Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: H+qdyvVtFjDHbv75tumyTWh67cdcJlikgQLtVQGy6fg=
Subject key identifier: F8:DB:97:79:E8:CE:78:D1:EA:85:62:48:CD:8C:53:58:8A:F5:A6:08
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 0194BCA9F8D17B65EF810147C4F4CE013B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 0DF2
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: NFHPImufF3uRqUgALoiOKsyNAWY.roa (hash: P38WvGerxAQEhXHw97XFuU4GA9ZzpqGUq811jnutzZs=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: ePEQPZS4lSwdtOD1S4H1w421XY0/xaWFHlok2dXWnes=)
3: mI6j4UadWN59Ry8sBr4KvB0K8Yc.roa (hash: OgHmwZEN5FVoA8wv5XCNl8ngdl4mQaBcOydLvBf7mUc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f8:d1:7b:65:ef:81:01:47:c4:f4:ce:01:3b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=f8db9779e8ce78d1ea856248cd8c53588af5a608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cb:74:cf:db:bb:80:7d:0b:63:20:0a:86:29:
62:d6:c6:fa:3d:62:41:f9:88:35:12:07:28:48:8e:
f2:5a:05:70:6d:37:69:ca:97:90:67:98:43:1d:9d:
3e:ea:f3:c2:3a:0d:bd:48:72:1d:ba:9a:a9:9d:b9:
ba:6f:cd:97:86:a0:06:3b:47:d4:0b:49:d2:ab:fc:
fc:e8:2a:49:f9:1b:b4:70:f7:c2:64:c6:8b:7f:13:
f4:dd:19:98:e9:bf:52:9c:6b:00:82:4e:88:9b:ba:
46:f6:45:a9:b2:ed:e6:8d:e2:e6:d8:99:a0:30:5e:
3c:22:ea:c3:e0:89:8a:de:64:21:6c:41:2b:a1:72:
b1:6b:63:53:4d:0b:a1:d2:d9:ab:4e:2e:fd:c4:51:
5e:31:0a:4e:21:05:c1:f8:1a:a4:ac:61:7b:25:64:
87:c4:f7:2c:27:36:69:ed:33:b0:c5:75:52:0a:b1:
2c:4f:84:ff:89:b7:9a:c7:3c:33:74:0d:6a:ff:b5:
b0:6c:a2:5b:1d:07:74:db:00:4c:aa:0e:62:bf:4c:
d5:79:1c:22:5c:1e:48:75:c2:43:69:32:98:20:ff:
88:30:0d:87:2b:16:25:17:0d:26:15:b7:18:65:2a:
26:77:96:c6:15:2d:87:fa:ff:38:77:b7:49:89:cb:
74:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DB:97:79:E8:CE:78:D1:EA:85:62:48:CD:8C:53:58:8A:F5:A6:08
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ce:df:ec:1f:c1:74:72:8a:06:06:41:64:27:b6:8d:1e:6b:
ab:00:44:b4:69:89:b2:a6:b6:79:32:b5:be:fb:2f:ee:7c:0a:
43:f7:08:e4:4a:4d:e5:23:b0:8d:fe:9f:ab:33:4a:85:8f:8e:
29:07:36:75:5b:b2:58:47:78:ad:00:0a:9e:5f:6f:f6:60:24:
bf:af:c6:60:0c:ce:cc:d5:05:36:04:22:66:72:d4:11:b7:71:
86:3f:dc:cc:2e:56:b1:78:b9:49:60:1b:0c:16:52:c8:dc:73:
84:5a:98:2a:b1:b9:cc:36:5c:98:ea:a3:e1:78:3c:cb:cc:a6:
86:cb:31:ab:29:dc:a8:cc:a7:57:e4:be:b2:02:6f:1b:be:99:
50:08:de:22:1f:a3:ba:ce:25:b2:e8:65:65:11:35:4e:c8:14:
19:f7:b8:b1:67:eb:ee:e8:c2:8a:7b:07:94:42:6e:49:e7:e9:
7c:ed:08:63:97:37:ce:e8:00:46:42:96:da:0e:ec:50:e7:47:
f3:97:ff:db:2e:b0:dd:45:b4:ba:e7:b8:ea:b0:f0:ba:89:10:
ed:d8:11:a0:b5:92:02:60:da:64:df:6b:f9:a6:bf:af:d6:96:
81:0a:72:19:b9:4f:ac:8e:09:bc:d6:f9:cd:22:f3:17:0a:e7:
f5:9f:75:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:52 2025 by rpki-client