Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/7a180c-c1a5-4146-8429-08380fffc169/1/PtJZHByD2zDkL7Dkq4Ew5sogv44.mft
File: PtJZHByD2zDkL7Dkq4Ew5sogv44.mft (raw, json)
Hash identifier: kx9aO4ypoQ+oP748xwns9AJC7ujsfrTUoUE+XP2fF1o=
Subject key identifier: D6:83:9C:8B:08:E8:D2:C8:5A:7D:CF:81:8E:BE:9F:39:68:F6:87:34
Authority key identifier: 3E:D2:59:1C:1C:83:DB:30:E4:2F:B0:E4:AB:81:30:E6:CA:20:BF:8E
Certificate issuer: /CN=3ed2591c1c83db30e42fb0e4ab8130e6ca20bf8e
Certificate serial: 018A8454C50E5A5A6966DEAFE2705FCA17DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtJZHByD2zDkL7Dkq4Ew5sogv44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/7a180c-c1a5-4146-8429-08380fffc169/1/PtJZHByD2zDkL7Dkq4Ew5sogv44.mft
Manifest number: 087D
Signing time: Mon 11 Sep 2023 13:01:02 +0000
Manifest this update: Mon 11 Sep 2023 13:01:02 +0000
Manifest next update: Tue 12 Sep 2023 13:01:02 +0000
Files and hashes: 1: IkH7abKXVY6WCPObY8hESEIlXqk.roa (hash: 6tLjF5iXPHrG6uip/82Pkvzco4jGI1oJV+YWsCIIcng=)
2: PtJZHByD2zDkL7Dkq4Ew5sogv44.crl (hash: Ge19F/lFDwl7FbxNBhLy4tqHsj11/k/KBd3PI8jVplY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:84:54:c5:0e:5a:5a:69:66:de:af:e2:70:5f:ca:17:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed2591c1c83db30e42fb0e4ab8130e6ca20bf8e
Validity
Not Before: Sep 11 13:01:02 2023 GMT
Not After : Sep 12 13:01:02 2023 GMT
Subject: CN=d6839c8b08e8d2c85a7dcf818ebe9f3968f68734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2c:0b:1d:3f:d1:58:b5:1f:1f:7b:d2:fc:dc:
32:aa:36:e7:ac:52:4a:1f:b9:92:4a:57:3b:09:7c:
75:83:1f:de:b3:3d:e2:6e:55:a1:0a:5b:ea:89:78:
23:cb:48:60:db:e7:7f:1b:ce:f6:ba:5e:20:ad:1c:
a1:c8:81:d1:a6:46:36:0b:e7:81:3f:99:ba:64:46:
4f:52:20:22:55:ba:77:46:5f:36:87:09:5f:a8:f8:
c2:e9:94:8a:e3:d9:d6:d3:dc:c6:f2:3a:c7:fb:71:
01:cb:f8:24:88:e0:a3:3f:71:98:1a:67:80:30:93:
3b:38:e7:95:e0:d0:82:be:1b:8b:a2:71:e6:fb:7c:
3c:49:73:02:97:25:b3:2c:60:17:b8:e3:56:9f:26:
8f:49:eb:81:2d:08:67:37:43:ad:26:e8:0c:1b:32:
ec:b1:94:e5:ff:21:16:20:43:ff:76:8a:4a:24:31:
f7:94:6d:22:ee:b9:29:db:05:2d:b5:4d:fa:32:63:
7c:9c:2f:23:ff:da:07:20:ea:88:a1:f2:30:c7:10:
31:6c:98:15:97:1b:a3:c3:78:dc:96:bd:c1:2b:83:
bb:bf:10:bc:28:d6:9f:34:6f:bd:21:81:d3:d0:ec:
fa:ab:86:f4:42:d1:b9:5c:93:f7:18:8e:3d:99:35:
3b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:83:9C:8B:08:E8:D2:C8:5A:7D:CF:81:8E:BE:9F:39:68:F6:87:34
X509v3 Authority Key Identifier:
