Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
File: PrRw_U1nQhL_yCqZNvP-JUvszmY.mft (raw, json)
Hash identifier: PIcx20ymDT7N3QrespD0cqtprtquiVH5kAp0rkwmj0M=
Subject key identifier: D4:5A:EF:1F:21:12:7B:42:40:82:7A:AB:0A:44:F4:26:C8:8A:B6:ED
Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Certificate issuer: /CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Certificate serial: 0194BD4E6D3869CB6ED56C1D113F9D8AFFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: PrRw_U1nQhL_yCqZNvP-JUvszmY.crl (hash: wq9AEmdHd+6WIW2d36BpXUss3YpbogPLbVqNuveOgE8=)
2: aATeS7_Zg3KdAOaKx-n1ZvynPH4.roa (hash: BiTKK6ZatcQ+uoSfiABBAw2jPEjkMuOpjqegStTZ06Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6d:38:69:cb:6e:d5:6c:1d:11:3f:9d:8a:ff:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=d45aef1f21127b4240827aab0a44f426c88ab6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:f9:66:6b:9a:75:e3:a5:c6:00:5e:39:44:
86:11:b9:e9:e8:e7:5a:07:96:fb:1c:de:5f:c1:d9:
76:03:61:9f:96:c7:c5:66:8b:fd:46:ad:28:eb:20:
78:c0:00:e1:29:9c:73:03:2d:8e:dc:dc:15:62:44:
d1:48:6e:cb:68:45:26:66:62:0d:38:ea:f1:97:e1:
7d:e2:90:9c:3b:42:4c:dd:87:dd:0c:51:e6:84:25:
7c:d7:7f:76:f4:6f:e8:e2:93:49:55:70:66:c8:84:
3c:2c:00:ac:3d:56:f1:22:9d:65:58:54:bc:62:aa:
be:88:95:00:e6:8c:c9:03:f3:40:de:14:d8:43:0f:
86:56:7b:20:93:9c:cc:32:89:22:cf:70:41:4e:66:
90:92:cc:a5:35:10:0f:b5:9f:33:bb:0c:eb:4a:80:
8a:26:c3:9c:fc:41:86:4f:fe:7f:27:e1:d1:18:1d:
fe:e5:56:4a:89:62:14:6a:0b:23:77:e5:29:71:88:
0d:6e:b6:a8:46:ba:a7:f1:c1:10:9b:09:59:13:cf:
0c:8f:b0:6b:86:73:23:79:f7:82:f0:58:31:19:57:
44:1d:a0:07:5f:3b:70:b7:f8:9d:ba:8e:7f:1e:bf:
e9:bc:5d:33:50:5a:80:74:7d:de:f2:38:7d:75:2d:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5A:EF:1F:21:12:7B:42:40:82:7A:AB:0A:44:F4:26:C8:8A:B6:ED
X509v3 Authority Key Identifier:
keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:24:f6:83:ac:49:2d:45:91:c5:b1:ca:5b:b0:24:09:c4:43:
c7:6e:f3:a8:3a:1e:75:e0:26:30:88:c2:da:be:7d:9d:05:82:
86:db:6c:19:39:92:a4:11:0e:3a:33:65:78:fd:01:e0:b9:6b:
83:d6:bc:e5:31:90:81:01:e2:a5:c5:4e:f2:56:e2:76:ef:ab:
29:ce:55:5a:79:d1:14:21:bc:f6:60:7c:47:ab:f9:bf:ea:2e:
98:94:33:77:a5:c7:54:22:20:41:c6:a0:a8:fb:b9:45:0f:a4:
45:1a:9c:a4:4a:d7:29:81:a2:bc:5d:28:43:69:b0:07:8c:8b:
b2:71:8b:96:2a:9b:7a:b4:2b:91:88:5a:c6:c1:47:ae:b1:a6:
23:41:52:e9:c1:b7:31:aa:a2:7a:a9:96:9b:b2:8f:43:de:98:
8a:78:41:fa:98:c8:03:50:26:9f:6d:3e:5b:ae:72:a8:bf:67:
c6:53:fe:c8:a5:70:b6:6c:3b:97:89:f2:af:53:72:01:f8:d4:
1e:aa:6a:87:e3:9e:17:0c:d4:5b:31:1c:ae:53:a2:c8:69:85:
23:09:48:57:cc:f1:dc:4e:7e:d4:44:67:96:b4:fc:d0:9d:8f:
8c:85:06:29:ef:bd:ad:f9:51:3b:48:33:9e:df:98:5a:c4:38:
90:33:71:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:59 2025 by rpki-client