Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3170e-715c-4c40-ac3d-9ae0feaf9939/1/PQZltmdodaz2DgFSK5NDwECl_-E.mft
File: PQZltmdodaz2DgFSK5NDwECl_-E.mft (raw, json)
Hash identifier: rGBK/yBgIwGzi8+rfLX3YmIMLPr13obBzXhFJHcV+dM=
Subject key identifier: F9:5F:D7:56:27:1F:D0:AF:DA:5D:38:5C:37:05:B3:4B:60:EE:15:CF
Authority key identifier: 3D:06:65:B6:67:68:75:AC:F6:0E:01:52:2B:93:43:C0:40:A5:FF:E1
Certificate issuer: /CN=3d0665b6676875acf60e01522b9343c040a5ffe1
Certificate serial: 0193BDBF54CE1E099F2517C3100E3FA05DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQZltmdodaz2DgFSK5NDwECl_-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3170e-715c-4c40-ac3d-9ae0feaf9939/1/PQZltmdodaz2DgFSK5NDwECl_-E.mft
Manifest number: 0BF2
Signing time: Fri 13 Dec 2024 02:00:53 +0000
Manifest this update: Fri 13 Dec 2024 02:00:53 +0000
Manifest next update: Sat 14 Dec 2024 02:00:53 +0000
Files and hashes: 1: PQZltmdodaz2DgFSK5NDwECl_-E.crl (hash: k7xMvFoiE9vXIXRoCnPqu5t0IG2UcaVV49aZyEoKzCo=)
2: bTX62tRbx1Gf91_afHejNDmclKo.roa (hash: Va+985nWQRGZqHpBs1nlUPddfPJ3MCFDNSeVnonBTrc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bd:bf:54:ce:1e:09:9f:25:17:c3:10:0e:3f:a0:5d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0665b6676875acf60e01522b9343c040a5ffe1
Validity
Not Before: Dec 13 02:00:53 2024 GMT
Not After : Dec 14 02:00:53 2024 GMT
Subject: CN=f95fd756271fd0afda5d385c3705b34b60ee15cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:d2:a4:f3:0e:49:58:4f:21:a8:2e:e2:40:
9d:f8:1a:0c:0c:52:e5:b8:9d:18:d9:f6:cc:1a:31:
36:9d:4b:ac:6a:f5:ea:a9:04:03:53:11:38:31:93:
b2:62:67:aa:1e:07:c3:82:f8:90:89:3d:0a:d6:ff:
f7:a1:f8:fc:82:2b:bc:3f:9c:ee:4a:c6:8d:74:13:
8e:ff:a2:e7:47:41:25:91:3d:69:9c:dc:01:1a:55:
76:dd:42:04:cd:1f:cb:4d:2d:72:03:19:b0:53:a8:
6b:67:af:b7:65:a9:51:c5:b4:c1:bb:b2:ed:61:b0:
d2:af:33:ad:ce:73:0f:0d:97:ae:e5:fe:d3:23:c8:
de:57:cd:ca:c8:4d:e0:44:3c:10:41:37:25:a2:5f:
11:8f:a0:b0:aa:77:27:22:a3:f6:00:f5:14:bf:30:
2f:0a:dc:b3:46:56:fd:b8:26:8d:09:f1:38:98:33:
41:00:27:6b:f8:b0:6b:9d:18:eb:2c:95:c1:98:d7:
4f:c6:f9:5b:bc:4a:b6:cc:be:56:a3:0b:b5:1c:4a:
4b:32:9a:b5:82:64:c1:de:bc:b8:a5:eb:50:f1:09:
e4:cf:ac:33:19:8a:e7:1a:81:bd:a6:c8:0b:f1:04:
9f:8c:af:47:25:e6:fd:7c:a4:21:a0:f9:2c:2e:a8:
7d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5F:D7:56:27:1F:D0:AF:DA:5D:38:5C:37:05:B3:4B:60:EE:15:CF
X509v3 Authority Key Identifier:
keyid:3D:06:65:B6:67:68:75:AC:F6:0E:01:52:2B:93:43:C0:40:A5:FF:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQZltmdodaz2DgFSK5NDwECl_-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3170e-715c-4c40-ac3d-9ae0feaf9939/1/PQZltmdodaz2DgFSK5NDwECl_-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3170e-715c-4c40-ac3d-9ae0feaf9939/1/PQZltmdodaz2DgFSK5NDwECl_-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:28:67:9d:e9:e4:ed:f8:95:67:3b:60:9f:d1:85:3e:0a:0f:
