Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
File: pnYhghhEiOf3hxIqcYCZfOjpDUw.mft (raw, json)
Hash identifier: YINbVl+9z3Jt8Rol+zrtpKLFBBazrIIqqYqFTcV2aE8=
Subject key identifier: 08:0B:CA:67:93:42:EC:DF:6F:D6:A0:8E:EA:03:C8:D8:41:A7:6A:B6
Authority key identifier: A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C
Certificate issuer: /CN=a6762182184488e7f787122a7180997ce8e90d4c
Certificate serial: 0194BD4E4F771C0956B9D6CD52FA65CC7BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
Manifest number: F0
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: pnYhghhEiOf3hxIqcYCZfOjpDUw.crl (hash: TxHnjIGiC/OkkOvzYF58P5YWpQUpqb/loJMXdfmAygQ=)
2: yNyV4cceOnlRqYhPeAllARW73Jw.roa (hash: 8x/01ij81KHBd33TvjxnJ5OVDsgBIBKqbtRkLV2shYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4f:77:1c:09:56:b9:d6:cd:52:fa:65:cc:7b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6762182184488e7f787122a7180997ce8e90d4c
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=080bca679342ecdf6fd6a08eea03c8d841a76ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:bd:27:34:38:aa:ac:87:de:6f:28:7d:a0:
48:95:91:71:aa:3d:97:be:d5:58:de:17:f3:ca:3e:
20:87:cd:ea:98:94:b8:ca:fc:78:21:06:9f:4c:7f:
67:7e:66:14:21:36:8b:2f:cf:f6:a7:67:de:b9:86:
30:89:03:15:d8:ff:c4:5a:98:04:31:0e:c8:db:e6:
60:5e:9d:70:ad:12:27:9b:61:03:bd:05:d6:77:47:
9a:f2:08:a0:ec:c9:1f:15:a3:0f:0f:fa:a9:b5:95:
ff:15:b9:49:ad:83:1b:0f:0f:85:b2:2f:b3:21:e7:
57:be:f0:50:53:fb:e6:da:80:c4:c7:23:0b:40:57:
99:55:22:3b:c4:f6:95:55:95:d0:d5:d7:b8:9c:a7:
dc:7b:c2:36:e0:bb:12:69:86:e0:36:87:ae:c8:78:
6d:d5:b6:f1:65:d2:7d:bd:c5:c8:39:bd:05:eb:23:
2a:30:14:96:47:9d:a2:f5:7d:27:6f:6c:0c:7b:f1:
e9:ce:35:2d:5a:54:c2:da:5a:ec:b2:3e:05:61:d3:
8b:49:2f:2f:99:61:e8:5c:f8:10:ee:e2:e5:3d:53:
66:19:54:4c:69:ef:09:54:8b:72:47:a5:81:9a:2a:
33:56:fc:83:2a:dd:ea:5e:e5:c5:53:69:1f:11:43:
a9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0B:CA:67:93:42:EC:DF:6F:D6:A0:8E:EA:03:C8:D8:41:A7:6A:B6
X509v3 Authority Key Identifier:
keyid:A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5f:60:7a:c3:17:dc:ba:fb:80:ff:5f:76:fa:80:80:16:39:
a6:3f:1e:ff:b5:48:dc:f4:32:83:8d:98:cb:7e:28:aa:f4:30:
5b:da:ef:51:c9:52:3d:f2:7f:be:9b:58:c7:cf:e6:7b:a3:1a:
0c:4e:9b:a2:88:d6:bb:ac:38:2e:7a:1c:f9:56:6c:b0:69:9f:
7e:92:aa:60:b8:3c:f2:00:b3:5e:83:b4:cb:fb:e6:cc:43:fc:
12:d7:91:bc:4f:fc:cb:cb:f3:63:dd:ae:e1:0d:cd:ba:d0:db:
32:37:2b:6a:37:c8:f1:4a:52:3f:42:0d:07:d2:53:fd:50:9b:
28:5d:7e:7f:cf:1f:93:de:d4:0a:e2:ea:b2:70:c9:6e:18:35:
af:40:8e:93:d2:e2:62:0d:ae:2e:8c:0a:97:99:79:cd:39:c0:
ce:48:a9:05:31:f0:44:db:ae:4e:b9:53:63:94:eb:5b:56:83:
dc:48:88:ce:c3:bd:57:14:0e:3d:20:17:c0:2c:25:60:1c:96:
9d:4b:1e:32:24:65:4d:1c:c1:ed:a0:70:d2:ba:b5:fd:91:1c:
a7:ac:8a:71:e0:74:3f:c8:de:19:7e:f3:59:00:9a:ce:9c:af:
35:42:32:17:63:72:3f:d9:3f:a6:b3:35:85:51:a4:7f:eb:1c:
df:0e:fa:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tk93HAlWudbNUvplzHvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NzYyMTgyMTg0NDg4ZTdmNzg3MTIyYTcxODA5OTdjZThl
OTBkNGMwHhcNMjUwMTMxMTcwMDEzWhcNMjUwMjAxMTcwMDEzWjAzMTEwLwYDVQQD
EygwODBiY2E2NzkzNDJlY2RmNmZkNmEwOGVlYTAzYzhkODQxYTc2YWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvem9JzQ4qqyH3m8ofaBIlZFxqj2X
vtVY3hfzyj4gh83qmJS4yvx4IQafTH9nfmYUITaLL8/2p2feuYYwiQMV2P/EWpgE
MQ7I2+ZgXp1wrRInm2EDvQXWd0ea8gig7MkfFaMPD/qptZX/FblJrYMbDw+Fsi+z
IedXvvBQU/vm2oDExyMLQFeZVSI7xPaVVZXQ1de4nKfce8I24LsSaYbgNoeuyHht
1bbxZdJ9vcXIOb0F6yMqMBSWR52i9X0nb2wMe/HpzjUtWlTC2lrssj4FYdOLSS8v
mWHoXPgQ7uLlPVNmGVRMae8JVItyR6WBmiozVvyDKt3qXuXFU2kfEUOpnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgLymeTQuzfb9agjuoDyNhBp2q2MB8GA1UdIwQY
MBaAFKZ2IYIYRIjn94cSKnGAmXzo6Q1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG5ZaGdoaEVpT2YzaHhJcWNZQ1pmT2pwRFV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yZjMxOWUtMjY4NS00NDI3LWFlYzAt
ZWQ2MGJhYjc1NzJmLzEvcG5ZaGdoaEVpT2YzaHhJcWNZQ1pmT2pwRFV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yZjMxOWUtMjY4NS00NDI3LWFlYzAtZWQ2MGJhYjc1NzJm
LzEvcG5ZaGdoaEVpT2YzaHhJcWNZQ1pmT2pwRFV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYV9gesMX
3Lr7gP9fdvqAgBY5pj8e/7VI3PQyg42Yy34oqvQwW9rvUclSPfJ/vptYx8/me6Ma
DE6boojWu6w4Lnoc+VZssGmffpKqYLg88gCzXoO0y/vmzEP8EteRvE/8y8vzY92u
4Q3NutDbMjcrajfI8UpSP0INB9JT/VCbKF1+f88fk97UCuLqsnDJbhg1r0COk9Li
Yg2uLowKl5l5zTnAzkipBTHwRNuuTrlTY5TrW1aD3EiIzsO9VxQOPSAXwCwlYByW
nUseMiRlTRzB7aBw0rq1/ZEcp6yKceB0P8jeGX7zWQCazpyvNUIyF2NyP9k/prM1
hVGkf+sc3w76VQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:31 2025 by rpki-client