Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
File: pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json)
Hash identifier: geSeHGpYH4CwzZJPuJWookcl3nVSBBot6WrreGAsMJM=
Subject key identifier: DE:5C:A1:7A:01:50:3D:10:46:FD:44:B7:0C:72:A8:27:C6:00:9B:82
Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
Certificate issuer: /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Certificate serial: 0194BC04ABEE6D4AAD5E353C9978DC51F6B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: ivIvX3ybfrEo6-_TJQtybec7lto.roa (hash: AYMx34pgwR2VT7P45blq8Gv6Ax5FOOQvXf8mR5QOiWI=)
2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: 96O/I0quZkfGaH0YtBmU564QchEo+vCR1LZG7ZCnW2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ab:ee:6d:4a:ad:5e:35:3c:99:78:dc:51:f6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=de5ca17a01503d1046fd44b70c72a827c6009b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:6f:0b:06:93:bc:b3:80:df:e8:08:29:83:
9d:96:a4:26:8a:90:1c:9d:44:42:4a:b2:d2:c1:58:
29:cc:1d:87:50:82:c0:92:a6:64:7a:76:94:55:b4:
3a:6c:ee:d3:95:c5:c3:db:5b:bd:bb:17:37:96:6a:
17:99:0d:9e:a0:cc:dc:f3:5e:69:0e:7b:42:62:59:
1e:82:ea:a3:23:aa:7e:8e:db:2d:23:b2:52:c3:0c:
13:aa:ca:4e:0a:4a:30:87:04:06:06:ca:8d:fb:dd:
1f:1d:70:29:d4:01:da:b0:70:a1:25:b9:af:b9:d6:
b0:68:21:03:93:bb:fd:63:d8:8c:2e:d0:10:87:f2:
ec:4b:d8:b1:28:29:da:27:d3:ff:48:b4:32:9e:5d:
73:1b:9e:a0:db:c6:78:14:05:d4:5c:ae:09:da:d4:
45:09:4f:d2:43:ef:7b:0a:bf:db:17:8e:3b:3b:13:
98:8f:27:ec:a6:22:35:1a:ab:82:d7:b7:2a:52:16:
86:42:65:3c:b3:5c:29:08:d0:e3:82:c4:b6:0d:01:
b5:d0:61:82:0f:28:d5:1b:6c:4f:28:db:6d:57:00:
43:fd:b4:d5:0c:35:56:5b:fd:12:9f:37:8d:64:91:
36:84:1f:ab:e8:0f:4c:8a:15:df:bc:9c:be:44:08:
2e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5C:A1:7A:01:50:3D:10:46:FD:44:B7:0C:72:A8:27:C6:00:9B:82
X509v3 Authority Key Identifier:
keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0b:92:a4:1c:60:5c:fc:25:f4:f4:23:f0:17:38:2c:ec:1a:
a5:dc:f8:04:09:ea:e8:a7:7d:6f:8d:ff:26:de:ed:94:83:e3:
78:44:0c:bb:ae:3e:f4:74:d2:00:32:00:78:6c:ff:3c:ff:6d:
51:0d:12:c0:93:2c:5f:59:b7:b3:a5:f6:63:fb:07:09:8e:b7:
7e:f6:7d:fc:2a:60:27:d4:a6:cb:95:73:1e:39:26:bb:e8:d9:
b9:89:66:73:02:54:61:7a:3e:66:2f:4a:37:ed:b8:73:ea:91:
82:f3:74:49:9d:31:47:8a:79:d9:ce:c7:8e:26:b1:77:d4:12:
2d:3a:e8:e2:01:d0:3c:48:ec:4c:94:c0:3d:39:5b:1d:98:57:
c2:5f:a4:82:86:70:ab:cd:b4:c1:a2:3d:d7:20:be:9b:3c:b8:
d5:33:2a:de:ad:3a:6c:29:9f:84:05:e2:3a:f4:84:6b:90:b2:
17:49:ee:1c:18:0a:1b:d5:a7:e3:9a:3e:f6:f3:09:8c:bd:6d:
77:f0:b4:35:db:60:ff:e2:82:f5:80:ae:6b:3b:0a:aa:bd:1b:
7a:1d:e2:b3:56:8f:3c:45:78:4c:69:85:56:8d:ca:1a:60:08:
e9:ed:7d:49:fd:74:e9:21:d9:58:33:da:a2:22:f6:71:67:83:
01:69:e4:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BKvubUqtXjU8mXjcUfayMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWI4M2Y1YmRlMWExZGM5M2RlNjk0NzY4MzdlOWUzYTM3
Nzk3YWYwHhcNMjUwMTMxMTEwMDEwWhcNMjUwMjAxMTEwMDEwWjAzMTEwLwYDVQQD
EyhkZTVjYTE3YTAxNTAzZDEwNDZmZDQ0YjcwYzcyYTgyN2M2MDA5YjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV1vCwaTvLOA3+gIKYOdlqQmipAc
nURCSrLSwVgpzB2HUILAkqZkenaUVbQ6bO7TlcXD21u9uxc3lmoXmQ2eoMzc815p
DntCYlkeguqjI6p+jtstI7JSwwwTqspOCkowhwQGBsqN+90fHXAp1AHasHChJbmv
udawaCEDk7v9Y9iMLtAQh/LsS9ixKCnaJ9P/SLQynl1zG56g28Z4FAXUXK4J2tRF
CU/SQ+97Cr/bF447OxOYjyfspiI1GquC17cqUhaGQmU8s1wpCNDjgsS2DQG10GGC
DyjVG2xPKNttVwBD/bTVDDVWW/0SnzeNZJE2hB+r6A9MihXfvJy+RAguwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5coXoBUD0QRv1EtwxyqCfGAJuCMB8GA1UdIwQY
MBaAFKSbg/W94aHck95pR2g36eOjd5evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEt
OTg3NzE5ZWU2YTBjLzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEtOTg3NzE5ZWU2YTBj
LzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwuSpBxg
XPwl9PQj8Bc4LOwapdz4BAnq6Kd9b43/Jt7tlIPjeEQMu64+9HTSADIAeGz/PP9t
UQ0SwJMsX1m3s6X2Y/sHCY63fvZ9/CpgJ9Smy5VzHjkmu+jZuYlmcwJUYXo+Zi9K
N+24c+qRgvN0SZ0xR4p52c7Hjiaxd9QSLTro4gHQPEjsTJTAPTlbHZhXwl+kgoZw
q820waI91yC+mzy41TMq3q06bCmfhAXiOvSEa5CyF0nuHBgKG9Wn45o+9vMJjL1t
d/C0Ndtg/+KC9YCuazsKqr0beh3is1aPPEV4TGmFVo3KGmAI6e19Sf106SHZWDPa
oiL2cWeDAWnkPg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:38:59 2025 by rpki-client