Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
File: pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft (raw, json)
Hash identifier: +aPwmTGkgXNBmxY4jPc2u+IrVVtWcO7q1V1qqWKMhMI=
Subject key identifier: 31:1C:FB:D1:07:E4:F5:31:35:D0:56:B0:5C:BC:97:E9:F3:79:6F:2F
Authority key identifier: A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B
Certificate issuer: /CN=a4057bd139c9fd2d0518b72039c3defcd101a55b
Certificate serial: 0194BCA9D67FB579E1C14412C7B356480867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
Manifest number: 0838
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: Zul1tgj5h7XyL00R81W1mi6g1V0.roa (hash: JA2Lp3OQPetYYVSiRbEJs9OwBpQrX9gJ6sScomlZ4Xo=)
2: pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl (hash: 4fYu/M1YKI3cZ+x8LbYIzpayJ+IzNbTfK26yQe2CAf4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d6:7f:b5:79:e1:c1:44:12:c7:b3:56:48:08:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4057bd139c9fd2d0518b72039c3defcd101a55b
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=311cfbd107e4f53135d056b05cbc97e9f3796f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9a:88:38:a9:03:88:da:22:11:75:d4:f3:b1:
31:3f:7a:8b:be:86:60:dc:3f:18:44:bf:a6:ae:c8:
c0:92:56:d5:b5:87:da:43:5b:08:42:c6:15:f0:12:
fd:9f:0d:4c:ee:ee:22:24:44:6f:71:07:dc:5e:c2:
c6:10:c3:a4:88:af:14:9f:9c:9d:a4:1a:25:0a:b6:
28:e1:5b:d5:9f:93:67:be:b7:1b:2f:08:bb:c4:af:
51:2b:ff:30:73:f1:16:47:79:7f:21:78:98:4f:08:
43:87:51:9c:6d:62:7f:c6:f3:98:8e:fc:ef:9f:1e:
5c:a0:81:cd:3a:55:f1:da:86:ef:0c:0f:f7:92:5a:
df:30:76:5f:d1:28:95:46:a6:af:9f:aa:fc:1c:9c:
db:a1:01:d5:bc:7d:d9:99:ec:d7:83:2a:ba:dc:fc:
ae:7a:e3:39:2d:62:e5:43:89:3d:e5:a7:b2:7f:da:
62:1a:69:1e:7b:77:b9:1e:db:e3:d2:5f:3c:ae:9c:
d6:de:b2:7a:90:9a:10:d0:7d:68:2f:5a:d8:55:ce:
39:ca:a9:c8:7b:e5:0e:dd:df:c5:d4:b9:1a:40:2e:
d9:30:9d:e9:02:f1:af:40:ab:92:e2:2c:21:88:5f:
e3:26:a3:13:7f:eb:2a:d9:87:cf:2c:e4:3d:88:84:
2d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1C:FB:D1:07:E4:F5:31:35:D0:56:B0:5C:BC:97:E9:F3:79:6F:2F
X509v3 Authority Key Identifier:
keyid:A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:10:3a:18:dc:05:fe:4b:74:93:a9:b2:52:7b:99:71:51:21:
5d:3d:43:0d:08:01:02:6d:e0:c3:69:b5:b8:25:79:23:22:4e:
da:e0:f5:84:11:c8:0f:bc:d5:9b:4a:e2:07:95:12:10:05:5b:
5a:8d:ac:b8:56:22:91:c0:a6:1b:45:2a:39:e9:c6:62:95:fa:
ec:2b:b6:24:ad:5c:8e:a7:5a:01:d0:32:60:07:a6:9b:61:a6:
e8:fe:a0:36:1a:11:3c:b9:c8:61:46:45:e7:20:11:43:8f:4f:
2f:d7:73:39:d2:74:86:71:d0:57:e5:cc:6e:34:2f:c9:f5:46:
97:b3:5c:85:8b:8f:d5:f2:56:bf:59:e8:21:d4:18:86:8f:2d:
e8:4c:d1:6e:56:5a:e9:40:f4:d5:5e:c7:f8:29:6e:3f:24:db:
7c:98:7c:87:f5:d6:a9:96:35:10:82:60:2b:44:f1:f0:c7:7a:
fe:d9:05:95:c1:b2:e7:71:a6:a0:e9:53:0b:a4:be:c6:82:9f:
12:82:f3:fa:c9:24:81:26:23:40:48:88:7e:e2:d6:5f:c4:c9:
d3:98:3d:d7:b5:78:87:2a:0d:7d:84:89:a1:dd:54:14:db:67:
89:4a:94:a7:f7:06:ac:c8:a1:35:31:b2:06:91:ab:f5:7d:d5:
05:e6:93:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:13:59 2025 by rpki-client