Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
File: PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json)
Hash identifier: 2afesnV0wID0hC62W24F1T80oLccDN04OlFCq3LTOVE=
Subject key identifier: A7:DD:1C:9D:5E:CA:86:9F:94:9D:84:65:CF:59:BE:84:D5:1F:EF:86
Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Certificate serial: 0194BD180B074E85347DC60A64A9A9C7C79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:56 +0000
Manifest this update: Fri 31 Jan 2025 16:00:56 +0000
Manifest next update: Sat 01 Feb 2025 16:00:56 +0000
Files and hashes: 1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: J/gHUfDhuc2LnMVbqV6CldUx+x1vYOqmbwcoSB7yNw0=)
2: rEJUWBjq_sWfsa1cNiXjG-c5ovw.roa (hash: ZZH1S0+UsBnMa9sS+gXeBGEXEb7GWoo4AFZx2+gdykk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:0b:07:4e:85:34:7d:c6:0a:64:a9:a9:c7:c7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Validity
Not Before: Jan 31 16:00:56 2025 GMT
Not After : Feb 1 16:00:56 2025 GMT
Subject: CN=a7dd1c9d5eca869f949d8465cf59be84d51fef86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:a9:b0:9c:0d:1b:fe:09:b8:d8:29:3a:96:
18:3a:8c:4a:42:61:2e:fd:3b:1e:38:9a:f1:34:48:
0d:5c:92:ad:be:72:95:42:af:6d:8c:22:5e:e7:7b:
0e:25:79:5d:30:7b:e2:ae:8c:09:4b:6e:fb:4e:f1:
60:b2:04:92:1e:8e:d7:85:95:84:64:63:31:9c:06:
c6:16:ce:49:70:b7:50:24:b0:45:c2:2b:9f:ce:b4:
f3:26:9c:dc:8f:3a:1f:b1:7c:03:34:d4:8e:34:87:
be:e6:8a:ec:b5:a8:c6:aa:eb:50:44:01:ff:d8:38:
60:db:4d:a1:81:23:a7:ea:68:d7:1b:b2:68:c9:c1:
fd:e9:1a:9b:10:2d:7c:f2:93:e7:39:25:53:6e:9f:
fb:80:a5:f8:fe:fc:d6:45:ff:d1:0b:84:38:2f:d7:
29:65:7e:68:c3:24:f5:7b:a9:cf:9f:85:67:12:34:
9d:d9:ee:86:41:9e:b1:f6:03:b7:0c:cf:67:c9:91:
2f:de:3f:70:8b:71:4d:b0:b2:8f:e1:36:ee:24:86:
08:2e:c1:fe:77:db:62:9c:35:01:4c:0a:1d:44:b9:
f4:c8:b2:41:87:25:42:65:02:eb:e2:c2:5f:fc:4a:
97:d4:da:28:2d:45:0a:46:15:e3:97:5d:0a:d3:42:
46:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DD:1C:9D:5E:CA:86:9F:94:9D:84:65:CF:59:BE:84:D5:1F:EF:86
X509v3 Authority Key Identifier:
keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ae:6f:b9:65:66:0b:e4:74:c3:ef:86:08:ba:6f:12:f6:84:
5a:35:8d:88:a8:08:73:a8:69:f9:6a:59:d2:47:87:84:b3:33:
80:34:ee:8d:87:4b:37:c7:04:91:3d:a8:c9:e1:bf:53:80:e3:
2d:79:7f:42:31:65:02:67:f4:75:48:ec:9d:d8:1e:43:1c:49:
31:1a:e9:1b:97:9e:50:05:b7:2d:aa:3d:58:a7:3c:5c:38:83:
36:9d:92:ac:fb:9e:f2:45:7e:6e:bc:1f:16:e1:7d:06:24:12:
6c:69:b1:f4:1b:06:e3:d5:75:0f:93:73:97:f4:18:cf:40:98:
da:ab:a4:1d:e9:bd:64:62:99:dc:fe:4e:e6:1b:87:64:0d:20:
07:09:b1:b6:42:18:11:af:36:82:7c:87:cd:0b:b8:86:2d:40:
6d:76:44:30:cc:8c:f7:45:5f:81:a4:5d:52:56:c0:92:55:a3:
de:cf:38:c7:91:ca:19:93:05:b1:17:55:2b:8b:d1:26:52:45:
12:29:51:c0:dc:08:b9:06:31:2a:b8:d4:49:70:fb:da:25:dd:
d9:3c:4a:c4:64:01:dd:2f:d2:5b:81:bd:97:c0:e3:96:0a:ef:
6c:c2:11:1b:75:c9:46:bf:e6:74:16:28:19:8c:fa:f9:47:0b:
40:b5:e4:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9GAsHToU0fcYKZKmpx8ebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZmYxZjJiMTE3NWYwNjA1ZDAyNWU1MTAxNzM2OWMxY2E4
YjFhNDYwHhcNMjUwMTMxMTYwMDU2WhcNMjUwMjAxMTYwMDU2WjAzMTEwLwYDVQQD
EyhhN2RkMWM5ZDVlY2E4NjlmOTQ5ZDg0NjVjZjU5YmU4NGQ1MWZlZjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSmpsJwNG/4JuNgpOpYYOoxKQmEu
/TseOJrxNEgNXJKtvnKVQq9tjCJe53sOJXldMHvirowJS277TvFgsgSSHo7XhZWE
ZGMxnAbGFs5JcLdQJLBFwiufzrTzJpzcjzofsXwDNNSONIe+5orstajGqutQRAH/
2Dhg202hgSOn6mjXG7JoycH96RqbEC188pPnOSVTbp/7gKX4/vzWRf/RC4Q4L9cp
ZX5owyT1e6nPn4VnEjSd2e6GQZ6x9gO3DM9nyZEv3j9wi3FNsLKP4TbuJIYILsH+
d9tinDUBTAodRLn0yLJBhyVCZQLr4sJf/EqX1NooLUUKRhXjl10K00JGnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfdHJ1eyoaflJ2EZc9ZvoTVH++GMB8GA1UdIwQY
MBaAFDz/HysRdfBgXQJeUQFzacHKixpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFA4Zkt4RjE4R0JkQWw1UkFYTnB3Y3FMR2tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYzc5NDktYTFjYS00N2Y0LWIzOTMt
MmJmMzRjNTI2MmU3LzEvUFA4Zkt4RjE4R0JkQWw1UkFYTnB3Y3FMR2tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hYzc5NDktYTFjYS00N2Y0LWIzOTMtMmJmMzRjNTI2MmU3
LzEvUFA4Zkt4RjE4R0JkQWw1UkFYTnB3Y3FMR2tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV65vuWVm
C+R0w++GCLpvEvaEWjWNiKgIc6hp+WpZ0keHhLMzgDTujYdLN8cEkT2oyeG/U4Dj
LXl/QjFlAmf0dUjsndgeQxxJMRrpG5eeUAW3Lao9WKc8XDiDNp2SrPue8kV+brwf
FuF9BiQSbGmx9BsG49V1D5Nzl/QYz0CY2qukHem9ZGKZ3P5O5huHZA0gBwmxtkIY
Ea82gnyHzQu4hi1AbXZEMMyM90VfgaRdUlbAklWj3s84x5HKGZMFsRdVK4vRJlJF
EilRwNwIuQYxKrjUSXD72iXd2TxKxGQB3S/SW4G9l8DjlgrvbMIRG3XJRr/mdBYo
GYz6+UcLQLXkSw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:32 2025 by rpki-client