4b:6c:ac:77:
e3:d7:fb:6b:ac:7a:1b:4c:c6:92:3a:90:ba:ea:90:4a:25:d8:
73:21:c6:9e:90:d0:fa:3e:9a:ad:19:a0:28:3c:d8:a9:bf:fb:
7c:c7:6a:21:f0:de:df:a6:3b:22:ae:98:a1:58:10:bc:47:e6:
b4:cc:a8:61:b9:21:99:65:ba:c5:15:70:34:05:c8:49:26:b8:
36:c0:62:3d:61:38:04:81:59:ed:bc:60:0b:dd:ed:0b:07:5d:
e0:aa:3a:29:39:71:80:3f:e8:e4:68:f5:a3:e1:31:98:e2:8c:
f2:68:c3:a7:57:03:93:31:8e:bb:11:d7:b4:99:2d:3d:b7:83:
41:2c:c9:46:d5:b4:09:9a:ef:0f:af:4f:3e:9a:9f:6a:e6:b5:
a6:33:a2:51:f0:04:b3:38:0d:77:95:4d:7f:cb:79:b7:29:69:
00:fa:fc:37:14:b4:9a:20:7e:65:d6:31:a4:07:6d:50:bf:1d:
a4:3d:29:df:eb:f3:f0:17:17:ba:67:57:b7:01:61:6e:0a:8d:
6a:4f:ba:9f:37:68:5b:97:af:ba:0e:a6:0e:fd:9d:45:14:cb:
dd:7b:b3:84:f7:a6:d0:f7:91:a0:37:ca:6b:56:cc:5a:bf:9b:
9e:00:b4:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8coGaxLK7H53QNGmIWVjaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMTFkMDVjZDI5YWI3MTkyYWYwMzljZjVmM2QwMGJlOTIx
NTc5MzkwHhcNMjUwMTMxMTMwMDA4WhcNMjUwMjAxMTMwMDA4WjAzMTEwLwYDVQQD
EyhkMDI5YTI5OTBmZDRjODA2NjRlODc1ZGUxOTNmOGE2MzkxNDE0Y2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcMk6zregZO7uTm6nZnOXllCIP42
6c4v151sLW9XtoIe2VeWnEBouj6RIiKiCfrYLla+OGA2WWAPhifHO4Kq8AgScupY
b61K77QYGKGNYoKZ42l8ypozXluC7EF5+hqA5LBM9G4dshWiM3SBTBDGHrMCdU+0
4c+cBB3uesgiIC9IFPAHKaFPNReaXgurHoJDEMGPriqiJB9qLzYu+rQXlrBmzzYG
9SBL4FR8daPJY9E3v5T2uPZnvHodvk3TRQRckeeuUdMhrd7AnW3XV7yRcunPhK7G
JhphpIdnWh2d5U/hgQ3AvyM95myDxMitNx7gHfxa7PqZuVHOR4mB6WRzqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNApopkP1MgGZOh13hk/imORQUyuMB8GA1UdIwQY
MBaAFDwR0FzSmrcZKvA5z189AL6SFXk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jZGIxMDQtMDVkYi00Y2RiLWE0MmUt
NzA4ZGMwOTdmZmZlLzEvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9jZGIxMDQtMDVkYi00Y2RiLWE0MmUtNzA4ZGMwOTdmZmZl
LzEvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5xrgR1H
0o9nhlkuSOJLbKx349f7a6x6G0zGkjqQuuqQSiXYcyHGnpDQ+j6arRmgKDzYqb/7
fMdqIfDe36Y7Iq6YoVgQvEfmtMyoYbkhmWW6xRVwNAXISSa4NsBiPWE4BIFZ7bxg
C93tCwdd4Ko6KTlxgD/o5Gj1o+ExmOKM8mjDp1cDkzGOuxHXtJktPbeDQSzJRtW0
CZrvD69PPpqfaua1pjOiUfAEszgNd5VNf8t5tylpAPr8NxS0miB+ZdYxpAdtUL8d
pD0p3+vz8BcXumdXtwFhbgqNak+6nzdoW5evug6mDv2dRRTL3XuzhPem0PeRoDfK
a1bMWr+bngC0rg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:17:20 2025 by rpki-client