Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: tzUTKOWk5GIKyIl+4d46Wze1Udu2RZvHHQ7hKbcOCsA=
Subject key identifier: 35:D4:4F:20:3C:50:18:F7:36:7B:DF:90:E0:F0:DA:74:3F:25:B1:53
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 0194BD177AF065F28FC76AA032FD9ED6B73C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 08AB
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: 9qEL2pFi8GcNKTnAwY3D31I1-18.roa (hash: kRwBp+rZmhG6iafwWEWyexpHApyotJ76NYZuUZZ35QQ=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: fP3Qq+tLGLV3D/+o12A8NgZ+v1M5TekQI2+alRFFbVk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7a:f0:65:f2:8f:c7:6a:a0:32:fd:9e:d6:b7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=35d44f203c5018f7367bdf90e0f0da743f25b153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:9b:50:19:b0:dd:07:c3:c3:c7:2a:3e:13:
82:fe:6a:98:b6:05:bf:1b:20:40:24:23:15:a7:b6:
63:a5:3d:2d:1f:8f:57:12:ab:74:4a:1b:b3:29:b0:
65:a5:18:4f:d3:8a:60:a8:f4:3c:30:f1:50:23:de:
ab:4b:ba:22:f2:14:cc:f9:e8:33:b6:46:40:98:cf:
72:20:f0:57:9a:dc:d0:47:ef:aa:a1:20:7c:bf:e5:
18:2f:47:78:a1:2f:93:97:9b:59:e8:d6:43:37:3e:
d4:e1:02:a4:4c:11:f9:01:14:91:48:49:69:70:1b:
fb:ee:01:68:82:25:25:58:ba:29:6b:1a:2b:ea:8a:
3c:76:df:a6:19:41:8a:71:bf:64:87:1f:49:50:d1:
d9:c0:6d:29:d5:ba:f1:35:b0:5a:1d:e6:d6:3b:22:
8d:96:a1:ba:79:98:0a:e9:ae:29:98:35:d8:e3:a3:
e8:8b:a4:c5:d6:c9:9d:89:71:8a:cf:92:0d:5d:e2:
25:1c:61:86:14:86:bf:3c:51:02:c0:70:76:05:8d:
e9:f3:db:7b:29:d2:6a:36:2d:91:ca:a8:f3:d1:5f:
f8:0c:bc:74:b3:cd:97:58:f0:05:f7:c1:c5:44:c5:
2c:4c:d5:1d:e7:cc:96:bc:45:00:f1:3e:c2:9a:0f:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D4:4F:20:3C:50:18:F7:36:7B:DF:90:E0:F0:DA:74:3F:25:B1:53
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:14:d4:0d:83:58:eb:d9:ae:c1:ea:89:66:2c:73:d5:ad:1d:
cc:7b:56:b7:76:e6:cd:ac:df:d9:af:14:19:ec:9a:5c:a4:2f:
b8:cb:9c:97:5f:3c:60:c6:ae:13:8f:f1:bd:61:82:37:0d:04:
39:e3:71:9c:8a:1c:3d:4f:66:97:a3:96:89:30:04:35:93:04:
08:14:83:e4:f5:f8:8b:31:43:3d:c1:78:1b:8a:f6:f9:04:01:
2b:72:a1:a3:c6:8c:48:6c:74:cd:0e:66:2f:9e:3b:28:6c:ec:
d6:92:5a:2b:71:87:e5:6d:5e:fb:c5:20:91:08:0b:22:3b:1f:
83:2c:82:de:70:32:44:49:16:cc:cd:b4:fd:09:4a:ba:71:c6:
48:1f:12:a0:d8:0b:5d:26:b7:30:81:6e:48:ab:26:f5:8a:70:
24:e0:74:e6:e1:0f:05:50:ad:3c:1d:d7:05:1f:2e:0d:69:7f:
3c:6b:5a:ab:c9:fa:a4:6f:45:a1:c8:c7:df:c5:b6:4b:aa:35:
e0:3e:80:d8:63:1d:46:eb:b9:c3:58:cc:5f:11:4f:53:c3:e2:
0d:d1:84:fe:af:2e:a4:a8:57:c3:53:d9:81:93:37:79:96:c7:
a7:47:07:21:eb:7b:fd:58:93:77:9b:69:e6:31:cc:76:92:21:
85:73:46:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3rwZfKPx2qgMv2e1rc8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZjJjMzEyOTA2ZWI2NzM2MTJiYWU3NGRhMmRkMThhMDM2
ODI0YjEwHhcNMjUwMTMxMTYwMDIwWhcNMjUwMjAxMTYwMDIwWjAzMTEwLwYDVQQD
EygzNWQ0NGYyMDNjNTAxOGY3MzY3YmRmOTBlMGYwZGE3NDNmMjViMTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7mbUBmw3QfDw8cqPhOC/mqYtgW/
GyBAJCMVp7ZjpT0tH49XEqt0ShuzKbBlpRhP04pgqPQ8MPFQI96rS7oi8hTM+egz
tkZAmM9yIPBXmtzQR++qoSB8v+UYL0d4oS+Tl5tZ6NZDNz7U4QKkTBH5ARSRSElp
cBv77gFogiUlWLopaxor6oo8dt+mGUGKcb9khx9JUNHZwG0p1brxNbBaHebWOyKN
lqG6eZgK6a4pmDXY46Poi6TF1smdiXGKz5INXeIlHGGGFIa/PFECwHB2BY3p89t7
KdJqNi2Ryqjz0V/4DLx0s82XWPAF98HFRMUsTNUd58yWvEUA8T7Cmg9SlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXUTyA8UBj3NnvfkODw2nQ/JbFTMB8GA1UdIwQY
MBaAFD7ywxKQbrZzYSuudNot0YoDaCSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHZMREVwQnV0bk5oSzY1MDJpM1JpZ05vSkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83ODgyZTMtZGU4Zi00NzUxLTliNmYt
YzlmZmJlOWI5NGQzLzEvUHZMREVwQnV0bk5oSzY1MDJpM1JpZ05vSkxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC83ODgyZTMtZGU4Zi00NzUxLTliNmYtYzlmZmJlOWI5NGQz
LzEvUHZMREVwQnV0bk5oSzY1MDJpM1JpZ05vSkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghTUDYNY
69muweqJZixz1a0dzHtWt3bmzazf2a8UGeyaXKQvuMucl188YMauE4/xvWGCNw0E
OeNxnIocPU9ml6OWiTAENZMECBSD5PX4izFDPcF4G4r2+QQBK3Kho8aMSGx0zQ5m
L547KGzs1pJaK3GH5W1e+8UgkQgLIjsfgyyC3nAyREkWzM20/QlKunHGSB8SoNgL
XSa3MIFuSKsm9YpwJOB05uEPBVCtPB3XBR8uDWl/PGtaq8n6pG9FocjH38W2S6o1
4D6A2GMdRuu5w1jMXxFPU8PiDdGE/q8upKhXw1PZgZM3eZbHp0cHIet7/ViTd5tp
5jHMdpIhhXNGAg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:07 2025 by rpki-client