Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
File: P1KMlfYICrE8sEl4PpJE0z2cSzI.mft (raw, json)
Hash identifier: SNQuKfJLJbfk7wnKEqx4QutwsD2zssYv5bQh5QYDOcs=
Subject key identifier: 51:ED:BB:42:3B:95:3E:CB:D8:7B:B4:BB:0F:10:3C:9D:07:C7:96:74
Authority key identifier: 3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
Certificate issuer: /CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Certificate serial: 0194BD18139623479F58A4F82FFE34A3F17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
Manifest number: 133D
Signing time: Fri 31 Jan 2025 16:00:58 +0000
Manifest this update: Fri 31 Jan 2025 16:00:58 +0000
Manifest next update: Sat 01 Feb 2025 16:00:58 +0000
Files and hashes: 1: P1KMlfYICrE8sEl4PpJE0z2cSzI.crl (hash: c6L9nXFXydePsmRKb6xY2+xabZRpwbrvwxYtZIVAiXU=)
2: w5HnLtF4Me5n7OHUmGug2mAnL6U.roa (hash: AsJuclUazy6myQDlUyLOaCVJ9azdwtM7AhIo+Ahv/h8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:13:96:23:47:9f:58:a4:f8:2f:fe:34:a3:f1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Validity
Not Before: Jan 31 16:00:58 2025 GMT
Not After : Feb 1 16:00:58 2025 GMT
Subject: CN=51edbb423b953ecbd87bb4bb0f103c9d07c79674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:1b:53:2e:2a:c2:59:67:04:55:dd:5d:51:
b4:07:18:91:a1:84:76:5e:eb:71:a1:16:cb:20:c6:
98:85:cb:8c:14:f9:d3:bb:31:89:04:12:8c:83:32:
ba:24:1c:8d:59:30:7d:09:2e:2b:73:9b:a1:ae:72:
de:2f:58:4c:83:7e:e0:8c:41:cc:41:91:d0:12:37:
9f:72:98:3e:c6:a0:99:5c:77:e2:d1:ec:48:72:8a:
cc:3a:ab:e9:a7:ee:95:5d:67:26:b8:d3:bb:66:ab:
fa:64:82:0c:e2:9b:91:40:c6:22:19:1b:d7:84:d2:
b2:9d:e9:b1:96:6c:a5:0c:35:61:3d:8c:1e:97:27:
ad:7c:31:0b:e8:21:f9:d7:c8:bd:b8:d5:10:a5:c7:
eb:4b:59:d3:98:36:9f:8f:d9:ef:7b:dd:b3:3a:cd:
c4:96:a1:ba:bc:d2:b4:0d:55:be:77:3b:a4:24:92:
d9:7d:36:12:89:19:e3:9e:01:74:0d:8d:39:35:82:
f9:c9:99:63:71:8c:40:87:7b:6d:29:fd:97:fa:c1:
d8:b9:4f:40:0b:02:2b:52:c2:05:24:df:0a:53:89:
ce:db:60:2a:11:67:d6:94:29:fc:8a:e3:bd:c6:60:
89:a6:1a:b3:a4:9c:c0:79:d4:38:6d:fd:35:02:80:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:ED:BB:42:3B:95:3E:CB:D8:7B:B4:BB:0F:10:3C:9D:07:C7:96:74
X509v3 Authority Key Identifier:
keyid:3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f4:6a:12:4e:4f:15:da:4c:ea:4a:62:a0:fa:67:c4:c1:80:
e6:77:4d:a7:48:ff:2c:41:09:0f:42:49:fb:eb:41:51:6a:7d:
d2:20:14:65:fb:ed:93:78:a8:97:ba:61:3d:25:2f:66:63:22:
e2:ae:22:5e:3a:fb:30:ec:11:13:32:e5:48:2a:32:18:29:6c:
eb:00:a5:ff:c1:9a:a7:b1:11:62:9d:3c:9f:fb:ac:32:12:43:
54:d9:7c:e3:62:4d:88:ac:42:b3:5a:33:ec:da:30:50:72:3e:
74:2f:53:9a:d7:13:ae:6b:aa:13:f3:61:a0:23:49:15:16:c3:
6a:47:08:19:25:c3:5d:f1:fb:c7:c6:b7:7e:66:6a:a0:ef:58:
61:48:ef:40:f2:c7:76:57:a5:5a:ce:0c:cd:95:fb:54:18:c7:
a5:75:95:67:b0:f6:13:d1:13:69:0a:8f:3a:12:ad:f6:15:db:
7e:34:00:ac:79:97:cd:33:7c:a7:0b:97:68:07:b7:a0:8b:38:
97:51:29:4b:a7:4b:61:98:74:d5:99:52:2c:bd:d5:41:50:e8:
7d:e0:85:64:0c:cd:58:00:63:4a:1b:d7:68:19:e7:a6:ca:a2:
e0:b8:2f:32:6a:65:df:96:5a:37:c3:67:85:fb:61:cb:f8:c3:
16:0e:c3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:10:36 2025 by rpki-client