Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json)
Hash identifier: cx4I0UdypDyIKf0sUFeVrN+Ji87TwTKVyGjxf6KfuzQ=
Subject key identifier: 66:35:C6:F2:B2:C7:65:B8:B6:2F:B3:08:94:8B:46:B5:4C:34:95:01
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 0194BBCE8B39BB3CB596046D0BC5EB24DD41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: 5aui3plUNNq6Ifm7LnxkMlgBIpUS5G8yjTMCiTZJj8s=)
2: vPW0vOvqthOlHU6_v3sIc5DQ0j0.roa (hash: uvs0104pFwEVBM0nuV6DqiIGUvrkJtwZhdn8IHcJS3s=)
3: wWNRdFWkzsrzPRdYPLpt7t1EH44.roa (hash: jdk5fXDfmvLAmCXB7Op/+o6QmlltLAtxqbK6vg83GwE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8b:39:bb:3c:b5:96:04:6d:0b:c5:eb:24:dd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=6635c6f2b2c765b8b62fb308948b46b54c349501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:a0:dd:13:b6:f5:53:95:dc:54:96:ec:72:
70:95:db:08:0a:eb:ce:f8:66:90:53:8e:45:8c:c0:
97:91:d8:dc:18:8c:f0:fc:10:9f:e4:27:94:9b:c7:
6f:c1:6a:42:71:6c:18:4d:45:70:dc:aa:ae:96:a6:
40:f6:1c:5d:fb:19:6d:9b:c8:25:62:ea:1e:50:36:
fd:80:b6:b4:ed:34:f4:24:6d:2d:da:5d:30:03:c8:
0a:db:db:bd:43:7f:b4:fc:08:da:d3:e1:b2:b6:63:
02:39:c7:2c:fc:8b:ca:4e:bd:de:50:19:c2:a7:6a:
78:bb:24:d1:5a:48:f2:4c:4f:a7:3a:10:e1:49:84:
87:72:2d:fa:76:ae:f4:09:cf:e5:8c:c0:19:49:61:
10:b1:e6:d9:eb:c4:7d:2a:3e:6a:d9:80:34:ce:d0:
ed:cd:06:90:a9:fd:fe:a5:0f:c7:e6:ef:5b:2a:ee:
04:61:80:65:dc:0f:b8:67:2c:27:6c:af:7c:86:7f:
b7:cf:96:28:57:ba:f7:12:4c:3b:08:71:a6:87:be:
05:a1:bd:3d:25:2b:09:76:b7:e9:db:e5:c8:3d:12:
d1:6d:74:e9:da:e8:a7:d9:7b:83:72:47:a6:ac:a8:
fb:5b:e9:6d:ad:50:d8:11:61:47:83:3d:b9:d0:ab:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:35:C6:F2:B2:C7:65:B8:B6:2F:B3:08:94:8B:46:B5:4C:34:95:01
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:bc:c1:ce:ce:9f:d5:23:7d:a9:83:70:c1:21:d3:78:be:f9:
6b:ab:15:11:99:f6:19:61:e8:cc:d8:32:cb:83:2c:68:10:60:
ee:96:7f:2e:05:7d:ab:fc:6b:94:34:ac:8f:ea:14:d6:70:a5:
d1:88:c4:48:e4:b6:2f:63:c1:7e:e9:c2:6c:73:26:06:d5:db:
f8:3f:b3:1a:7f:ec:3a:ca:87:ba:c6:84:18:49:01:b3:e7:16:
5c:d9:b9:05:0c:9a:41:9d:20:59:78:51:7a:ff:b8:11:04:74:
5d:4d:f8:3a:f2:95:bd:84:74:fb:b8:11:19:03:f9:3a:f7:c4:
1c:6f:c4:75:74:72:c5:a7:37:ff:cf:05:91:e1:85:9c:b3:6f:
52:32:9b:c0:a0:e3:a5:06:9c:07:86:94:cb:37:1b:c1:5b:61:
f9:e9:15:b8:33:15:80:e7:73:8b:3f:29:8d:9c:6d:a9:e7:b9:
ec:86:d1:32:0d:ed:bf:24:ea:5c:37:0e:0c:18:8b:81:d4:9f:
38:2e:19:ac:0d:33:80:05:37:3b:09:92:1c:08:e8:2b:04:6f:
23:67:15:e6:6e:6d:d0:0c:e1:44:5c:ae:d3:19:f7:cf:6e:00:
67:7c:29:5b:4f:23:27:3f:cd:6f:1f:35:42:cd:96:50:ab:04:
94:f9:50:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:25 2025 by rpki-client