Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
File: Pv3irXEjs6hgCAWIBbsQFva3P7A.mft (raw, json)
Hash identifier: xq/dV6Co6UlvTOUjGZb+hMQeSoBt4i2aGMfUHMJlLpk=
Subject key identifier: CE:CF:E3:6D:9F:82:FC:67:A7:D0:2B:1B:A6:A5:08:E8:5B:14:4F:31
Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Certificate serial: 0194BC3C451B1C880FEC874F7023B06DBE8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
Manifest number: 0FB3
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: CaL9jYSTc-IdChBXaiMWMez9mXg.roa (hash: KSdlQjcVUmbuNppz/t/DKjZyc/L+OBaFoRGPDIpwznQ=)
2: Pv3irXEjs6hgCAWIBbsQFva3P7A.crl (hash: ojzJaFAkT0mTXs44rZHxlgesY+lkBy1yrMn/SWwZqHE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:45:1b:1c:88:0f:ec:87:4f:70:23:b0:6d:be:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=cecfe36d9f82fc67a7d02b1ba6a508e85b144f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c3:83:8b:8b:d8:80:46:3e:2d:7a:40:19:b6:
14:2f:41:41:18:30:66:28:80:88:ac:bc:18:45:0f:
fe:3e:1e:ce:14:8d:a1:76:ee:f7:6f:66:f3:c8:26:
35:09:b2:60:7b:36:83:65:7f:70:02:06:20:2e:2a:
e3:b4:a4:f7:3c:d8:f0:e4:48:c0:a4:63:20:d1:5f:
b1:43:1a:f0:fb:d1:9e:6d:75:81:52:94:22:e3:f9:
92:f3:37:84:33:18:76:13:8d:dc:c9:7b:de:88:41:
f2:d5:49:04:ab:16:b5:d4:73:99:7c:48:2a:b2:68:
ad:96:cd:ad:a2:10:7e:55:45:07:cd:2f:b2:a3:42:
bb:3c:6a:ac:18:8e:8f:01:7b:d8:c1:d4:4f:08:8b:
68:56:ad:f7:2f:dc:78:e9:5d:63:9d:25:d5:1f:3f:
5d:86:33:f9:52:fa:ca:61:b0:60:83:49:86:08:ca:
a1:5c:39:86:c1:4d:7c:a4:e4:bd:24:b1:cc:6b:e0:
08:ce:9a:89:fb:80:84:59:c1:68:d4:61:c4:68:5a:
8d:85:d7:74:61:d0:14:98:36:f0:4d:8c:ea:f8:15:
81:81:9c:f5:29:20:e9:73:bc:6b:7e:47:5b:57:2d:
84:73:18:a5:84:dc:df:d2:cf:93:69:cb:0f:86:cf:
21:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CF:E3:6D:9F:82:FC:67:A7:D0:2B:1B:A6:A5:08:E8:5B:14:4F:31
X509v3 Authority Key Identifier:
keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3a:d1:ca:6c:50:c8:03:1d:25:7d:b7:46:87:56:27:4e:d5:
9d:32:f4:54:28:78:7e:8e:4c:91:2f:ac:21:ac:43:04:88:a8:
ee:5b:de:f7:94:8f:6e:9c:2f:5f:a7:d8:3e:b1:a2:c2:32:16:
79:87:7a:16:8c:1e:70:fb:6a:21:36:5b:f1:f9:62:a8:93:ac:
e8:98:68:31:7e:22:78:0f:5c:f7:f3:90:40:de:e0:5b:2d:3f:
16:69:4b:ad:cd:89:72:77:88:f3:41:e1:6b:78:b2:bc:52:b5:
69:37:b4:5e:11:7c:f5:34:78:5b:34:67:cf:d2:59:23:99:e1:
7b:39:f4:4e:40:7b:98:b9:65:a6:8e:fb:2a:fe:e0:33:ef:aa:
b7:96:af:17:92:5b:10:d9:04:9c:d9:fd:66:53:21:64:f3:6f:
85:1a:3d:49:a1:c6:c7:83:f8:8f:30:5e:a1:f3:dd:97:f7:06:
8e:32:d0:66:44:eb:41:f7:46:08:ff:fe:55:22:d8:95:42:18:
cd:46:aa:de:05:aa:dc:bd:d2:fe:8f:bb:bf:a7:db:e5:eb:eb:
98:50:d3:3f:0d:77:33:54:71:87:81:75:2a:18:49:42:6f:46:
6d:47:c1:72:17:08:41:e5:79:1c:5c:21:c2:3a:a8:2f:af:27:
d2:7e:07:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:45:57 2025 by rpki-client