Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
File: PbNCBiV3FppjWX6eOmQl_N5sFmE.mft (raw, json)
Hash identifier: VSnQSNybqPuIL+DjRowZErifgJlY8HojPpvO8JWaIvI=
Subject key identifier: A5:54:1D:E1:19:FD:61:1A:BB:DB:F3:39:4C:60:1F:DA:51:58:7B:B2
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 0194BC72AB7DDA9A250F4C2214489C4002E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
Manifest number: 0822
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: PbNCBiV3FppjWX6eOmQl_N5sFmE.crl (hash: 0NAl7X/bZA20VrD2lMH+CF7lPyJR4nJFX/u9wkl086I=)
2: u6X_yWkVLE-C5GUl8sRlcXUfprI.roa (hash: G/Od4mhlmhQvTsBF+RYMonju3qrggKqYt06lJi4x8BY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ab:7d:da:9a:25:0f:4c:22:14:48:9c:40:02:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=a5541de119fd611abbdbf3394c601fda51587bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a2:86:58:15:c5:26:27:9d:43:c3:42:f9:3f:
e0:34:cf:3d:0e:b1:2a:04:da:b7:38:1c:97:5e:1c:
6c:d9:c2:e9:50:a2:b2:b7:23:75:24:16:b0:e2:de:
f7:65:94:98:b3:65:85:a6:97:b1:ee:99:33:12:d6:
c0:ff:d4:2d:0d:9d:33:8a:8b:4a:b6:bb:e7:8a:f8:
3d:d7:db:c5:32:1f:f5:c6:1c:42:87:8b:80:b4:b2:
4c:ce:d8:d0:89:10:7e:d9:74:6e:4f:b3:fc:0d:e1:
4d:12:cd:46:aa:a6:7d:61:98:fb:d1:48:ed:19:e0:
0d:d5:b4:2d:67:c0:4c:13:d9:0a:f4:69:e7:ad:b9:
62:6d:18:72:66:0c:d1:bf:71:f4:6c:0e:9f:9c:03:
73:cb:88:ce:0e:84:26:c4:5a:88:2e:e9:13:12:6c:
46:40:2c:84:de:3d:88:b1:84:a9:ab:b5:60:5b:1f:
ed:1b:aa:a1:b7:be:5e:84:f6:b7:af:49:ad:4d:27:
c6:71:0a:38:1d:bb:08:8c:c2:24:fa:5d:8b:42:0f:
da:ab:51:64:66:6e:b6:f3:c5:a9:1d:0a:d5:11:bd:
fa:4c:23:b7:3f:d4:d5:5e:ed:7d:90:b1:ec:38:87:
2c:9b:c8:5d:29:57:13:1c:3b:11:3f:b0:99:80:b6:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:54:1D:E1:19:FD:61:1A:BB:DB:F3:39:4C:60:1F:DA:51:58:7B:B2
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bf:7c:e6:24:e6:d3:bd:01:d1:85:f9:c3:0e:45:33:98:75:
1e:f6:17:fd:d0:39:bf:45:d0:1c:3e:7d:7c:56:24:b5:18:fb:
d3:93:34:50:c7:5d:c2:6b:a8:46:00:db:e7:db:b1:af:ef:02:
e8:74:59:03:da:3b:ba:2e:19:26:14:bc:8e:62:5b:b4:e7:11:
42:9e:bf:19:30:c8:c3:13:e9:dd:5e:4a:b1:11:23:a4:25:28:
d9:d3:e6:1a:01:c3:9b:2f:86:fc:76:5c:8d:20:70:84:c8:16:
5a:56:9e:e2:0c:29:75:ed:71:38:04:56:59:0e:84:36:2c:28:
4b:34:ce:c9:e7:71:42:ab:60:5c:c6:54:9e:7e:3e:ae:ef:4e:
13:a4:57:51:f5:f4:78:73:fb:d9:12:08:a5:a1:52:1d:b2:c1:
46:aa:67:81:fd:5b:cf:9c:05:21:f0:53:ce:08:86:c8:3d:e6:
01:6a:00:3a:ec:c9:ab:a3:65:11:4f:25:d9:b0:a3:42:f4:80:
bc:85:69:53:28:91:6d:fa:d9:8b:d1:e0:f0:e8:db:e8:2b:2d:
41:14:04:8b:1f:04:25:79:f9:d8:f7:21:55:a4:5a:a4:3c:f1:
30:f4:91:87:37:43:7e:ab:cd:54:bd:06:1a:71:df:0a:5e:25:
da:15:43:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:48 2025 by rpki-client