Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
File: pcEGAjxJWQSwQKy5l49Po7DF4tw.mft (raw, json)
Hash identifier: 1el/ch8uBwxvnmncNRqqyMLj58T4I7mvN0ZE+GnKSUY=
Subject key identifier: FB:6E:7F:9E:B2:09:78:A7:76:A6:95:DE:60:67:59:2B:B6:24:D8:4D
Authority key identifier: A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
Certificate issuer: /CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Certificate serial: 0194BBCE5759B57650C483224B401AEEE1C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
Manifest number: 0258
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: pcEGAjxJWQSwQKy5l49Po7DF4tw.crl (hash: FvydVOrqAHjGVyNL1uHXvqyUi8Hr+CgDWg18v3IcuDg=)
2: yTZlHlMAE_3YBA7oQmF4fIZqHOM.roa (hash: lfCvg73z+0fvdagtNm9IPM2kVoIfwTGx2gcIBEuq7Qk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:57:59:b5:76:50:c4:83:22:4b:40:1a:ee:e1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=fb6e7f9eb20978a776a695de6067592bb624d84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:97:b7:e9:a2:3e:08:4c:06:1b:19:ba:e2:6a:
a9:17:26:80:6f:c6:56:5b:f0:a7:7f:0b:d7:e1:17:
71:85:c7:8f:f8:98:23:ca:00:e6:2c:4a:9e:2d:ca:
a8:73:64:dd:3b:36:a3:31:fb:4e:a8:54:67:0e:91:
fc:9e:47:7b:c4:26:b8:a8:40:f9:ca:b2:16:cf:24:
9e:25:d8:23:6f:f9:27:e9:33:0f:1e:a6:dd:ab:bd:
d2:69:b3:6e:fd:45:39:8e:8a:cc:e4:b0:7a:73:7e:
6e:09:ab:14:b1:65:43:98:26:b7:d9:6d:14:0e:9a:
a7:30:f2:0d:c3:a2:66:91:95:93:ea:92:cb:b4:a6:
f6:cc:40:84:0e:6c:08:58:8f:10:72:35:68:16:82:
45:7f:d2:db:ae:1a:d6:4f:f4:ef:1c:2e:8f:00:80:
1f:83:db:ee:63:44:be:d1:84:43:b1:7a:21:45:bf:
2e:77:3f:ff:ee:78:2d:a2:ad:3c:23:8c:e6:80:e5:
70:70:fd:05:5c:c2:ed:56:e1:23:51:ec:1f:cb:dc:
aa:2d:d7:98:30:78:65:bd:a4:69:22:30:92:db:55:
e2:18:b4:95:b6:35:20:5f:8e:28:d6:bf:37:e1:0f:
14:9f:cf:ca:3e:c3:77:35:94:67:92:94:ed:5e:6d:
54:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6E:7F:9E:B2:09:78:A7:76:A6:95:DE:60:67:59:2B:B6:24:D8:4D
X509v3 Authority Key Identifier:
keyid:A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:3e:06:a5:a6:26:dd:d5:66:55:31:6d:91:db:0c:e7:14:5e:
5f:81:53:79:45:22:e5:dc:cf:05:06:e5:0d:91:d2:10:9e:30:
b3:7c:62:8c:2c:5d:f5:a2:0f:40:fe:70:21:99:3c:9d:a3:8f:
17:0f:43:20:a5:e9:a4:2e:47:7e:20:64:43:c5:62:d1:d8:e3:
b7:64:a8:4f:8e:00:8f:31:37:5c:fb:8d:65:4c:fb:c2:96:b1:
81:f6:4e:a3:27:32:3c:b7:f5:6a:8d:0a:f9:d1:fe:ce:7c:77:
8e:be:e4:7b:9e:e3:0c:8e:a3:f7:b2:ec:7d:79:75:35:46:5e:
b8:63:52:6f:7e:98:f4:51:ed:08:40:04:47:e7:56:90:54:e2:
8a:e2:73:53:73:9b:aa:4a:07:2e:11:d3:1f:e1:44:f2:22:d2:
50:a4:f2:65:b1:a3:1d:89:76:a6:84:62:0c:5f:4a:a5:ea:4a:
2a:23:b3:76:9e:d3:63:bd:1b:5a:a0:db:e7:ef:bb:61:7a:6a:
14:59:e1:35:1a:0f:82:45:36:14:76:83:f3:55:9b:8d:92:fe:
36:90:cd:fb:3f:d0:95:61:8c:76:f6:9b:8a:51:6c:87:e8:18:
3f:93:fb:09:90:42:90:15:68:82:da:f9:68:a2:55:d9:6e:be:
e1:0f:64:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zldZtXZQxIMiS0Aa7uHEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzEwNjAyM2M0OTU5MDRiMDQwYWNiOTk3OGY0ZmEzYjBj
NWUyZGMwHhcNMjUwMTMxMTAwMDQ5WhcNMjUwMjAxMTAwMDQ5WjAzMTEwLwYDVQQD
EyhmYjZlN2Y5ZWIyMDk3OGE3NzZhNjk1ZGU2MDY3NTkyYmI2MjRkODRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5e36aI+CEwGGxm64mqpFyaAb8ZW
W/CnfwvX4RdxhceP+JgjygDmLEqeLcqoc2TdOzajMftOqFRnDpH8nkd7xCa4qED5
yrIWzySeJdgjb/kn6TMPHqbdq73SabNu/UU5jorM5LB6c35uCasUsWVDmCa32W0U
DpqnMPINw6JmkZWT6pLLtKb2zECEDmwIWI8QcjVoFoJFf9LbrhrWT/TvHC6PAIAf
g9vuY0S+0YRDsXohRb8udz//7ngtoq08I4zmgOVwcP0FXMLtVuEjUewfy9yqLdeY
MHhlvaRpIjCS21XiGLSVtjUgX44o1r834Q8Un8/KPsN3NZRnkpTtXm1UvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtuf56yCXindqaV3mBnWSu2JNhNMB8GA1UdIwQY
MBaAFKXBBgI8SVkEsECsuZePT6OwxeLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNFR0FqeEpXUVN3UUt5NWw0OVBvN0RGNHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8wNzAwMzItMGJiMy00MzUyLTg5ZWIt
NDkxM2EwY2E3NDA5LzEvcGNFR0FqeEpXUVN3UUt5NWw0OVBvN0RGNHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8wNzAwMzItMGJiMy00MzUyLTg5ZWItNDkxM2EwY2E3NDA5
LzEvcGNFR0FqeEpXUVN3UUt5NWw0OVBvN0RGNHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsj4GpaYm
3dVmVTFtkdsM5xReX4FTeUUi5dzPBQblDZHSEJ4ws3xijCxd9aIPQP5wIZk8naOP
Fw9DIKXppC5HfiBkQ8Vi0djjt2SoT44AjzE3XPuNZUz7wpaxgfZOoycyPLf1ao0K
+dH+znx3jr7ke57jDI6j97LsfXl1NUZeuGNSb36Y9FHtCEAER+dWkFTiiuJzU3Ob
qkoHLhHTH+FE8iLSUKTyZbGjHYl2poRiDF9KpepKKiOzdp7TY70bWqDb5++7YXpq
FFnhNRoPgkU2FHaD81WbjZL+NpDN+z/QlWGMdvabilFsh+gYP5P7CZBCkBVogtr5
aKJV2W6+4Q9kBA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:24 2025 by rpki-client