Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
File: pl-8tOowipiwk5diXmOGY4PBbdA.mft (raw, json)
Hash identifier: plujxz1mAPjlOdGpd6bV48kqJYki8BGMDJ4+d8zHdfc=
Subject key identifier: 7E:E4:B2:DE:DB:A7:CA:36:B4:C8:F4:06:75:F5:03:7C:98:A1:D4:38
Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Certificate serial: 0194BC04B6D064BD7349F60E2E5A0EB3A20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
Manifest number: 0E83
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: WVsTj7MenBGl38xhkFqi5Z0aczs.roa (hash: 7b6SsFE3NdlNY/Clv2Hjf1UktFQZh/V54AuKRqY5yFI=)
2: lO1h-E6bKpXhV0awEzc3ziBx-Hs.roa (hash: 6ZLzJ6p72ZxH2QZqjbunK1Na/XaXqvcFzB2ukNCzzI4=)
3: pl-8tOowipiwk5diXmOGY4PBbdA.crl (hash: 9jJSAJlz1uSWSJTVuYUGMs8TLCzSMOLrlhu8+EfXu8A=)
4: zGOXqDkKzJdU0p47Wrv4dob9WRY.roa (hash: h/PYhmoQAY7EhuYv56qskYi6sqC9Lx5gg5uwdXV3h5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b6:d0:64:bd:73:49:f6:0e:2e:5a:0e:b3:a2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=7ee4b2dedba7ca36b4c8f40675f5037c98a1d438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:d1:3c:44:ef:26:87:92:fa:8d:5b:b8:a3:
06:d8:1f:ff:20:41:dc:c1:f7:cc:8f:81:87:3a:1e:
47:0b:f0:b3:0c:f0:24:b1:5b:99:4d:10:b5:db:f7:
21:37:b8:e3:1c:20:34:71:c1:ac:5e:e6:e7:7f:69:
a7:ae:73:37:cc:5f:2b:cd:53:57:f2:06:f7:24:6a:
d4:5b:a1:b5:10:b0:25:3f:74:cf:63:ec:e6:52:dd:
10:54:5c:71:65:63:a0:cf:72:de:bf:dd:60:59:29:
b8:60:7c:1f:ed:3d:4f:4f:6f:44:47:ea:81:9a:ca:
93:89:8d:93:1c:58:5a:43:db:3a:7d:54:cb:05:ad:
cf:5d:16:10:45:d6:18:4f:27:57:fa:eb:9b:32:60:
00:a3:e4:ca:ae:53:db:23:13:61:aa:98:85:74:d8:
7f:0d:09:64:ce:35:53:dd:c6:56:d7:0d:cd:b9:90:
99:a2:32:da:72:40:55:5e:a7:08:46:9b:61:26:35:
57:bd:27:43:05:7f:25:77:78:5d:ba:fd:95:bd:e8:
ca:8e:25:5a:fa:e4:55:00:67:ea:38:14:b4:00:71:
6d:04:d6:69:e0:e7:5e:48:f4:9a:1b:c4:94:43:d3:
13:91:58:f7:10:65:cf:f9:5e:5b:ca:f9:c6:2e:cc:
08:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E4:B2:DE:DB:A7:CA:36:B4:C8:F4:06:75:F5:03:7C:98:A1:D4:38
X509v3 Authority Key Identifier:
keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:19:88:7d:e6:c6:dc:87:df:e2:81:38:6e:fd:ce:fc:87:a9:
32:5e:b3:09:ff:4c:dc:f3:68:50:87:1c:63:66:45:25:57:69:
b7:de:71:a2:a3:23:99:d5:30:40:d4:45:88:96:da:2b:a6:7b:
4a:24:9b:f1:d1:c3:ab:30:50:ce:b8:7a:ef:76:89:8a:50:43:
fa:b2:d0:dc:91:69:56:7c:ee:e5:37:b0:65:7c:94:8e:fc:b1:
fd:a6:a2:9a:c3:5b:e4:20:27:41:27:ea:8b:20:70:cf:6a:91:
78:76:a1:3e:78:74:af:49:fa:00:43:9a:06:18:ad:8e:2a:85:
0e:6e:e4:60:7a:6a:4e:9d:00:6e:c3:2e:8c:9d:c7:6b:6c:58:
12:f5:f0:e2:e6:6b:5e:f9:28:94:bc:dc:47:e0:b3:63:77:a9:
73:fb:17:7d:f2:2e:cb:4e:56:80:7f:b3:ba:b2:d8:91:d7:6c:
e0:db:e7:6b:55:19:c1:4a:f5:03:92:d5:45:22:07:6c:07:4e:
35:20:ec:65:17:38:52:82:27:52:c2:a1:06:16:4f:a6:8d:2b:
e1:4d:09:55:43:5e:7a:96:82:9b:59:84:e6:6c:eb:78:09:19:
e0:03:66:cc:8d:54:11:df:30:34:58:64:5c:fa:05:03:47:a6:
d9:fa:80:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLbQZL1zSfYOLloOs6IPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NWZiY2I0ZWEzMDhhOThiMDkzOTc2MjVlNjM4NjYzODNj
MTZkZDAwHhcNMjUwMTMxMTEwMDEzWhcNMjUwMjAxMTEwMDEzWjAzMTEwLwYDVQQD
Eyg3ZWU0YjJkZWRiYTdjYTM2YjRjOGY0MDY3NWY1MDM3Yzk4YTFkNDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyPRPETvJoeS+o1buKMG2B//IEHc
wffMj4GHOh5HC/CzDPAksVuZTRC12/chN7jjHCA0ccGsXubnf2mnrnM3zF8rzVNX
8gb3JGrUW6G1ELAlP3TPY+zmUt0QVFxxZWOgz3Lev91gWSm4YHwf7T1PT29ER+qB
msqTiY2THFhaQ9s6fVTLBa3PXRYQRdYYTydX+uubMmAAo+TKrlPbIxNhqpiFdNh/
DQlkzjVT3cZW1w3NuZCZojLackBVXqcIRpthJjVXvSdDBX8ld3hduv2VvejKjiVa
+uRVAGfqOBS0AHFtBNZp4OdeSPSaG8SUQ9MTkVj3EGXP+V5byvnGLswIbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7kst7bp8o2tMj0BnX1A3yYodQ4MB8GA1UdIwQY
MBaAFKZfvLTqMIqYsJOXYl5jhmODwW3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUt
NjJkNDJmZTZmZDNjLzEvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUtNjJkNDJmZTZmZDNj
LzEvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRmIfebG
3Iff4oE4bv3O/IepMl6zCf9M3PNoUIccY2ZFJVdpt95xoqMjmdUwQNRFiJbaK6Z7
SiSb8dHDqzBQzrh673aJilBD+rLQ3JFpVnzu5TewZXyUjvyx/aaimsNb5CAnQSfq
iyBwz2qReHahPnh0r0n6AEOaBhitjiqFDm7kYHpqTp0AbsMujJ3Ha2xYEvXw4uZr
XvkolLzcR+CzY3epc/sXffIuy05WgH+zurLYkdds4Nvna1UZwUr1A5LVRSIHbAdO
NSDsZRc4UoInUsKhBhZPpo0r4U0JVUNeepaCm1mE5mzreAkZ4ANmzI1UEd8wNFhk
XPoFA0em2fqApA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:54 2025 by rpki-client