Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier: GoEZ/KLqLWKR7qw7QpzZMEZeVy6/ykqKUl6RxiYCWg0=
Subject key identifier: E2:91:3C:44:B1:AA:00:C8:6C:A1:FB:83:47:DC:DA:D7:C8:B7:D1:90
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 0195E15A291403680117274A8670E1A666FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number: 14DA
Signing time: Sat 29 Mar 2025 10:02:17 +0000
Manifest this update: Sat 29 Mar 2025 10:02:17 +0000
Manifest next update: Sun 30 Mar 2025 10:02:17 +0000
Files and hashes: 1: oTERYQxbfcdAepRJdL-H3PXCPnk.roa (hash: BUX480Cq0/FWcz+EdrT0tY5q1vVSAi6pm1ula8qFGn4=)
2: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: 6y/qFCXi9VAC9aBbSkFQwoi9hEPjg0WkClIPhjmKhME=)
3: wsY5k4qqG0xYHV0_JKKO-MLN1Lc.roa (hash: f/706SBS64fiaR4N+7m+WUBpo55cQMTVv5UqqvUPZQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:29:14:03:68:01:17:27:4a:86:70:e1:a6:66:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Mar 29 10:02:17 2025 GMT
Not After : Mar 30 10:02:17 2025 GMT
Subject: CN=e2913c44b1aa00c86ca1fb8347dcdad7c8b7d190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:45:e6:09:35:11:e6:61:b5:07:a3:60:ef:cf:
e8:c2:b5:e2:d8:59:0f:ae:c5:e2:6a:95:d9:88:1c:
3e:f8:b3:70:f8:c4:be:88:5c:94:fd:f8:ce:6c:32:
c8:28:ad:19:bb:d9:e1:22:74:7d:8e:e2:6b:80:0a:
e9:2c:7f:bf:98:a1:3b:e8:2e:19:39:c4:41:09:56:
02:7c:dd:68:9e:a3:5f:a6:84:b3:cd:28:b3:aa:ff:
53:ba:ae:2f:01:8b:2b:52:db:79:10:21:10:e0:b2:
e9:6f:ae:0a:80:d8:12:3d:4b:57:8c:04:3b:a2:2e:
66:d7:58:8e:d0:02:56:69:a6:6d:ff:4a:2b:98:41:
02:44:a5:92:43:a7:2c:bd:b9:cf:f2:36:31:87:d7:
70:ac:09:8d:d4:13:8f:0d:7e:41:02:b9:ea:27:7b:
c8:24:48:8a:14:7e:60:5b:ce:38:48:34:a1:fe:e2:
60:80:15:9a:21:ff:b2:1d:ce:21:1e:77:e3:fd:e5:
3a:1f:ac:74:94:fa:05:8d:b4:e4:45:48:34:ff:3d:
7e:96:b2:10:f0:f7:9c:f9:0b:33:34:5b:fe:ed:ff:
8c:9c:fa:36:c4:88:0f:9c:6b:de:52:8b:08:e2:68:
4c:b8:12:c7:e0:16:65:51:83:c2:f5:28:3e:47:5c:
71:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:91:3C:44:B1:AA:00:C8:6C:A1:FB:83:47:DC:DA:D7:C8:B7:D1:90
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:87:ff:ad:4f:51:d6:99:ad:47:f4:9a:3e:37:5e:2d:d0:36:
64:9a:d9:70:04:9e:9c:96:2c:bc:42:87:bd:2e:de:75:ac:f0:
a4:94:2f:79:aa:d4:bc:be:2e:39:af:4c:9f:f8:da:9f:c6:7e:
a0:d6:40:eb:ec:3e:24:ec:82:64:73:e8:88:ac:b8:7a:fb:ba:
d5:3c:ef:dc:e9:01:37:a9:67:31:f8:cf:e3:fc:9f:ea:6c:0b:
d0:3f:14:52:d9:d5:ef:8a:b2:d5:f1:ba:98:97:ed:18:4e:ae:
e3:1e:9b:b3:99:10:95:7d:7d:a2:c9:c5:46:6d:6d:eb:13:05:
54:25:7b:90:b7:90:ec:22:17:66:51:98:60:5e:73:0f:c2:ff:
19:61:32:ec:ad:a5:82:d8:fb:16:a6:ad:0f:c5:f1:dd:25:04:
8d:fc:9f:6f:40:28:31:22:29:4f:21:e4:20:c2:10:94:07:51:
8a:6a:63:22:35:55:81:88:e3:cf:f5:37:31:dd:65:dc:c1:97:
86:67:d9:8c:0f:fe:d4:3c:29:13:17:50:ad:04:31:1a:7a:05:
70:08:a0:34:2b:ba:5b:ee:97:ed:63:fb:b0:70:3d:0d:72:fc:
47:29:91:ca:da:c0:65:7a:c3:ec:7f:d8:b8:70:63:6c:71:9e:
f9:72:8b:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWikUA2gBFydKhnDhpmb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWM0ZTBjZjVjOGRiYmI2YTY3Y2YxZGEyZjMxZjQxNjI3
NDlmZGQwHhcNMjUwMzI5MTAwMjE3WhcNMjUwMzMwMTAwMjE3WjAzMTEwLwYDVQQD
EyhlMjkxM2M0NGIxYWEwMGM4NmNhMWZiODM0N2RjZGFkN2M4YjdkMTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkXmCTUR5mG1B6Ng78/owrXi2FkP
rsXiapXZiBw++LNw+MS+iFyU/fjObDLIKK0Zu9nhInR9juJrgArpLH+/mKE76C4Z
OcRBCVYCfN1onqNfpoSzzSizqv9Tuq4vAYsrUtt5ECEQ4LLpb64KgNgSPUtXjAQ7
oi5m11iO0AJWaaZt/0ormEECRKWSQ6csvbnP8jYxh9dwrAmN1BOPDX5BArnqJ3vI
JEiKFH5gW844SDSh/uJggBWaIf+yHc4hHnfj/eU6H6x0lPoFjbTkRUg0/z1+lrIQ
8Pec+QszNFv+7f+MnPo2xIgPnGveUosI4mhMuBLH4BZlUYPC9Sg+R1xxQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKRPESxqgDIbKH7g0fc2tfIt9GQMB8GA1UdIwQY
MBaAFKScTgz1yNu7amfPHaLzH0FidJ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMt
ODhlZDhkNzcxN2E0LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMtODhlZDhkNzcxN2E0
LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYf/rU9R
1pmtR/SaPjdeLdA2ZJrZcASenJYsvEKHvS7edazwpJQvearUvL4uOa9Mn/jan8Z+
oNZA6+w+JOyCZHPoiKy4evu61Tzv3OkBN6lnMfjP4/yf6mwL0D8UUtnV74qy1fG6
mJftGE6u4x6bs5kQlX19osnFRm1t6xMFVCV7kLeQ7CIXZlGYYF5zD8L/GWEy7K2l
gtj7FqatD8Xx3SUEjfyfb0AoMSIpTyHkIMIQlAdRimpjIjVVgYjjz/U3Md1l3MGX
hmfZjA/+1DwpExdQrQQxGnoFcAigNCu6W+6X7WP7sHA9DXL8RymRytrAZXrD7H/Y
uHBjbHGe+XKL2w==
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:06:46 2025 by rpki-client