Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
File: PtQqBIdwVgYBXlow2h5w9Aflnpk.mft (raw, json)
Hash identifier: eVvFWElgWPjpW0CkeBJRdHazYGYF0sD1bITKHPnKGXc=
Subject key identifier: 9F:B9:8A:41:90:C8:47:19:CE:32:03:41:38:F1:CA:E3:A1:1C:D7:42
Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
Certificate issuer: /CN=3ed42a0487705606015e5a30da1e70f407e59e99
Certificate serial: 0194BD4E9407B194A3A1198CF6869A4FB652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: PtQqBIdwVgYBXlow2h5w9Aflnpk.crl (hash: 1PVvylxy9Qhvof4NtnCQoEHO2QWgL6gU9g7eFBIarYc=)
2: Ygud2H3mQvpplx2m1ZwaXdOogYA.roa (hash: /wnaFbQu+otS41ERWGG+1dFZ6eGw9L5BsokLI2OTM5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:94:07:b1:94:a3:a1:19:8c:f6:86:9a:4f:b6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=9fb98a4190c84719ce32034138f1cae3a11cd742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:a3:da:e0:49:cf:e3:2e:da:80:46:5f:20:
07:91:0b:07:ad:df:a4:b4:93:aa:d6:1c:5a:d6:85:
5f:cb:a4:db:5f:67:e3:4d:a1:a6:d6:4a:e8:00:aa:
fa:aa:8f:83:7e:fc:ba:ae:8e:e9:4a:10:91:9c:f4:
52:e2:f2:1f:89:50:b4:de:d7:27:75:3e:0b:7b:01:
91:59:a0:78:e0:ef:9f:00:fa:bd:1b:a8:d7:9c:9c:
ab:bd:ba:28:98:a4:67:86:3a:97:fa:cf:bb:35:82:
5c:92:00:d8:f9:41:de:83:ef:95:52:ff:48:81:8e:
1b:e6:f9:ca:b1:30:15:a6:a6:95:df:10:1f:e2:44:
b1:db:1d:7d:2d:72:79:a7:98:5d:4d:c8:3e:fe:e8:
9a:fb:8e:d8:f0:df:87:9c:d3:2a:3a:fe:13:e6:82:
28:a1:4e:8a:e2:63:d8:f8:30:9d:9c:50:08:8f:ca:
d0:e2:be:f9:5d:2a:42:16:8a:5d:1b:96:c9:01:81:
06:a1:e3:11:2b:2a:01:ab:d5:8a:ae:cf:f1:ad:e4:
a6:33:92:d5:af:42:5f:ee:b4:03:ba:b7:7f:e3:73:
57:c6:1f:fb:d8:38:cb:c4:42:5c:35:85:12:67:33:
50:fc:db:26:84:f3:a6:34:64:60:0f:22:c6:9a:ab:
5d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B9:8A:41:90:C8:47:19:CE:32:03:41:38:F1:CA:E3:A1:1C:D7:42
X509v3 Authority Key Identifier:
keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5d:c1:45:0d:10:ba:c0:8a:f8:32:e2:41:9f:12:9f:6c:d8:
bb:03:e7:58:ab:da:2c:52:9e:87:40:32:43:ab:b6:8a:28:83:
8c:3c:01:30:3a:8d:36:d3:8c:6d:2e:19:b6:d6:06:9d:3a:f4:
43:59:16:10:cf:25:2a:f1:92:c8:01:6b:f2:e5:1d:44:5e:c9:
e8:f5:6d:ff:a6:0b:d6:b5:48:15:e6:b7:54:a3:02:c2:e8:3c:
ee:96:68:ec:75:8c:b6:c8:4e:b6:61:60:d6:9f:10:8c:56:1c:
65:75:95:a2:69:75:35:db:ac:fa:f5:41:b2:c5:1b:19:b3:96:
e8:69:fc:0d:b1:4c:0b:bf:74:8a:89:7c:15:f2:46:66:c2:fb:
60:a9:92:66:f2:78:6d:60:08:4e:01:2d:d1:28:c1:30:c9:b5:
ec:13:92:27:a2:15:fe:81:2a:e6:b6:01:76:0c:c0:c7:7a:14:
34:be:1f:25:1e:65:6a:a9:8d:64:ae:d2:8a:c8:d9:56:8a:11:
e3:e1:7f:09:c0:8d:c9:ed:74:44:38:61:3a:d6:0d:61:22:41:
92:30:08:43:56:ed:e1:a7:1f:34:2c:f5:54:20:b7:a6:f4:9d:
89:2d:f0:f0:e5:58:6d:f8:56:9c:97:56:c1:91:f7:03:e6:c1:
a5:56:9f:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TpQHsZSjoRmM9oaaT7ZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZDQyYTA0ODc3MDU2MDYwMTVlNWEzMGRhMWU3MGY0MDdl
NTllOTkwHhcNMjUwMTMxMTcwMDMxWhcNMjUwMjAxMTcwMDMxWjAzMTEwLwYDVQQD
Eyg5ZmI5OGE0MTkwYzg0NzE5Y2UzMjAzNDEzOGYxY2FlM2ExMWNkNzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUaj2uBJz+Mu2oBGXyAHkQsHrd+k
tJOq1hxa1oVfy6TbX2fjTaGm1kroAKr6qo+Dfvy6ro7pShCRnPRS4vIfiVC03tcn
dT4LewGRWaB44O+fAPq9G6jXnJyrvboomKRnhjqX+s+7NYJckgDY+UHeg++VUv9I
gY4b5vnKsTAVpqaV3xAf4kSx2x19LXJ5p5hdTcg+/uia+47Y8N+HnNMqOv4T5oIo
oU6K4mPY+DCdnFAIj8rQ4r75XSpCFopdG5bJAYEGoeMRKyoBq9WKrs/xreSmM5LV
r0Jf7rQDurd/43NXxh/72DjLxEJcNYUSZzNQ/NsmhPOmNGRgDyLGmqtdzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+5ikGQyEcZzjIDQTjxyuOhHNdCMB8GA1UdIwQY
MBaAFD7UKgSHcFYGAV5aMNoecPQH5Z6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHRRcUJJZHdWZ1lCWGxvdzJoNXc5QWZsbnBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mYzkzYjEtMDY0ZS00NGFiLTkwZGEt
ODI2MjUzOWRlNDZmLzEvUHRRcUJJZHdWZ1lCWGxvdzJoNXc5QWZsbnBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9mYzkzYjEtMDY0ZS00NGFiLTkwZGEtODI2MjUzOWRlNDZm
LzEvUHRRcUJJZHdWZ1lCWGxvdzJoNXc5QWZsbnBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX13BRQ0Q
usCK+DLiQZ8Sn2zYuwPnWKvaLFKeh0AyQ6u2iiiDjDwBMDqNNtOMbS4ZttYGnTr0
Q1kWEM8lKvGSyAFr8uUdRF7J6PVt/6YL1rVIFea3VKMCwug87pZo7HWMtshOtmFg
1p8QjFYcZXWVoml1Ndus+vVBssUbGbOW6Gn8DbFMC790iol8FfJGZsL7YKmSZvJ4
bWAITgEt0SjBMMm17BOSJ6IV/oEq5rYBdgzAx3oUNL4fJR5laqmNZK7SisjZVooR
4+F/CcCNye10RDhhOtYNYSJBkjAIQ1bt4acfNCz1VCC3pvSdiS3w8OVYbfhWnJdW
wZH3A+bBpVafoA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:45 2025 by rpki-client