keyid:3E:D2:59:1C:1C:83:DB:30:E4:2F:B0:E4:AB:81:30:E6:CA:20:BF:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtJZHByD2zDkL7Dkq4Ew5sogv44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/7a180c-c1a5-4146-8429-08380fffc169/1/PtJZHByD2zDkL7Dkq4Ew5sogv44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/7a180c-c1a5-4146-8429-08380fffc169/1/PtJZHByD2zDkL7Dkq4Ew5sogv44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:50:b8:1f:1e:28:bd:7e:b2:cd:7d:32:38:a4:78:06:48:8a:
60:33:2d:18:07:25:80:d7:42:aa:00:44:34:77:2a:68:ea:e4:
f0:c3:6e:a7:92:02:5b:41:6c:d8:ea:eb:a5:b7:0c:92:2f:10:
c7:48:43:eb:9f:f5:17:fc:55:6a:3d:1b:98:a7:4f:1e:42:59:
9e:01:1d:09:f2:54:ac:ed:88:54:64:b3:9a:37:f6:a5:cd:06:
b6:97:7e:4b:ef:21:23:96:ff:fc:c2:a8:7a:22:ec:5e:cc:40:
ce:a1:83:80:73:f6:07:75:06:f8:75:d2:c1:22:51:b4:e6:44:
be:42:16:75:c9:6e:5d:a2:ec:e6:5c:9f:fa:1f:f8:a2:14:57:
3a:ac:d0:80:55:66:8f:ba:b7:f2:6b:78:0b:04:96:62:54:cb:
96:02:62:8c:fe:f6:26:0e:7f:d6:df:1e:26:3f:ca:82:5a:05:
99:47:e4:93:0b:1c:49:f8:8d:83:49:07:b3:b2:4e:f1:7a:5b:
91:61:87:f4:35:7d:6a:51:98:10:94:fa:2f:84:a1:c8:11:aa:
95:ba:73:32:d9:03:bf:4e:ad:92:c5:a8:6b:ff:1b:35:97:b9:
a7:cb:c9:cb:7d:ff:eb:4b:28:16:ec:0d:03:b6:f3:0b:86:68:
f1:72:f8:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYqEVMUOWlppZt6v4nBfyhffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZDI1OTFjMWM4M2RiMzBlNDJmYjBlNGFiODEzMGU2Y2Ey
MGJmOGUwHhcNMjMwOTExMTMwMTAyWhcNMjMwOTEyMTMwMTAyWjAzMTEwLwYDVQQD
EyhkNjgzOWM4YjA4ZThkMmM4NWE3ZGNmODE4ZWJlOWYzOTY4ZjY4NzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiwLHT/RWLUfH3vS/NwyqjbnrFJK
H7mSSlc7CXx1gx/esz3iblWhClvqiXgjy0hg2+d/G872ul4grRyhyIHRpkY2C+eB
P5m6ZEZPUiAiVbp3Rl82hwlfqPjC6ZSK49nW09zG8jrH+3EBy/gkiOCjP3GYGmeA
MJM7OOeV4NCCvhuLonHm+3w8SXMClyWzLGAXuONWnyaPSeuBLQhnN0OtJugMGzLs
sZTl/yEWIEP/dopKJDH3lG0i7rkp2wUttU36MmN8nC8j/9oHIOqIofIwxxAxbJgV
lxujw3jclr3BK4O7vxC8KNafNG+9IYHT0Oz6q4b0QtG5XJP3GI49mTU79QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaDnIsI6NLIWn3PgY6+nzlo9oc0MB8GA1UdIwQY
MBaAFD7SWRwcg9sw5C+w5KuBMObKIL+OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHRKWkhCeUQyekRrTDdEa3E0RXc1c29ndjQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC83YTE4MGMtYzFhNS00MTQ2LTg0Mjkt
MDgzODBmZmZjMTY5LzEvUHRKWkhCeUQyekRrTDdEa3E0RXc1c29ndjQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC83YTE4MGMtYzFhNS00MTQ2LTg0MjktMDgzODBmZmZjMTY5
LzEvUHRKWkhCeUQyekRrTDdEa3E0RXc1c29ndjQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1C4Hx4o
vX6yzX0yOKR4BkiKYDMtGAclgNdCqgBENHcqaOrk8MNup5ICW0Fs2OrrpbcMki8Q
x0hD65/1F/xVaj0bmKdPHkJZngEdCfJUrO2IVGSzmjf2pc0Gtpd+S+8hI5b//MKo
eiLsXsxAzqGDgHP2B3UG+HXSwSJRtOZEvkIWdcluXaLs5lyf+h/4ohRXOqzQgFVm
j7q38mt4CwSWYlTLlgJijP72Jg5/1t8eJj/KgloFmUfkkwscSfiNg0kHs7JO8Xpb
kWGH9DV9alGYEJT6L4ShyBGqlbpzMtkDv06tksWoa/8bNZe5p8vJy33/60soFuwN
A7bzC4Zo8XL4CQ==
-----END CERTIFICATE-----
Generated at Fri May 2 23:03:00 2025 by rpki-client