Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier: oYk37XEDbUyZUK2Nd14Ir5EmcAfiudSIaTOYwB6NGVk=
Subject key identifier: B2:02:61:97:EE:47:86:C8:60:51:7E:52:79:CA:D0:58:B3:0D:FD:23
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 0194BCE0E42299A2A22C7B496CC17A7AF7BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: 8_r7mVCzzc8i5_iqagGhH6oA6lo.roa (hash: NPDOx5bLEHu2ttrvWwMBmay19BA0wMcB6dN9yEUt368=)
2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: tI/0Wdxj1FgQPANZEHICsp2/MUQQ+8Jlkx1ye8hKw3I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e4:22:99:a2:a2:2c:7b:49:6c:c1:7a:7a:f7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=b2026197ee4786c860517e5279cad058b30dfd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:aa:dd:dd:0a:f9:50:a2:4f:41:4a:14:51:
53:67:60:7d:26:2e:23:00:44:d5:19:bd:8f:83:96:
7a:c0:9d:5f:df:aa:28:0f:5a:eb:a8:a5:4f:51:a8:
e1:aa:1f:02:d0:33:d2:34:7b:95:45:b7:45:d0:08:
76:a2:55:80:e3:c7:6d:0e:c5:76:5b:27:23:31:8a:
ff:ae:64:07:17:61:e1:eb:02:16:41:29:c2:d9:e7:
b8:d1:45:47:51:56:bc:85:89:f3:52:99:f7:1b:6e:
4b:22:fd:19:f0:93:43:bf:40:35:5f:28:32:a0:8d:
65:b3:3b:2c:d2:47:b2:6b:e0:53:32:62:d9:3f:eb:
e9:d6:d6:55:0e:06:30:66:4d:d1:b9:a1:bb:e5:a6:
21:c1:86:b8:df:dc:94:0e:09:6d:46:3a:fd:2c:db:
f6:fb:7f:42:2b:56:77:b5:76:e6:e0:7c:4f:a6:e4:
f1:4c:e7:3e:ff:0a:fb:1c:57:c8:b9:55:e7:e5:e5:
14:13:f5:30:53:59:52:f5:9f:4d:86:19:86:12:a4:
57:74:04:9b:88:27:e2:ae:71:cd:35:2e:14:ef:05:
e2:db:ef:db:1d:6e:91:e0:7d:7c:8b:18:d5:79:20:
31:b1:11:51:c3:83:14:15:f9:ca:e9:ae:64:13:fb:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:02:61:97:EE:47:86:C8:60:51:7E:52:79:CA:D0:58:B3:0D:FD:23
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9b:36:fc:08:72:a6:2f:66:0a:e5:9e:00:6f:a0:e6:0e:73:
b9:85:0b:5e:c5:87:94:17:9c:93:e8:f3:52:af:ae:43:c9:b2:
a4:64:a6:dc:df:b8:e2:c6:26:12:b7:54:63:fa:da:6f:6a:7f:
3b:a1:0f:e4:b5:ac:32:48:ae:80:1d:0c:78:3d:99:46:97:f0:
5f:5d:e7:b9:f3:af:99:92:0e:34:95:37:81:fe:ca:0b:00:8c:
93:b0:c6:85:e4:d9:47:0d:98:17:2e:5f:e4:cd:fd:1c:2c:9f:
f7:8b:42:71:77:f6:33:b8:79:c6:a2:fa:a0:a5:49:d8:e5:de:
5a:e7:da:50:5d:9d:16:ad:85:ce:fc:66:b4:07:70:03:f5:25:
cf:3d:fe:ef:1f:2a:0d:a5:84:1b:b4:64:3d:76:69:37:12:ed:
fe:02:e1:03:08:16:f2:41:bd:37:ba:55:c5:66:5b:92:b2:65:
7d:a7:91:4f:cd:b9:1a:78:7b:42:ef:1b:fe:a9:55:a1:3e:ed:
4d:c8:b5:67:1c:c0:42:38:3b:27:66:33:81:2e:fa:20:c3:f5:
8e:20:e5:a0:51:80:56:78:ef:ce:ee:8d:3c:f4:7e:df:61:95:
79:f8:7b:ed:05:c9:0d:e1:ad:5d:44:91:af:1a:aa:59:2a:d4:
f8:99:bf:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OQimaKiLHtJbMF6eve8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZGEyOWE0OGMyNTc3NThjOGU1MThlZTVjOGIwM2NjZGEw
MjQ3YzkwHhcNMjUwMTMxMTUwMDQyWhcNMjUwMjAxMTUwMDQyWjAzMTEwLwYDVQQD
EyhiMjAyNjE5N2VlNDc4NmM4NjA1MTdlNTI3OWNhZDA1OGIzMGRmZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAeq3d0K+VCiT0FKFFFTZ2B9Ji4j
AETVGb2Pg5Z6wJ1f36ooD1rrqKVPUajhqh8C0DPSNHuVRbdF0Ah2olWA48dtDsV2
WycjMYr/rmQHF2Hh6wIWQSnC2ee40UVHUVa8hYnzUpn3G25LIv0Z8JNDv0A1Xygy
oI1lszss0keya+BTMmLZP+vp1tZVDgYwZk3RuaG75aYhwYa439yUDgltRjr9LNv2
+39CK1Z3tXbm4HxPpuTxTOc+/wr7HFfIuVXn5eUUE/UwU1lS9Z9NhhmGEqRXdASb
iCfirnHNNS4U7wXi2+/bHW6R4H18ixjVeSAxsRFRw4MUFfnK6a5kE/tDpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLICYZfuR4bIYFF+UnnK0FizDf0jMB8GA1UdIwQY
MBaAFD/aKaSMJXdYyOUY7lyLA8zaAkfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jMWMwNjMtOWU0OS00MzUzLWI4YmQt
OTM3NGYyMWU2NDg4LzEvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jMWMwNjMtOWU0OS00MzUzLWI4YmQtOTM3NGYyMWU2NDg4
LzEvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZs2/Ahy
pi9mCuWeAG+g5g5zuYULXsWHlBeck+jzUq+uQ8mypGSm3N+44sYmErdUY/rab2p/
O6EP5LWsMkiugB0MeD2ZRpfwX13nufOvmZIONJU3gf7KCwCMk7DGheTZRw2YFy5f
5M39HCyf94tCcXf2M7h5xqL6oKVJ2OXeWufaUF2dFq2FzvxmtAdwA/Ulzz3+7x8q
DaWEG7RkPXZpNxLt/gLhAwgW8kG9N7pVxWZbkrJlfaeRT825Gnh7Qu8b/qlVoT7t
Tci1ZxzAQjg7J2YzgS76IMP1jiDloFGAVnjvzu6NPPR+32GVefh77QXJDeGtXUSR
rxqqWSrU+Jm/Ww==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:57 2025 by rpki-client