Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
File: P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json)
Hash identifier: 4hkC5OAEnkjl+n8KNnMqyg68IQwjo+IQOgMFxBxcyNM=
Subject key identifier: 68:57:EC:46:DD:AB:DB:BC:AD:9E:F7:A5:4D:14:3C:98:EE:3B:70:8D
Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Certificate serial: 0194BC3C5D44FBD0A20996AF1837514043C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
Manifest number: 1336
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: pz6bl37l/WQGPCojRxH1d3soxlVEn4b3EOe7ywtlWdU=)
2: nmitwXvuuY6MKgCsxEX1cJcowok.roa (hash: oh69tebd8y4Ws34XumPPpVkiRFbzbzoksJJOP2JTe+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5d:44:fb:d0:a2:09:96:af:18:37:51:40:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=6857ec46ddabdbbcad9ef7a54d143c98ee3b708d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a3:a3:f6:f5:9e:89:f1:0f:fc:b7:7e:84:fd:
0d:82:ad:8d:2a:25:c0:05:07:2f:ff:6d:34:75:10:
35:cf:3e:05:66:2c:42:5e:ce:60:46:60:a8:06:31:
6b:62:a6:19:25:77:26:7e:64:37:91:f2:b7:72:16:
84:b9:71:e6:ee:1b:45:b1:2d:3d:28:b2:27:d7:22:
f3:97:a0:5e:67:65:eb:78:f6:40:f4:67:7b:87:e8:
da:bb:b0:cd:d2:b9:b2:87:d0:b4:0b:11:a2:dd:6d:
fa:46:85:43:fb:ca:2b:64:53:0d:98:ea:5c:86:3c:
dc:c9:3b:52:c9:a5:6b:b0:41:bc:18:04:b4:1d:8e:
bc:ae:2a:2e:06:4f:39:c4:01:41:0a:a6:73:17:11:
5e:5c:7d:1b:50:9c:d5:42:0d:88:ed:7a:89:16:aa:
c4:84:2c:d3:52:1b:e8:50:e3:c8:65:e7:54:e8:19:
c0:2b:9a:9c:2d:f4:aa:ea:57:14:f5:97:58:ed:90:
ec:6e:a5:54:75:48:65:fa:de:e7:ee:52:53:14:db:
e5:3b:de:2e:ed:ef:05:47:b6:50:46:d9:9c:42:f1:
e3:a2:0a:4f:d4:c2:b7:20:3b:d2:80:94:9c:6f:e3:
68:3f:c1:3b:c2:bd:78:33:94:e4:52:34:cc:e7:b4:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:57:EC:46:DD:AB:DB:BC:AD:9E:F7:A5:4D:14:3C:98:EE:3B:70:8D
X509v3 Authority Key Identifier:
keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f9:0d:f7:eb:00:de:01:97:db:8d:7e:a3:ea:c8:11:46:2c:
98:99:3a:16:c1:43:18:6b:14:49:91:18:62:0c:b9:05:44:bd:
59:07:13:a3:3b:c3:da:ea:01:31:06:01:fd:43:42:f0:08:a5:
93:2f:60:25:17:f5:50:b1:b2:c6:13:d6:f5:e7:5c:75:1e:ad:
01:6b:23:c0:8b:89:5d:03:9b:5e:bf:1e:2a:8f:45:8b:26:38:
43:f3:df:3e:77:df:28:29:dd:a1:c2:96:79:fa:2d:64:10:74:
be:6f:e8:79:0b:b5:d9:06:f7:70:d0:e1:3f:a1:f3:e8:e8:a0:
f6:bf:17:ec:cf:b8:0a:49:2d:ec:93:70:86:ca:26:f9:86:73:
42:c8:37:66:ee:a1:14:28:de:66:31:c1:2c:5a:68:a4:48:0d:
6f:50:6a:94:2e:01:a0:72:c3:cd:24:4c:67:98:f7:a9:4b:55:
f7:a3:d5:3b:d8:f1:fd:20:38:25:47:aa:66:a7:e8:51:c0:d1:
d4:c5:12:36:0a:04:71:6e:db:9e:1f:0e:58:44:95:25:12:47:
d8:23:58:38:dd:9b:f5:cb:33:36:73:24:63:23:a9:a0:c5:3b:
67:c1:38:98:5c:0d:aa:ad:8f:04:3a:85:a7:d9:25:f3:7c:4a:
e9:ef:e5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:23 2025 by rpki-client