Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
File: P5YkCZj85BJMPLTfusuw7RYYQFo.mft (raw, json)
Hash identifier: pVU/hGXxn8pyiA//JaM3uxuYTrXmfYUpjBusGWMSJq0=
Subject key identifier: 6B:8D:66:84:DE:3D:03:17:A1:41:58:7C:96:31:E7:54:03:EE:AA:76
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Certificate issuer: /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial: 0194BD1763A734E6DA8F17E0A2A707117AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: P5YkCZj85BJMPLTfusuw7RYYQFo.crl (hash: 870iezbcXN1cR3uWAdouN9t0eerWmVgGSCuC9jNQI5A=)
2: UXaxt-b39pINfZ1Y1ojLfS7SwMw.roa (hash: IC6xINcQpVjUgVum+7114aRM3S8XEivwvk3gYzMafvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:63:a7:34:e6:da:8f:17:e0:a2:a7:07:11:7a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=6b8d6684de3d0317a141587c9631e75403eeaa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:27:0b:c2:e0:dc:04:8c:f3:b4:93:25:98:
12:84:9e:be:0d:76:40:65:17:bc:0c:32:5f:95:0f:
d6:30:e6:a5:e8:04:6b:ce:3e:fa:f8:72:d3:00:dc:
ab:7f:0f:d2:ce:4b:29:04:58:50:bc:93:a5:ba:4b:
11:74:f4:db:16:84:1c:55:3d:f5:f5:27:c0:da:db:
57:aa:a9:c7:3e:c5:0c:cd:5a:24:d8:42:24:26:fc:
17:46:5f:4c:28:3f:f1:0b:d7:f3:26:ed:df:87:2b:
dc:60:10:cb:bc:07:a7:27:b4:56:da:47:18:a7:c8:
9d:ae:e0:05:f3:ae:c9:d8:04:d3:9b:e2:b1:43:eb:
e8:4e:89:44:ad:4e:0c:18:e6:bb:78:4b:fc:83:8a:
8c:9f:f2:83:4e:5e:9f:6a:ae:4c:cc:00:9c:e8:16:
61:16:05:b2:92:70:12:96:88:1c:f8:13:01:fe:14:
78:11:97:94:d8:cf:ed:97:f5:c3:51:a7:05:3d:60:
c4:c0:39:45:9d:ba:42:27:90:16:eb:fd:c6:38:4e:
84:20:40:ac:9c:5f:b4:db:6f:73:34:39:f2:0f:88:
7a:37:90:17:1d:bd:a7:1b:b0:ab:f9:d1:b0:4b:2b:
95:cb:23:bb:90:3c:5e:fd:b8:27:fa:c8:3c:65:b9:
19:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8D:66:84:DE:3D:03:17:A1:41:58:7C:96:31:E7:54:03:EE:AA:76
X509v3 Authority Key Identifier:
keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4d:d4:8b:b5:5a:12:83:1f:63:ba:ed:22:69:28:83:38:3f:
70:46:87:21:a3:7c:eb:30:2f:04:c0:4c:00:31:b7:9b:54:52:
2b:89:b1:39:b9:87:64:58:af:2e:d8:ba:60:bc:19:af:32:e4:
38:ee:66:22:87:63:a5:3c:c9:30:69:20:dd:55:f0:d3:a3:8d:
a9:ed:36:5d:9a:96:fd:0a:0b:36:44:08:ec:73:e7:26:b0:37:
9e:b8:cd:f7:20:d4:03:2b:d2:6f:91:72:2f:75:35:3d:8d:cd:
00:1f:67:94:6c:7e:11:71:86:9c:e4:a2:e3:24:5f:31:49:08:
60:93:76:d1:37:38:3d:87:c0:0d:28:2c:c9:19:e2:21:7b:07:
b5:60:c5:fe:c5:c5:2d:ee:60:18:dc:3c:93:b5:1c:ba:7b:a0:
42:12:cc:2a:3c:da:27:38:88:42:e0:48:ff:0c:5d:be:dd:7e:
3e:38:d2:1b:09:68:e0:36:9e:9f:59:51:2e:ac:dc:ac:d9:48:
a1:00:0a:b1:13:4e:2f:d1:6e:af:7a:1d:50:07:25:6c:bd:7c:
31:8a:6f:ff:b7:0c:e6:17:ea:b8:65:e4:4f:90:b6:10:91:32:
24:05:f5:49:3a:e9:ef:a4:86:af:ca:fd:dd:5a:68:c9:36:a1:
2e:2f:51:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2OnNObajxfgoqcHEXrhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOTYyNDA5OThmY2U0MTI0YzNjYjRkZmJhY2JiMGVkMTYx
ODQwNWEwHhcNMjUwMTMxMTYwMDE0WhcNMjUwMjAxMTYwMDE0WjAzMTEwLwYDVQQD
Eyg2YjhkNjY4NGRlM2QwMzE3YTE0MTU4N2M5NjMxZTc1NDAzZWVhYTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuonC8Lg3ASM87STJZgShJ6+DXZA
ZRe8DDJflQ/WMOal6ARrzj76+HLTANyrfw/SzkspBFhQvJOluksRdPTbFoQcVT31
9SfA2ttXqqnHPsUMzVok2EIkJvwXRl9MKD/xC9fzJu3fhyvcYBDLvAenJ7RW2kcY
p8idruAF867J2ATTm+KxQ+voTolErU4MGOa7eEv8g4qMn/KDTl6faq5MzACc6BZh
FgWyknASlogc+BMB/hR4EZeU2M/tl/XDUacFPWDEwDlFnbpCJ5AW6/3GOE6EIECs
nF+0229zNDnyD4h6N5AXHb2nG7Cr+dGwSyuVyyO7kDxe/bgn+sg8ZbkZvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuNZoTePQMXoUFYfJYx51QD7qp2MB8GA1UdIwQY
MBaAFD+WJAmY/OQSTDy037rLsO0WGEBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVZa0Naajg1QkpNUExUZnVzdXc3UllZUUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MGZlYzctMGI1MS00NDQ2LTliNWQt
Yzc0MWMyN2I0ZTIyLzEvUDVZa0Naajg1QkpNUExUZnVzdXc3UllZUUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82MGZlYzctMGI1MS00NDQ2LTliNWQtYzc0MWMyN2I0ZTIy
LzEvUDVZa0Naajg1QkpNUExUZnVzdXc3UllZUUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaE3Ui7Va
EoMfY7rtImkogzg/cEaHIaN86zAvBMBMADG3m1RSK4mxObmHZFivLti6YLwZrzLk
OO5mIodjpTzJMGkg3VXw06ONqe02XZqW/QoLNkQI7HPnJrA3nrjN9yDUAyvSb5Fy
L3U1PY3NAB9nlGx+EXGGnOSi4yRfMUkIYJN20Tc4PYfADSgsyRniIXsHtWDF/sXF
Le5gGNw8k7UcunugQhLMKjzaJziIQuBI/wxdvt1+PjjSGwlo4Daen1lRLqzcrNlI
oQAKsRNOL9Fur3odUAclbL18MYpv/7cM5hfquGXkT5C2EJEyJAX1STrp76SGr8r9
3VpoyTahLi9RtA==
-----END CERTIFICATE-----
Generated at Fri May 2 20:07:05 2025 by rpki-client