Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
File: PkJOJFpkMkpocx3SbzDGhbqopng.mft (raw, json)
Hash identifier: Oe1LpYYFUyS7RvWLlpxqSLhshWrUSED+vX+K5knks/E=
Subject key identifier: 42:0B:E7:0C:35:D7:19:A8:77:54:AA:69:4C:7A:43:C7:73:EA:D4:BB
Authority key identifier: 3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78
Certificate issuer: /CN=3e424e245a64324a68731dd26f30c685baa8a678
Certificate serial: 0194BC04D47DA6168E7A95FEEC0E7F2645C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: 9BKbZIRd9-X7DwnbmN0tiFBfwDk.roa (hash: sc6ZIVElHs/p3IrdFGLfeuXuK5hZseBYNoiFQsWbBIY=)
2: PkJOJFpkMkpocx3SbzDGhbqopng.crl (hash: yX/9Z8W+w2f0Y/1Zmrf64OmRDB2yIP5D3TES7bDr9Ak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d4:7d:a6:16:8e:7a:95:fe:ec:0e:7f:26:45:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e424e245a64324a68731dd26f30c685baa8a678
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=420be70c35d719a87754aa694c7a43c773ead4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0b:23:22:5a:ad:33:44:f1:64:f3:61:f6:1e:
fc:ae:2f:c2:39:ad:4e:3d:0d:29:99:2d:fb:3e:43:
23:ad:f8:e2:3e:83:6f:6c:4c:e8:1a:43:45:71:b5:
42:b1:96:23:5f:ef:6b:0c:93:2c:23:43:13:4c:51:
4a:d6:39:a2:67:66:a4:4b:72:a6:50:c9:77:11:4c:
bd:60:9c:eb:76:3e:f7:0c:02:dc:03:c7:b8:7b:38:
24:c6:08:fe:19:9d:ac:dd:36:b3:f7:da:de:bb:e5:
cd:bd:7b:12:51:7e:5f:6d:71:38:d2:ac:e7:7c:35:
68:d9:14:c9:7a:89:7c:51:d1:68:23:fa:9b:6d:3c:
db:28:26:01:2f:d5:01:48:58:15:8a:5e:61:e4:84:
62:80:ac:b1:c0:cd:44:3a:59:c0:d4:f1:d3:51:07:
89:ba:a7:37:98:ed:8b:18:3f:4b:64:5c:f9:11:90:
16:ef:0a:3e:36:ad:02:d7:f7:39:17:82:ab:31:c6:
b1:e8:3c:6c:e4:3e:a4:d7:52:d4:d6:e1:b5:8b:ab:
20:46:21:5b:eb:cb:3c:e2:33:15:64:4e:d1:a8:f2:
2b:3a:09:36:01:b3:2c:3a:db:10:0d:b9:4b:4b:ab:
80:58:8a:10:95:25:2e:d2:db:49:f1:40:fd:ea:92:
12:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0B:E7:0C:35:D7:19:A8:77:54:AA:69:4C:7A:43:C7:73:EA:D4:BB
X509v3 Authority Key Identifier:
keyid:3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c9:a1:8e:26:91:d0:64:06:9f:44:74:fc:30:21:4a:69:16:
84:5f:d1:f5:25:74:4e:20:a7:f0:fc:ab:c7:83:e6:3f:93:71:
e7:01:e2:19:9c:75:b9:bb:38:76:d5:25:96:a4:ba:fe:34:ef:
58:92:83:7d:21:65:f9:20:7f:0b:21:bb:79:30:13:ce:fc:e1:
77:68:ae:7f:53:05:5a:0d:95:1c:ae:ae:d9:96:05:38:ee:18:
7f:8e:3c:db:ac:0c:58:c4:ec:1d:1a:1b:aa:86:df:94:d9:14:
03:8c:97:d1:f9:a9:7d:1a:96:78:8b:bb:0e:94:9c:26:96:21:
9f:84:07:05:17:3e:bf:3f:1a:59:54:16:4e:19:e6:33:ae:a0:
eb:93:bf:18:a9:ef:dd:ee:7d:d3:e4:6c:b5:14:32:cf:37:f0:
15:55:99:0a:0f:4b:91:d6:19:86:cf:8b:7a:68:6e:5c:a7:ff:
27:06:1a:fb:7c:ff:26:82:a8:86:36:66:63:3c:e0:2b:28:2f:
4c:d7:81:16:33:25:4f:d9:2a:19:7f:ae:2f:f4:86:a6:b3:cd:
d8:15:47:75:40:e5:a8:55:d0:90:57:10:76:72:c8:24:ea:dd:
53:9f:c5:0c:14:18:57:b5:e8:65:c0:b2:00:2d:c6:bc:ab:63:
78:b4:f0:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BNR9phaOepX+7A5/JkXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNDI0ZTI0NWE2NDMyNGE2ODczMWRkMjZmMzBjNjg1YmFh
OGE2NzgwHhcNMjUwMTMxMTEwMDIwWhcNMjUwMjAxMTEwMDIwWjAzMTEwLwYDVQQD
Eyg0MjBiZTcwYzM1ZDcxOWE4Nzc1NGFhNjk0YzdhNDNjNzczZWFkNGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9gsjIlqtM0TxZPNh9h78ri/COa1O
PQ0pmS37PkMjrfjiPoNvbEzoGkNFcbVCsZYjX+9rDJMsI0MTTFFK1jmiZ2akS3Km
UMl3EUy9YJzrdj73DALcA8e4ezgkxgj+GZ2s3Taz99reu+XNvXsSUX5fbXE40qzn
fDVo2RTJeol8UdFoI/qbbTzbKCYBL9UBSFgVil5h5IRigKyxwM1EOlnA1PHTUQeJ
uqc3mO2LGD9LZFz5EZAW7wo+Nq0C1/c5F4KrMcax6Dxs5D6k11LU1uG1i6sgRiFb
68s84jMVZE7RqPIrOgk2AbMsOtsQDblLS6uAWIoQlSUu0ttJ8UD96pISQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIL5ww11xmod1SqaUx6Q8dz6tS7MB8GA1UdIwQY
MBaAFD5CTiRaZDJKaHMd0m8wxoW6qKZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGtKT0pGcGtNa3BvY3gzU2J6REdoYnFvcG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMDAyYzEtMDBiYy00MzA4LWI1NWQt
NTRkYTA0NjhmZGFkLzEvUGtKT0pGcGtNa3BvY3gzU2J6REdoYnFvcG5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMDAyYzEtMDBiYy00MzA4LWI1NWQtNTRkYTA0NjhmZGFk
LzEvUGtKT0pGcGtNa3BvY3gzU2J6REdoYnFvcG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsmhjiaR
0GQGn0R0/DAhSmkWhF/R9SV0TiCn8Pyrx4PmP5Nx5wHiGZx1ubs4dtUllqS6/jTv
WJKDfSFl+SB/CyG7eTATzvzhd2iuf1MFWg2VHK6u2ZYFOO4Yf44826wMWMTsHRob
qobflNkUA4yX0fmpfRqWeIu7DpScJpYhn4QHBRc+vz8aWVQWThnmM66g65O/GKnv
3e590+RstRQyzzfwFVWZCg9LkdYZhs+LemhuXKf/JwYa+3z/JoKohjZmYzzgKygv
TNeBFjMlT9kqGX+uL/SGprPN2BVHdUDlqFXQkFcQdnLIJOrdU5/FDBQYV7XoZcCy
AC3GvKtjeLTwVw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:12:33 2025 by rpki-client