Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
File: pe6Sbx8VN7m-detLnXkt9B0lzZk.mft (raw, json)
Hash identifier: gD42wUpSnzsMDuSdPw1FQaZjJM97b1ByPjWVKFrsG3o=
Subject key identifier: 69:C5:EB:68:5F:D2:ED:61:C9:B5:88:7E:F9:6A:42:17:AD:AA:92:E8
Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
Certificate issuer: /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Certificate serial: 0194BCA971B3188F4738F1A1FBD1D179F07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
Manifest number: 0B01
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: WDPyyXGbTlVNzNvHMt_u6jFAfDs.roa (hash: Io6wRfSHyznIog5I1/syrGcc1ZOg6epQfuj3AIJAZhg=)
2: pe6Sbx8VN7m-detLnXkt9B0lzZk.crl (hash: n1+EqpHUk7kO97tO50l9JrCPn5ac877nilvy1Uo4kb8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:71:b3:18:8f:47:38:f1:a1:fb:d1:d1:79:f0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=69c5eb685fd2ed61c9b5887ef96a4217adaa92e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f3:79:fb:1f:ba:7a:64:8f:84:f0:ca:39:4e:
51:7c:4f:a0:be:ff:10:f5:1e:a8:f1:2a:c5:b0:cb:
1b:71:48:38:53:92:52:a3:54:be:bf:49:46:b1:f4:
5e:f3:8a:e8:55:13:b9:cc:bb:de:5a:cc:da:86:b2:
46:25:da:65:c4:ed:b2:1e:c4:27:c7:e4:a9:74:80:
b5:41:e9:d9:93:5d:25:5e:45:ca:93:3b:95:0c:6a:
58:d5:62:ac:58:a6:0a:7f:c4:9e:f0:c8:b3:91:34:
fd:40:e5:1d:67:88:05:da:eb:7b:ed:14:4c:b6:0e:
45:08:bf:65:80:32:c5:a6:af:aa:a9:ed:1d:f7:4c:
a2:3f:a7:55:6e:7a:b7:02:06:1b:51:a6:ee:d1:24:
c7:be:f2:76:04:9a:69:d8:f1:d7:38:8c:53:81:03:
45:c8:2f:c5:4a:0b:5b:ad:4b:ce:88:09:59:ec:23:
1b:d0:d8:dd:b5:85:05:77:5b:36:b0:ba:9b:39:dc:
05:f4:8b:2a:42:05:76:79:5e:28:ff:26:15:ce:bb:
cd:7b:e8:6c:fc:70:8b:5b:64:89:ea:8b:45:e9:13:
67:91:88:b3:4f:4c:4f:f7:aa:b1:48:9f:bd:ec:30:
f9:bf:59:f3:d2:bb:af:d8:54:84:f4:b5:d3:5d:35:
5c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C5:EB:68:5F:D2:ED:61:C9:B5:88:7E:F9:6A:42:17:AD:AA:92:E8
X509v3 Authority Key Identifier:
keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b7:36:3b:ca:54:1e:fe:95:cd:2b:61:85:e3:ad:f4:97:cb:
39:88:eb:45:1a:21:50:b2:9c:bd:e8:b3:58:6f:d4:e5:7f:c4:
39:b0:c1:2f:b2:1d:38:1e:7e:f4:81:75:f3:79:15:b6:4a:04:
7f:59:6d:a2:17:1c:b3:0b:8b:90:ab:45:6c:bf:d9:52:ca:25:
ae:8b:f5:4c:10:7d:3b:0d:51:a2:cc:b1:ef:73:8f:d0:1b:c0:
65:73:e0:74:1f:3a:48:8d:34:1c:48:7b:07:b0:a2:8c:96:cd:
9a:72:1c:80:8a:bb:51:7b:0e:dd:0a:44:7a:f3:fc:fa:eb:ca:
0f:c1:24:3d:43:22:aa:ea:7f:20:8b:ff:be:38:df:42:6f:74:
32:1c:9a:46:35:70:8d:97:9d:65:85:c6:22:37:a1:26:6a:ce:
6b:db:4f:cd:f3:da:a9:f0:a5:8f:a0:d8:f3:97:d2:69:4e:46:
11:29:d1:f5:e9:38:c3:30:7a:c1:ed:bd:30:0f:1e:08:69:6d:
a1:cf:5d:f9:fe:ba:5b:9e:13:3a:5d:68:f6:8e:db:28:ed:60:
a6:2f:f7:0f:c5:1b:1f:6b:5f:d4:aa:bf:39:4b:58:eb:10:ba:
64:14:c5:c1:2e:7d:1e:24:ef:7b:7a:78:2f:fe:65:d0:27:17:
16:bb:4a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:37 2025 by rpki-client