Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier: U5AoF1GwHGzDEl/VGSzTrx4Mafc5J2ayh2Wq9uFzeOI=
Subject key identifier: 04:8F:95:2F:90:E9:0D:C7:E9:F1:D6:4B:5D:2B:BE:4D:F0:44:E1:BD
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 0194BD4E4695003136AF8A0252B4E53EE9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: RC2JkOQZBHdrMWWJ6dmI74cPa_s.roa (hash: qL9vMEtT48m8aWpCwA/eKJ1AT6hZ+DcyDfjgFWcllKo=)
2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: q0VpHLmFqFJ95ggsSt3kZOfM5knnfVc569rM521XJTk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:46:95:00:31:36:af:8a:02:52:b4:e5:3e:e9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=048f952f90e90dc7e9f1d64b5d2bbe4df044e1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:4f:53:61:83:8f:dd:fe:1b:4c:58:e8:82:
12:09:9d:27:9d:c8:1c:5a:d9:76:08:64:9c:02:5d:
15:86:37:5d:02:01:85:e8:76:ee:68:f7:9f:41:fc:
6f:b4:83:00:a9:4c:6d:2e:8f:e4:3c:20:e5:36:2f:
c1:70:79:ce:c2:57:1c:d0:8f:75:aa:43:66:dc:d3:
19:c7:2c:f1:d8:a4:85:da:76:56:d0:06:83:06:4b:
25:e4:ff:a6:79:49:8b:fe:d8:b6:1e:a5:48:66:37:
ee:b3:65:a3:a2:67:f2:90:31:ab:1a:23:9e:6c:13:
57:02:b8:4b:09:5c:8d:a8:df:54:8a:2a:77:fa:b0:
b2:16:c9:b7:71:70:6d:24:c6:b5:44:27:5e:35:a5:
97:40:5d:d4:60:b0:ab:c8:58:d5:d7:3a:fc:d8:0a:
71:37:8d:0a:de:90:c7:b5:f7:4f:d7:1c:ab:30:e1:
03:02:07:87:29:f0:80:e4:62:d3:d9:98:a9:ce:10:
57:c5:e9:8f:8e:56:8a:8f:35:f2:14:0b:c6:50:7f:
75:bc:cb:68:df:a6:7d:64:71:a5:63:1c:14:6c:4e:
41:63:e7:78:3a:b7:5b:8b:98:6c:75:0c:09:1f:20:
bf:bd:68:0b:e2:7b:30:3b:65:0d:81:d8:85:cc:35:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8F:95:2F:90:E9:0D:C7:E9:F1:D6:4B:5D:2B:BE:4D:F0:44:E1:BD
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:18:4b:f2:bf:a5:9f:e8:91:5f:55:cd:61:58:79:32:07:5b:
c6:b7:3d:8e:fd:93:f9:dd:aa:b4:d6:f3:14:42:dd:3c:80:ef:
b5:81:84:70:69:1c:d6:17:1e:2b:d1:ac:8f:01:37:7c:2b:bf:
23:84:61:61:22:97:ff:d6:84:d7:28:ee:c2:95:3f:5d:42:31:
63:a4:d8:d7:fa:e3:ad:8f:6c:62:b1:ef:27:6c:76:d4:4d:cb:
36:89:50:12:99:e7:a4:f8:9d:e9:58:a1:f8:4c:d1:88:c6:2b:
23:ff:d8:6b:78:ee:34:58:ec:e2:fa:8b:e8:d3:a3:3e:c6:ad:
ea:eb:85:ed:47:c6:6b:90:d5:5b:62:49:3e:b3:6d:d1:ba:c2:
d8:84:30:32:4f:39:d6:f6:3f:52:98:b6:fc:eb:57:e7:ab:18:
45:b4:e2:50:a6:90:f4:d6:9f:5d:33:8b:9e:67:e9:9d:fd:e0:
b9:cf:30:b3:d4:50:40:e0:fd:8b:cd:d4:b7:26:a6:94:8a:5a:
8e:30:54:42:8e:8f:48:33:9e:ff:4d:b6:46:ca:cf:c4:0d:f1:
8d:e1:1f:25:c9:d3:07:81:34:12:3a:80:c5:08:4c:89:98:80:
e3:79:95:15:78:1d:b3:aa:2a:20:17:0e:70:50:65:bb:40:1a:
b4:4a:30:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TkaVADE2r4oCUrTlPunLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YWQyM2Y2ZGNlNGQ5NjgzYzJhNDk0M2JkMzdjMTczMzVj
NzYxOGEwHhcNMjUwMTMxMTcwMDExWhcNMjUwMjAxMTcwMDExWjAzMTEwLwYDVQQD
EygwNDhmOTUyZjkwZTkwZGM3ZTlmMWQ2NGI1ZDJiYmU0ZGYwNDRlMWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteBPU2GDj93+G0xY6IISCZ0nncgc
Wtl2CGScAl0VhjddAgGF6HbuaPefQfxvtIMAqUxtLo/kPCDlNi/BcHnOwlcc0I91
qkNm3NMZxyzx2KSF2nZW0AaDBksl5P+meUmL/ti2HqVIZjfus2WjomfykDGrGiOe
bBNXArhLCVyNqN9Uiip3+rCyFsm3cXBtJMa1RCdeNaWXQF3UYLCryFjV1zr82Apx
N40K3pDHtfdP1xyrMOEDAgeHKfCA5GLT2ZipzhBXxemPjlaKjzXyFAvGUH91vMto
36Z9ZHGlYxwUbE5BY+d4Ordbi5hsdQwJHyC/vWgL4nswO2UNgdiFzDWXpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASPlS+Q6Q3H6fHWS10rvk3wROG9MB8GA1UdIwQY
MBaAFKStI/bc5NloPCpJQ703wXM1x2GKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEswajl0emsyV2c4S2tsRHZUZkJjelhIWVlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kMTgzN2EtNjA2ZS00MTgwLWE3ZjAt
NzI4ZTBkZmI4NDBkLzEvcEswajl0emsyV2c4S2tsRHZUZkJjelhIWVlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kMTgzN2EtNjA2ZS00MTgwLWE3ZjAtNzI4ZTBkZmI4NDBk
LzEvcEswajl0emsyV2c4S2tsRHZUZkJjelhIWVlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBhL8r+l
n+iRX1XNYVh5Mgdbxrc9jv2T+d2qtNbzFELdPIDvtYGEcGkc1hceK9GsjwE3fCu/
I4RhYSKX/9aE1yjuwpU/XUIxY6TY1/rjrY9sYrHvJ2x21E3LNolQEpnnpPid6Vih
+EzRiMYrI//Ya3juNFjs4vqL6NOjPsat6uuF7UfGa5DVW2JJPrNt0brC2IQwMk85
1vY/Upi2/OtX56sYRbTiUKaQ9NafXTOLnmfpnf3guc8ws9RQQOD9i83UtyamlIpa
jjBUQo6PSDOe/022RsrPxA3xjeEfJcnTB4E0EjqAxQhMiZiA43mVFXgds6oqIBcO
cFBlu0AatEow8A==
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:49:42 2025 by rpki-client