
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: 3MY5b9LIR+inEoth4uGy7wZGG485QY0SBT39OuuEYIc=
Subject key identifier: 5A:72:FA:EB:13:8B:99:4C:FF:0A:1B:72:14:0F:66:E0:79:BB:C9:98
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 0194BD17621FFD9A53487848AF8B390E0703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 03D2
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: C6vF288DLJrh6KrS75B6YuQZR0+8rajEgju6eptZuJ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:62:1f:fd:9a:53:48:78:48:af:8b:39:0e:07:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=5a72faeb138b994cff0a1b72140f66e079bbc998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:be:f9:81:bf:7a:f2:ad:73:07:5f:5d:e8:8a:
45:cb:6b:d7:2b:27:61:34:e3:17:17:fd:23:28:41:
2c:61:1f:9b:83:63:e6:cf:9e:77:b3:c1:9d:e7:82:
d4:c6:a9:18:f0:0a:0a:a6:a2:27:24:75:68:3b:d3:
c3:3b:70:eb:14:ed:7b:0a:c8:78:93:7e:48:82:21:
0e:9d:aa:a1:7a:d9:09:7e:66:9a:72:c3:d0:86:b0:
92:8a:6a:4b:77:f5:d5:00:84:d9:a1:d4:c3:2f:79:
a4:9c:83:7c:90:f1:83:eb:1f:2b:af:45:e5:cd:7f:
d0:f4:ec:7d:7d:ef:6c:f0:49:61:76:f4:37:32:f3:
fa:69:5f:25:9d:34:62:0d:08:ca:4b:70:29:cb:7f:
0c:8f:f5:fa:cd:be:60:1e:83:d5:06:ea:a4:ac:24:
a1:03:9e:35:05:c2:09:3e:b0:aa:66:71:d4:22:a5:
b6:df:d1:fe:d3:b6:91:10:2c:1d:e3:da:0e:84:88:
f8:09:9b:b9:38:c9:16:64:69:70:73:3a:d6:c5:15:
e9:46:d9:7a:32:52:6f:9b:23:5b:5b:de:7d:87:8c:
0f:48:ab:c5:3b:e5:21:ac:4f:d3:b2:c6:f0:e2:19:
7a:4a:28:b7:17:65:71:37:cd:22:40:3c:da:ac:6b:
e6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:72:FA:EB:13:8B:99:4C:FF:0A:1B:72:14:0F:66:E0:79:BB:C9:98
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4c:b2:0b:d8:f3:e4:9a:06:0a:5d:af:1c:97:49:81:1f:04:
30:69:98:10:ea:34:20:b2:1a:95:75:ac:dd:10:2c:1c:d4:31:
ce:a9:59:1c:8c:a4:3e:61:3e:82:e1:4f:dc:a6:8a:39:80:94:
16:f9:ba:a5:94:c7:b3:dc:7e:58:8a:10:6f:c6:05:f6:81:d6:
0d:d1:dd:5a:51:2f:7b:3f:7c:ef:0d:33:5e:1e:28:20:8b:9d:
c8:6c:24:4b:de:d4:7c:1f:50:e6:d5:1d:2a:bb:e5:95:a9:30:
08:00:29:69:b8:ee:c1:1a:45:6b:27:e6:77:4a:1c:19:7c:7a:
55:b8:4d:ef:9d:cb:79:a0:24:fb:12:5f:75:4d:4f:bc:a7:82:
eb:68:e3:b5:e9:c5:f4:17:ca:c6:f1:21:67:4c:5c:d6:ac:3b:
b5:21:77:42:f8:f7:f9:db:65:c1:43:d3:1e:f8:04:4b:d7:62:
b6:37:ce:f1:aa:75:58:74:ef:52:d5:f0:e1:55:da:5f:5b:20:
2d:33:ca:1e:be:72:27:a1:90:6c:f2:62:f4:ea:50:74:f8:1a:
30:81:a5:a7:6e:59:92:9c:24:26:b5:d2:a3:14:a0:7c:ac:8b:
3e:37:0b:1b:98:e1:9e:c4:e3:bd:ba:44:7f:e7:e9:cf:a3:ec:
c3:93:a9:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2If/ZpTSHhIr4s5DgcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YTM3ODc4YzE0ZjIxNmMzMjY0OTgxOWVhNDI4YTU4MjI1
NTA0ZmIwHhcNMjUwMTMxMTYwMDEzWhcNMjUwMjAxMTYwMDEzWjAzMTEwLwYDVQQD
Eyg1YTcyZmFlYjEzOGI5OTRjZmYwYTFiNzIxNDBmNjZlMDc5YmJjOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L75gb968q1zB19d6IpFy2vXKydh
NOMXF/0jKEEsYR+bg2Pmz553s8Gd54LUxqkY8AoKpqInJHVoO9PDO3DrFO17Csh4
k35IgiEOnaqhetkJfmaacsPQhrCSimpLd/XVAITZodTDL3mknIN8kPGD6x8rr0Xl
zX/Q9Ox9fe9s8ElhdvQ3MvP6aV8lnTRiDQjKS3Apy38Mj/X6zb5gHoPVBuqkrCSh
A541BcIJPrCqZnHUIqW239H+07aRECwd49oOhIj4CZu5OMkWZGlwczrWxRXpRtl6
MlJvmyNbW959h4wPSKvFO+UhrE/Tssbw4hl6Sii3F2VxN80iQDzarGvmqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpy+usTi5lM/wobchQPZuB5u8mYMB8GA1UdIwQY
MBaAFKSjeHjBTyFsMmSYGepCilgiVQT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNjA2ZmItMTA3Zi00Mjk2LTg4NzAt
NGIwZTBhYzhkMjI5LzEvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9lNjA2ZmItMTA3Zi00Mjk2LTg4NzAtNGIwZTBhYzhkMjI5
LzEvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkyyC9jz
5JoGCl2vHJdJgR8EMGmYEOo0ILIalXWs3RAsHNQxzqlZHIykPmE+guFP3KaKOYCU
Fvm6pZTHs9x+WIoQb8YF9oHWDdHdWlEvez987w0zXh4oIIudyGwkS97UfB9Q5tUd
KrvllakwCAApabjuwRpFayfmd0ocGXx6VbhN753LeaAk+xJfdU1PvKeC62jjtenF
9BfKxvEhZ0xc1qw7tSF3Qvj3+dtlwUPTHvgES9ditjfO8ap1WHTvUtXw4VXaX1sg
LTPKHr5yJ6GQbPJi9OpQdPgaMIGlp25ZkpwkJrXSoxSgfKyLPjcLG5jhnsTjvbpE
f+fpz6Psw5OpFg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:04 2025 by rpki-client