6e:78:7c:98:2b:8e:c9:a1:55:32:78:97:62:e1:49:ba:b3:e8:
76:a1:8c:63:b6:29:b6:62:13:d3:8e:44:ee:15:5e:28:0f:fd:
42:bf:18:8b:a6:9d:b5:17:b3:63:f2:01:6f:fa:4c:0d:99:88:
c1:d1:6b:04:9d:08:55:7f:86:87:b3:22:4e:44:75:db:24:bf:
fc:36:71:b3:5b:67:6b:f4:2e:da:2f:2f:98:e3:43:ec:28:13:
50:de:c4:6f:d0:c8:f0:85:91:1f:cd:eb:33:18:ce:17:97:a0:
9f:c5:a7:e2:b1:bc:d6:2b:8a:08:43:5b:64:78:d4:8d:82:f5:
53:d5:f7:23:45:d3:f1:60:6d:8d:c6:69:0f:53:e3:f5:a2:f5:
48:71:91:1d:93:8d:9b:70:18:57:cf:e6:93:90:44:26:15:07:
1c:fb:5c:a6:6a:64:17:de:e5:14:8d:4a:e0:d1:9b:93:ea:25:
bd:93:bc:fd:04:26:c7:9c:e1:4e:42:45:ef:56:a2:b7:9e:a1:
b0:8c:8f:23:82:d0:a5:8e:59:b0:32:f9:5c:87:c3:f1:d5:97:
a4:7e:24:68:90:9c:82:80:ff:db:96:f6:14:b8:2b:d9:e3:aa:
fa:da:e1:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZO9v1TOHgmfJRfDEA4/oF2uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMDY2NWI2Njc2ODc1YWNmNjBlMDE1MjJiOTM0M2MwNDBh
NWZmZTEwHhcNMjQxMjEzMDIwMDUzWhcNMjQxMjE0MDIwMDUzWjAzMTEwLwYDVQQD
EyhmOTVmZDc1NjI3MWZkMGFmZGE1ZDM4NWMzNzA1YjM0YjYwZWUxNWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYjSpPMOSVhPIagu4kCd+BoMDFLl
uJ0Y2fbMGjE2nUusavXqqQQDUxE4MZOyYmeqHgfDgviQiT0K1v/3ofj8giu8P5zu
SsaNdBOO/6LnR0ElkT1pnNwBGlV23UIEzR/LTS1yAxmwU6hrZ6+3ZalRxbTBu7Lt
YbDSrzOtznMPDZeu5f7TI8jeV83KyE3gRDwQQTclol8Rj6CwqncnIqP2APUUvzAv
CtyzRlb9uCaNCfE4mDNBACdr+LBrnRjrLJXBmNdPxvlbvEq2zL5Wowu1HEpLMpq1
gmTB3ry4petQ8Qnkz6wzGYrnGoG9psgL8QSfjK9HJeb9fKQhoPksLqh9CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlf11YnH9Cv2l04XDcFs0tg7hXPMB8GA1UdIwQY
MBaAFD0GZbZnaHWs9g4BUiuTQ8BApf/hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFFabHRtZG9kYXoyRGdGU0s1TkR3RUNsXy1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lMzE3MGUtNzE1Yy00YzQwLWFjM2Qt
OWFlMGZlYWY5OTM5LzEvUFFabHRtZG9kYXoyRGdGU0s1TkR3RUNsXy1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lMzE3MGUtNzE1Yy00YzQwLWFjM2QtOWFlMGZlYWY5OTM5
LzEvUFFabHRtZG9kYXoyRGdGU0s1TkR3RUNsXy1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyhnnenk
7fiVZztgn9GFPgoPbnh8mCuOyaFVMniXYuFJurPodqGMY7YptmIT045E7hVeKA/9
Qr8Yi6adtRezY/IBb/pMDZmIwdFrBJ0IVX+Gh7MiTkR12yS//DZxs1tna/Qu2i8v
mOND7CgTUN7Eb9DI8IWRH83rMxjOF5egn8Wn4rG81iuKCENbZHjUjYL1U9X3I0XT
8WBtjcZpD1Pj9aL1SHGRHZONm3AYV8/mk5BEJhUHHPtcpmpkF97lFI1K4NGbk+ol
vZO8/QQmx5zhTkJF71ait56hsIyPI4LQpY5ZsDL5XIfD8dWXpH4kaJCcgoD/25b2
FLgr2eOq+trhcA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:48:16 2025 by rpki-client