Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier: I/SwUGlPT/JKEd3jdGXR2jDgx99MeIxs+JU4wPr3pEY=
Subject key identifier: 17:C6:8C:E0:4C:30:F3:62:F4:8B:1F:02:6B:B5:44:E9:34:D9:AC:C6
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 0194BBCEDDBB8BA46888C69D54E51E8F0EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number: 1398
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: aL3drI8Ddinye4RDauV43zfeXIb+6bis0DdDMuC3SmU=)
2: qcINREJGIFWN3YXOgtNuqjCBfnY.roa (hash: 1gG5XU0DGFtKFXRvNOA96XCA/EPC9XB/rEykj9F+ocs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:dd:bb:8b:a4:68:88:c6:9d:54:e5:1e:8f:0e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=17c68ce04c30f362f48b1f026bb544e934d9acc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:fc:63:4b:e5:41:0f:d6:bd:06:1b:f6:42:
54:db:a5:e2:3e:5d:f4:2c:14:30:ef:ef:b5:f0:24:
1b:0f:15:90:35:b7:b1:c2:8b:db:2e:ec:56:f0:b9:
da:50:e8:fc:81:d2:4b:6a:5e:95:16:e9:f1:01:4d:
61:25:24:36:61:04:a1:4e:6c:3f:da:08:6e:0e:fd:
3c:01:5a:83:c6:91:ea:44:3c:de:cf:8a:02:4a:f9:
41:43:bf:8e:a8:16:c9:1a:fa:10:df:c4:8d:d6:9a:
dc:a4:af:32:95:24:e7:5c:7c:43:ea:8b:3f:4d:60:
72:2d:50:39:81:cb:14:73:89:d3:03:e7:73:f0:72:
61:12:4a:3e:21:04:8a:2d:27:25:b1:1a:73:f4:cc:
61:5f:f5:db:60:6c:55:83:b2:66:53:da:a4:9d:cb:
29:5c:9b:00:1a:78:0d:ff:a9:bf:9a:48:69:03:3f:
94:7f:bf:66:b8:19:72:a8:46:73:2c:78:71:6a:37:
06:f3:40:38:70:43:c7:60:d2:2e:1d:f3:c5:89:b9:
fb:f6:f9:d9:ad:de:ed:e8:3d:8f:36:5e:ab:2d:83:
5f:1c:d7:a2:52:7d:8e:62:88:09:6b:c3:8a:23:da:
86:07:1a:55:e5:76:70:bf:fb:2f:83:d6:df:6c:b6:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C6:8C:E0:4C:30:F3:62:F4:8B:1F:02:6B:B5:44:E9:34:D9:AC:C6
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ef:2a:33:ec:c6:94:4a:fb:50:09:3f:7e:2f:4f:86:54:ec:
c6:48:52:40:1e:ae:44:ca:c1:d8:26:6e:f7:af:ae:15:1f:d4:
24:18:f3:f6:5c:a9:03:8f:0f:ad:00:69:e4:2f:13:28:1b:75:
35:41:a2:7f:a2:8a:35:cd:60:26:99:d2:34:b0:ba:49:46:e4:
13:80:93:d3:de:66:d1:ec:54:59:c9:4e:98:4f:6d:37:6e:3f:
63:62:8c:7b:50:e2:34:f0:91:71:95:fd:bd:8f:cc:1c:72:92:
d1:27:5b:c7:f4:56:a2:42:3e:a7:d6:4f:99:58:b0:b9:e2:5e:
08:3a:4c:c2:8c:94:3a:1a:7c:57:a3:11:d5:36:75:97:37:97:
83:a7:4c:b1:3a:90:8e:0b:dd:08:9a:a9:ce:76:e3:f8:b9:d6:
4a:78:7e:f3:2d:40:2a:42:17:6d:59:fd:84:83:7c:22:7d:d8:
1b:ea:a8:03:2b:55:6c:89:e0:36:0f:5f:73:5b:cc:d4:ea:49:
09:97:88:3c:47:f1:5a:c8:59:8f:f0:69:50:e7:1e:be:1f:cd:
40:b9:fa:26:da:46:69:04:3e:45:00:43:1a:e2:e8:93:4f:72:
02:db:3b:9a:6b:f6:71:b4:85:68:9c:91:ad:19:be:71:96:75:
fa:7c:7b:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zt27i6RoiMadVOUejw7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNzBmZTFkNzVmN2RhNzZkMmUzZGMzNDRmYjFmMGIwYjY5
ZGUwMDEwHhcNMjUwMTMxMTAwMTIzWhcNMjUwMjAxMTAwMTIzWjAzMTEwLwYDVQQD
EygxN2M2OGNlMDRjMzBmMzYyZjQ4YjFmMDI2YmI1NDRlOTM0ZDlhY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRj8Y0vlQQ/WvQYb9kJU26XiPl30
LBQw7++18CQbDxWQNbexwovbLuxW8LnaUOj8gdJLal6VFunxAU1hJSQ2YQShTmw/
2ghuDv08AVqDxpHqRDzez4oCSvlBQ7+OqBbJGvoQ38SN1prcpK8ylSTnXHxD6os/
TWByLVA5gcsUc4nTA+dz8HJhEko+IQSKLSclsRpz9MxhX/XbYGxVg7JmU9qkncsp
XJsAGngN/6m/mkhpAz+Uf79muBlyqEZzLHhxajcG80A4cEPHYNIuHfPFibn79vnZ
rd7t6D2PNl6rLYNfHNeiUn2OYogJa8OKI9qGBxpV5XZwv/svg9bfbLblWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfGjOBMMPNi9IsfAmu1ROk02azGMB8GA1UdIwQY
MBaAFD1w/h1199p20uPcNE+x8LC2neABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yNDU2ZTUtNjFkZC00YWUzLWEyNGYt
Yjg1MmJkODEyM2YwLzEvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yNDU2ZTUtNjFkZC00YWUzLWEyNGYtYjg1MmJkODEyM2Yw
LzEvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXu8qM+zG
lEr7UAk/fi9PhlTsxkhSQB6uRMrB2CZu96+uFR/UJBjz9lypA48PrQBp5C8TKBt1
NUGif6KKNc1gJpnSNLC6SUbkE4CT095m0exUWclOmE9tN24/Y2KMe1DiNPCRcZX9
vY/MHHKS0Sdbx/RWokI+p9ZPmViwueJeCDpMwoyUOhp8V6MR1TZ1lzeXg6dMsTqQ
jgvdCJqpznbj+LnWSnh+8y1AKkIXbVn9hIN8In3YG+qoAytVbIngNg9fc1vM1OpJ
CZeIPEfxWshZj/BpUOcevh/NQLn6JtpGaQQ+RQBDGuLok09yAts7mmv2cbSFaJyR
rRm+cZZ1+nx7+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:43 2025 by rpki-client