Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
File: pENNZpHm4nwoLKo3r_kPK8VL8eM.mft (raw, json)
Hash identifier: z8Rjxf45w9sGUUPvbplrzGs1VV1O2oS9bv3/h5yVZsA=
Subject key identifier: 52:45:60:7D:8C:2B:A7:8C:FB:84:4C:E2:35:AB:A2:5A:C0:9A:44:FF
Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Certificate serial: 0195E00F97492FE9872ECF6A4405F534AF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 04:01:12 +0000
Manifest this update: Sat 29 Mar 2025 04:01:12 +0000
Manifest next update: Sun 30 Mar 2025 04:01:12 +0000
Files and hashes: 1: V4fEP3mKAgRZldstTINNuk_J6BQ.roa (hash: 8GFsD/JurXta37HamqakliSVJtpBqW+/i/sWeLhcYfE=)
2: pENNZpHm4nwoLKo3r_kPK8VL8eM.crl (hash: 83+4wbaVvYF0umtB/VZS529sQdjN5I8R/q7ArilylTU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:97:49:2f:e9:87:2e:cf:6a:44:05:f5:34:af:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Validity
Not Before: Mar 29 04:01:12 2025 GMT
Not After : Mar 30 04:01:12 2025 GMT
Subject: CN=5245607d8c2ba78cfb844ce235aba25ac09a44ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:46:01:05:30:54:5e:d6:45:61:d1:6f:f1:
df:57:dd:0e:2b:6e:e1:cc:a0:04:f1:18:24:ae:20:
7e:1b:4c:44:44:67:82:7c:ad:f3:52:d3:21:19:3c:
99:a0:f7:e2:fd:67:8d:b3:75:0b:2e:d9:97:21:97:
59:40:8f:4b:98:1f:b1:50:2d:d2:cc:d1:e3:f4:a6:
1a:58:53:f6:4d:c2:c8:78:55:74:8f:56:17:3b:46:
90:c7:2c:57:94:c0:ad:0a:50:4c:bf:a1:14:c6:66:
a5:41:cd:a0:b0:df:9c:3d:e6:21:29:f5:a5:7d:05:
aa:08:ec:5b:c8:a2:91:31:77:01:e2:24:7a:73:40:
81:fe:51:34:0b:77:90:34:00:59:a2:e6:ab:81:65:
96:2b:c5:79:c9:3a:36:2e:94:7b:7b:0e:05:49:c5:
1e:b5:45:f5:b5:41:cc:66:81:f0:a4:af:4d:13:84:
0b:9a:87:a6:ef:a0:95:05:c0:59:4a:d7:07:15:1f:
3b:88:50:f0:aa:5a:cd:cf:fb:ce:b2:58:43:d3:92:
e3:e0:63:4a:b7:7f:5b:9d:74:58:44:24:4d:55:f1:
5f:70:fb:0f:8b:3c:13:57:bf:58:6f:38:1d:27:2d:
23:b0:7d:eb:8f:4f:7a:50:ea:4b:eb:a2:3f:ad:82:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:45:60:7D:8C:2B:A7:8C:FB:84:4C:E2:35:AB:A2:5A:C0:9A:44:FF
X509v3 Authority Key Identifier:
keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:70:5e:16:36:0f:77:ce:2e:c1:c5:4f:de:d5:c8:04:6a:e2:
1e:76:a9:4b:9e:d1:a5:73:db:1a:21:41:f3:34:d5:a9:f1:c6:
ff:b4:ba:88:20:eb:b0:9c:fd:29:9f:27:76:9e:1f:a1:a3:be:
4f:40:8c:57:e2:43:78:2e:7a:e6:36:b0:75:cd:c8:a0:c9:93:
5b:e5:c9:b2:c3:f3:cf:f7:fe:01:67:f0:bf:f9:4d:b3:7e:66:
6e:4b:2b:4d:0e:e1:27:86:e2:11:89:d0:2f:3a:15:66:0c:33:
78:f3:f4:27:56:85:05:9a:be:ff:f2:f3:8b:6d:86:57:63:aa:
ca:ce:4d:ca:d3:5e:13:03:58:c2:d3:c2:53:26:96:df:5d:df:
19:b7:d5:1d:72:42:41:e8:85:46:38:95:17:c5:8b:c9:f5:c4:
47:5a:a3:25:4f:ae:60:72:cb:7c:86:d7:e5:fd:6e:36:a4:7e:
ef:11:1c:82:1c:80:9f:69:9a:34:b1:bc:b0:f9:e1:cc:e7:83:
e5:3b:16:a4:aa:e0:ad:ca:f7:51:65:d4:61:67:1f:9d:7d:28:
2d:b7:ed:e3:db:81:be:e7:a2:e5:6c:a4:56:58:89:68:bb:c5:
6f:ab:43:e6:23:a4:ab:a9:af:a4:38:21:b6:30:c2:da:4e:bb:
a5:45:2c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD5dJL+mHLs9qRAX1NK+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NDM0ZDY2OTFlNmUyN2MyODJjYWEzN2FmZjkwZjJiYzU0
YmYxZTMwHhcNMjUwMzI5MDQwMTEyWhcNMjUwMzMwMDQwMTEyWjAzMTEwLwYDVQQD
Eyg1MjQ1NjA3ZDhjMmJhNzhjZmI4NDRjZTIzNWFiYTI1YWMwOWE0NGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx81GAQUwVF7WRWHRb/HfV90OK27h
zKAE8RgkriB+G0xERGeCfK3zUtMhGTyZoPfi/WeNs3ULLtmXIZdZQI9LmB+xUC3S
zNHj9KYaWFP2TcLIeFV0j1YXO0aQxyxXlMCtClBMv6EUxmalQc2gsN+cPeYhKfWl
fQWqCOxbyKKRMXcB4iR6c0CB/lE0C3eQNABZouargWWWK8V5yTo2LpR7ew4FScUe
tUX1tUHMZoHwpK9NE4QLmoem76CVBcBZStcHFR87iFDwqlrNz/vOslhD05Lj4GNK
t39bnXRYRCRNVfFfcPsPizwTV79YbzgdJy0jsH3rj096UOpL66I/rYKtcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJFYH2MK6eM+4RM4jWrolrAmkT/MB8GA1UdIwQY
MBaAFKRDTWaR5uJ8KCyqN6/5DyvFS/HjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAt
ZTk5NzVhMGJkZWE3LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny80NWIyZDktZTg2MS00M2VmLWJjYzAtZTk5NzVhMGJkZWE3
LzEvcEVOTlpwSG00bndvTEtvM3Jfa1BLOFZMOGVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXBeFjYP
d84uwcVP3tXIBGriHnapS57RpXPbGiFB8zTVqfHG/7S6iCDrsJz9KZ8ndp4foaO+
T0CMV+JDeC565jawdc3IoMmTW+XJssPzz/f+AWfwv/lNs35mbksrTQ7hJ4biEYnQ
LzoVZgwzePP0J1aFBZq+//Lzi22GV2Oqys5NytNeEwNYwtPCUyaW313fGbfVHXJC
QeiFRjiVF8WLyfXER1qjJU+uYHLLfIbX5f1uNqR+7xEcghyAn2maNLG8sPnhzOeD
5TsWpKrgrcr3UWXUYWcfnX0oLbft49uBvuei5WykVliJaLvFb6tD5iOkq6mvpDgh
tjDC2k67pUUsow==
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:49 2025 by rpki-client