Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
File: PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft (raw, json)
Hash identifier: HUnx7PcAmHfvGH57isM+ZwtNdDAEuto3/ZV8VdQbeH4=
Subject key identifier: 39:14:48:A8:78:BE:9B:E1:63:7F:B4:9C:20:35:D3:68:82:64:19:F9
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Certificate issuer: /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial: 0194BBCEF391CAB18CEC1879764FC1A0B9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
Manifest number: 0393
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: 6px4oQpQxURR5IW0gWezwsCgYUA.roa (hash: aKqSySkiQ4Z3UFY+0fQdpN2yWiQF1RqxRVXfSVXmnd4=)
2: PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl (hash: Ae+Ulv8jlXoXq87+fTmiW5pVc4+nrvN0Nc8ci3gwf+8=)
3: gdLyflAsCyF8taKXwI9Ohy9cbTg.roa (hash: watnTPY7ltSg0Ey7o57Cxg1ndShvduTve51cc1ZXeew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f3:91:ca:b1:8c:ec:18:79:76:4f:c1:a0:b9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=391448a878be9be1637fb49c2035d368826419f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:49:60:e9:dc:0e:63:62:b9:d2:83:1e:1b:46:
ca:08:47:d2:cc:76:ef:00:e1:a0:f9:91:14:c5:35:
18:f6:3d:42:c5:03:4d:9c:43:86:49:74:6e:38:48:
4f:f8:e6:16:b4:40:c5:2a:18:31:52:e2:e9:fa:36:
e3:4a:a0:94:4d:80:40:38:a3:6f:30:f0:fd:3e:4b:
4d:93:7f:64:01:74:1d:31:5f:fb:f1:60:b4:2d:a1:
43:b2:6c:b0:3b:ef:ec:12:d1:ff:96:66:f5:55:29:
b0:58:66:70:aa:92:eb:e7:7f:db:57:ec:2c:e6:f4:
b2:ed:c7:dd:b5:5a:cc:0f:d8:a6:37:a4:72:81:e9:
a3:49:e6:30:5f:31:bc:72:80:04:27:48:41:12:08:
38:9e:74:0e:74:e0:31:94:a0:6b:ff:45:15:1b:e1:
02:e7:da:85:f8:de:42:d4:33:a9:7c:95:88:1b:59:
12:68:77:dd:e5:08:16:a4:91:8e:27:27:da:24:c7:
07:db:aa:da:4d:6e:30:72:92:f0:e0:88:d1:d1:11:
87:0b:b6:81:2f:da:b2:b4:67:a0:a4:21:1f:d6:72:
a2:13:43:bf:f1:e3:23:74:45:0e:d5:e4:38:f5:0e:
5d:6d:6c:1e:00:a3:50:e7:16:0d:36:41:4d:ff:21:
67:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:14:48:A8:78:BE:9B:E1:63:7F:B4:9C:20:35:D3:68:82:64:19:F9
X509v3 Authority Key Identifier:
keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f2:02:e7:d2:5a:c0:65:fc:01:13:c7:5f:3f:0f:61:58:23:
76:45:50:f6:84:61:31:29:84:bf:9c:44:b3:86:67:19:f7:97:
a7:fd:ee:16:0e:f3:47:e1:8f:86:95:31:44:11:ea:34:77:93:
7d:d1:b0:57:a2:4e:3b:0b:25:df:eb:c6:48:e5:1e:ef:b9:c1:
f0:36:8b:5d:58:98:c9:88:ff:f5:3f:19:92:39:3a:bf:a5:a7:
df:54:3a:13:47:04:f7:21:e2:1e:d4:5d:17:a8:46:27:e6:48:
fc:26:72:c9:b5:b5:10:90:5b:90:14:ae:86:17:dc:0f:f7:27:
de:40:71:00:fa:2a:61:70:ff:69:96:9c:1f:54:43:b8:2d:6e:
62:35:c2:7c:0a:a0:5e:a5:2c:4d:1c:01:2f:21:8a:0f:8f:2c:
c4:f7:2d:1a:a4:73:f9:bf:60:f4:28:cc:74:52:dd:e6:11:54:
76:30:62:7c:a4:77:26:31:ea:bf:7f:d9:8c:f8:b6:80:1c:be:
96:72:9b:58:6e:27:4b:89:9a:48:5c:3c:6c:00:fa:4b:58:22:
f9:85:34:47:c2:d3:d4:48:d7:c5:17:96:3d:41:23:71:6d:70:
f0:8f:ed:e3:4f:44:a1:67:d0:b4:93:75:bf:81:03:e9:4c:30:
90:6b:7a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:30 2025 by rpki-client