Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier: oNonYvN256H+rA+4hxvyVHqif+SJFRiNY/9oBmztfCc=
Subject key identifier: 36:E5:91:DB:A1:17:7A:23:CF:49:D7:DC:98:83:5F:AE:DC:BA:11:D4
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 0194BC3C172632041D79AA40DBB3C0AAAAE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number: 0FD6
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: YVWuJ6FTMU1uU3iR7ed746pUzUU.roa (hash: oVu2kWcJUFQzXCLu/Vci/BnnMXJVo57f7gbHz7uSAXM=)
2: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: PesbdD5DoxxZ2XhAY3q5PJjFfh6Y3ksuLjp/UnN0MyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:17:26:32:04:1d:79:aa:40:db:b3:c0:aa:aa:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=36e591dba1177a23cf49d7dc98835faedcba11d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:7c:82:3e:71:e3:d5:c7:bf:c0:6f:4c:a3:
0a:4d:1e:78:44:e5:1b:0e:af:e1:2e:92:6a:3d:d3:
f0:1b:ab:ab:9b:02:3a:24:e3:9a:c9:a6:cc:7f:ac:
a8:f2:60:39:87:ce:de:52:9a:25:85:4f:14:c2:4b:
08:bf:b7:ec:b6:c4:a8:6c:41:b4:7f:71:d1:50:35:
a2:88:b5:95:40:9c:ac:ee:3d:04:bd:65:6f:50:c0:
94:0a:ba:8f:b2:37:02:60:21:0f:fb:b8:67:77:68:
e2:b8:53:e8:ac:bf:e9:28:52:de:2d:59:a3:ee:fd:
43:5f:3e:40:29:79:be:86:f0:e3:9c:4c:bd:03:b1:
f1:17:0c:19:92:1e:4a:e3:b0:5a:e5:9a:07:25:e3:
0d:12:20:81:8c:28:a6:06:f0:73:12:06:39:57:c9:
df:63:79:28:76:1e:68:92:20:98:a7:e9:15:95:70:
d5:5f:68:b0:01:5b:31:96:6d:b6:b7:71:cd:ac:43:
ae:90:6c:4a:ce:ed:25:0d:8d:90:fb:40:c5:7b:38:
63:93:c9:b9:7f:7f:e8:43:d1:c0:5a:08:8d:f4:d9:
87:73:bd:2d:7d:96:42:63:e8:51:0d:1c:b7:22:2b:
eb:85:da:0c:a6:8d:f3:a8:34:31:9e:fb:5b:1c:d4:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E5:91:DB:A1:17:7A:23:CF:49:D7:DC:98:83:5F:AE:DC:BA:11:D4
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:44:68:bf:2f:eb:3e:10:76:4d:f7:d3:6e:72:a5:85:07:c6:
e9:18:57:4b:3c:8a:ec:5b:5b:c4:a6:78:b0:fb:af:10:54:6c:
25:81:e1:20:6f:15:39:8d:cc:69:79:db:7a:5f:b2:2f:08:4d:
02:a7:6a:2c:8d:fe:2d:61:19:1d:90:1b:87:41:3f:b5:c1:d2:
47:06:53:9c:6b:86:85:4c:3a:a7:da:0e:5b:d6:05:82:2f:f6:
a2:02:c7:b6:7e:ad:29:23:c7:18:0f:92:3e:97:ac:1e:8f:9d:
ce:5b:8f:df:a0:e4:0c:20:e2:c7:c9:8d:42:97:98:8e:21:60:
fc:4c:a4:b2:62:5e:67:b1:29:92:29:dc:b6:cb:29:7d:eb:82:
5e:3c:e7:54:f9:bb:f4:8e:de:56:9a:ed:1e:32:01:3e:af:bf:
9e:08:82:b6:b7:e0:28:3b:e4:22:08:ec:90:b9:43:c5:a9:f3:
da:ad:c3:01:72:7a:ff:65:ea:65:51:5e:c1:c5:28:c1:60:7f:
66:25:63:7c:8e:46:b5:15:7c:43:8a:2e:d8:32:ac:1d:4c:d7:
5b:8d:cf:f2:15:45:8f:1e:4e:37:3a:25:de:16:9c:cf:20:d7:
fd:16:38:c4:29:e3:2a:e8:c7:fd:d5:e7:e8:8b:7b:04:ce:09:
d3:7d:40:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBcmMgQdeapA27PAqqrjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjE4Zjk2YWFhMDM1NjdmMjJmYzAyYzQyYTY5MzU3MDg2
NTVhYTkwHhcNMjUwMTMxMTIwMDQyWhcNMjUwMjAxMTIwMDQyWjAzMTEwLwYDVQQD
EygzNmU1OTFkYmExMTc3YTIzY2Y0OWQ3ZGM5ODgzNWZhZWRjYmExMWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7d8gj5x49XHv8BvTKMKTR54ROUb
Dq/hLpJqPdPwG6urmwI6JOOayabMf6yo8mA5h87eUpolhU8UwksIv7fstsSobEG0
f3HRUDWiiLWVQJys7j0EvWVvUMCUCrqPsjcCYCEP+7hnd2jiuFPorL/pKFLeLVmj
7v1DXz5AKXm+hvDjnEy9A7HxFwwZkh5K47Ba5ZoHJeMNEiCBjCimBvBzEgY5V8nf
Y3kodh5okiCYp+kVlXDVX2iwAVsxlm22t3HNrEOukGxKzu0lDY2Q+0DFezhjk8m5
f3/oQ9HAWgiN9NmHc70tfZZCY+hRDRy3IivrhdoMpo3zqDQxnvtbHNRiwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDblkduhF3ojz0nX3JiDX67cuhHUMB8GA1UdIwQY
MBaAFKSxj5aqoDVn8i/ALEKmk1cIZVqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ODIwZjktNDQ1OS00ODU4LTk4Y2Ut
YzY5NGYwZWFjYmE2LzEvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82ODIwZjktNDQ1OS00ODU4LTk4Y2UtYzY5NGYwZWFjYmE2
LzEvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHERovy/r
PhB2TffTbnKlhQfG6RhXSzyK7FtbxKZ4sPuvEFRsJYHhIG8VOY3MaXnbel+yLwhN
AqdqLI3+LWEZHZAbh0E/tcHSRwZTnGuGhUw6p9oOW9YFgi/2ogLHtn6tKSPHGA+S
PpesHo+dzluP36DkDCDix8mNQpeYjiFg/EyksmJeZ7EpkinctsspfeuCXjznVPm7
9I7eVprtHjIBPq+/ngiCtrfgKDvkIgjskLlDxanz2q3DAXJ6/2XqZVFewcUowWB/
ZiVjfI5GtRV8Q4ou2DKsHUzXW43P8hVFjx5ONzol3haczyDX/RY4xCnjKujH/dXn
6It7BM4J031AFw==
-----END CERTIFICATE-----
Generated at Thu May 1 09:38:18 2025 by rpki-client