Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
File: PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json)
Hash identifier: w4Olel7jucbXI/AkrYH+mkMj/M2XB19IhqKV0CTz5B8=
Subject key identifier: 0B:A3:8A:7A:16:5E:83:CB:3E:6D:4D:F0:FC:FF:B8:78:B6:31:C5:37
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial: 0194BCA9A6ABFCD7682E9C7F8C5C20B006CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: 2U3S0EebKiavy3Fa5PfJB7ScCy2/nC+odELqA1FcL1A=)
2: YQBFYB0MYwrVqZbuM7UQcqbC024.roa (hash: wyZtqH/kTGiAK4e2xHLNhEXkV/FU12e6HKB8OJ8RKis=)
3: wfcB4mAnFj3QU1k-UoqD7LNH2ks.roa (hash: SfjPp8tTJZPwOpMDomAWdq0cbTqhgyvnx9jbemLwves=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a6:ab:fc:d7:68:2e:9c:7f:8c:5c:20:b0:06:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=0ba38a7a165e83cb3e6d4df0fcffb878b631c537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:72:e0:a0:62:57:02:07:7b:fb:29:ec:e8:
36:6c:74:73:46:d3:f5:3b:99:47:e0:38:09:95:98:
18:6b:97:b4:59:09:82:96:b9:1f:10:d2:1f:0f:01:
3d:1f:31:3b:dc:a5:1c:c5:29:85:3c:df:4a:71:ff:
c5:48:22:0b:ce:ee:a0:4d:43:cd:1a:02:56:f9:df:
6b:8f:72:2c:ba:1f:f8:89:17:76:eb:14:30:12:6e:
dd:2b:54:94:9d:a1:12:3b:88:6f:63:81:33:c1:a6:
3f:4c:ec:9e:90:6e:91:c7:0b:52:2f:36:b9:09:7b:
a2:e6:d7:25:26:35:20:5c:b2:aa:3c:86:1a:a0:93:
b3:c4:f1:37:dc:5b:4d:79:09:7e:83:f5:b5:5d:f9:
14:9f:ae:62:ab:af:68:f0:b4:28:3f:9e:6a:c2:5f:
02:e3:65:36:8b:00:4e:76:53:49:63:87:1e:a0:05:
68:c3:0b:c6:68:3b:31:c7:09:be:07:d7:b3:3d:bc:
df:56:23:d7:0d:7b:90:37:b6:2a:02:32:0f:ec:a4:
65:b8:46:06:09:be:48:e6:68:2b:68:f9:b5:50:1c:
10:03:98:6a:11:83:2b:8d:51:1f:fc:ce:42:7d:93:
ed:06:08:b0:dc:fa:28:3b:52:60:99:d8:28:fd:b8:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A3:8A:7A:16:5E:83:CB:3E:6D:4D:F0:FC:FF:B8:78:B6:31:C5:37
X509v3 Authority Key Identifier:
keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:94:08:c7:3d:8f:8c:f9:4b:af:94:77:84:f9:a6:6f:19:f5:
95:e7:32:64:a9:89:f2:03:ab:d7:d2:75:25:3b:e0:45:27:b9:
2a:19:fa:b0:8e:d2:c1:a3:1d:94:e6:fa:fc:58:e3:b5:8a:82:
56:d9:78:c6:c0:32:13:e6:4e:94:b0:69:ee:da:9e:4f:5b:7a:
94:a5:38:3b:ab:56:cc:fe:06:6a:86:b6:bf:4f:81:a6:b1:79:
0c:15:28:ca:69:d4:80:23:3a:1d:96:5c:3b:76:02:2c:c0:7d:
6f:3c:7b:80:f1:d0:ec:b7:fd:99:75:be:79:b6:63:ae:2b:91:
42:72:80:f3:1f:9a:b8:66:5b:9f:3e:6e:ad:40:8b:bb:f2:1b:
ca:77:2c:5b:79:f7:87:e7:cf:8e:bf:c2:3e:dc:cc:5c:28:68:
e1:54:f8:05:a5:3c:8f:10:f2:ce:e1:c2:0e:7a:ea:f9:79:c5:
43:09:b0:9d:c9:04:dd:e3:b1:e3:cd:8d:a8:3d:f6:95:5b:7c:
bd:6b:ec:24:7d:8a:01:47:40:0b:e9:98:f0:de:9b:c8:55:ec:
57:7b:2a:f0:b4:66:c0:51:70:47:b7:8f:d3:b8:98:bf:cb:10:
55:a7:a2:2b:3b:25:19:2a:f0:f4:c1:38:bb:09:27:9c:ac:f7:
d9:e4:f0:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qaar/NdoLpx/jFwgsAbNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMmI0ZmNlYTRiNzIyZjJhNmY2YzcwNWM1NTg5ZWUxYWJj
NjIwYWUwHhcNMjUwMTMxMTQwMDIyWhcNMjUwMjAxMTQwMDIyWjAzMTEwLwYDVQQD
EygwYmEzOGE3YTE2NWU4M2NiM2U2ZDRkZjBmY2ZmYjg3OGI2MzFjNTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7py4KBiVwIHe/sp7Og2bHRzRtP1
O5lH4DgJlZgYa5e0WQmClrkfENIfDwE9HzE73KUcxSmFPN9Kcf/FSCILzu6gTUPN
GgJW+d9rj3Isuh/4iRd26xQwEm7dK1SUnaESO4hvY4EzwaY/TOyekG6RxwtSLza5
CXui5tclJjUgXLKqPIYaoJOzxPE33FtNeQl+g/W1XfkUn65iq69o8LQoP55qwl8C
42U2iwBOdlNJY4ceoAVowwvGaDsxxwm+B9ezPbzfViPXDXuQN7YqAjIP7KRluEYG
Cb5I5mgraPm1UBwQA5hqEYMrjVEf/M5CfZPtBgiw3PooO1Jgmdgo/bgN9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAujinoWXoPLPm1N8Pz/uHi2McU3MB8GA1UdIwQY
MBaAFD8rT86ktyLypvbHBcVYnuGrxiCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHl0UHpxUzNJdkttOXNjRnhWaWU0YXZHSUs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NWIyMzctZDA0MS00NDk3LWE3Mjkt
NjI1M2FkMDhmODU4LzEvUHl0UHpxUzNJdkttOXNjRnhWaWU0YXZHSUs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84NWIyMzctZDA0MS00NDk3LWE3MjktNjI1M2FkMDhmODU4
LzEvUHl0UHpxUzNJdkttOXNjRnhWaWU0YXZHSUs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5QIxz2P
jPlLr5R3hPmmbxn1lecyZKmJ8gOr19J1JTvgRSe5Khn6sI7SwaMdlOb6/FjjtYqC
Vtl4xsAyE+ZOlLBp7tqeT1t6lKU4O6tWzP4Gaoa2v0+BprF5DBUoymnUgCM6HZZc
O3YCLMB9bzx7gPHQ7Lf9mXW+ebZjriuRQnKA8x+auGZbnz5urUCLu/IbyncsW3n3
h+fPjr/CPtzMXCho4VT4BaU8jxDyzuHCDnrq+XnFQwmwnckE3eOx482NqD32lVt8
vWvsJH2KAUdAC+mY8N6byFXsV3sq8LRmwFFwR7eP07iYv8sQVaeiKzslGSrw9ME4
uwknnKz32eTw1A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:10 2025 by rpki-client