Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
File: PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft (raw, json)
Hash identifier: WlpSKS7cYeLy6x9TjTgGokSoABC0SY08nCKo83dQEOM=
Subject key identifier: 47:86:F9:82:BF:BC:6F:B9:B2:34:0E:71:FE:E8:65:A9:60:15:78:EB
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial: 0194BBCE72CA56AD41F9E7365756E233F771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
Manifest number: 08DD
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: 67x0RIwxvCQxnG3Au3eKNDjEpCE.roa (hash: YF0UTegDWCgkb9/1b5nr7Jg6qUR+mG0oYBkmbLcp5gk=)
2: Oioxvop9FV5K4rtOSvh02jeAj-g.roa (hash: 1Oax9rdfDuKch357rIzJmOSBUOYvQbkuoDRF8in9c8A=)
3: PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl (hash: FfeVXQM2BheRZ5oKDwGddCiMI4oKZ2JxEfwx2QNxG7g=)
4: _jMez6UKzbPOPelQcGjdJ8x6E6w.roa (hash: ZU7ujP/uBnbOS9GuRHg5V1uQ0qPQ1zH6qf1VkFt1340=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:72:ca:56:ad:41:f9:e7:36:57:56:e2:33:f7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=4786f982bfbc6fb9b2340e71fee865a9601578eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:13:c2:da:be:1c:d2:8c:bc:8e:0b:a7:dc:
cb:4e:7e:e6:df:5a:f5:41:b9:db:94:90:5c:93:63:
63:80:3c:c5:8e:cc:c7:2a:e2:28:80:5e:6d:ef:f7:
07:a4:b8:0b:62:f9:77:0f:f2:8b:41:3e:34:32:09:
15:39:80:b0:ad:ce:53:2c:30:e7:f7:e2:dd:ad:4c:
f5:95:a6:61:1c:32:83:4d:87:c3:35:75:88:11:36:
fa:53:c8:48:ac:3d:a6:77:4d:46:63:fd:7d:15:56:
e7:9b:92:02:4b:2d:fe:3b:05:c7:cd:57:0f:83:36:
d5:b4:f0:74:40:15:27:0c:6a:2e:ce:bd:16:3e:41:
94:50:30:37:72:6a:39:c3:50:0b:cb:91:d3:3e:25:
a3:5e:24:57:8e:ae:c0:dd:14:d9:c3:a2:71:62:dd:
5a:6c:ec:e2:5b:6e:31:88:60:36:cb:fe:0b:32:90:
67:c6:c5:73:89:90:17:53:f3:c0:e7:f3:ee:63:55:
1d:f4:dc:e9:cf:9f:b9:52:38:73:c9:9c:f5:fe:da:
8c:ce:ac:4c:27:61:ac:47:74:c4:ef:7e:36:00:57:
42:b2:60:6e:31:88:97:7a:7c:5f:42:37:81:3b:1f:
00:81:f0:08:a4:43:60:77:0d:cd:45:6c:44:7c:ab:
e9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:86:F9:82:BF:BC:6F:B9:B2:34:0E:71:FE:E8:65:A9:60:15:78:EB
X509v3 Authority Key Identifier:
keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7c:04:c2:cf:db:07:10:8e:e4:09:ab:fd:17:16:bf:ed:12:
24:4b:5c:8a:fa:b1:31:6b:36:45:b1:c4:e6:1d:3a:46:29:e3:
e6:10:3d:0a:dd:f5:9e:c3:82:9d:3e:19:5f:38:1a:97:b3:2e:
65:d7:d7:23:6e:01:12:91:14:0b:65:9a:21:8e:bd:1a:18:8c:
5f:9e:50:c8:1b:bd:c3:8b:5a:ca:89:41:e9:af:8a:8d:c6:f3:
44:19:b6:5f:ec:2d:6e:c5:cd:c5:3b:c6:ef:d3:a6:cb:3b:51:
61:b3:b0:d6:b9:f3:0d:b1:3f:17:43:93:0b:ed:b9:00:34:58:
00:0a:5c:77:b2:12:2a:2b:e6:40:f9:5f:9f:b1:30:6d:37:0d:
02:fb:49:d1:ed:96:d3:ab:28:79:7a:97:14:90:8b:03:52:a2:
d4:b9:10:ca:19:e3:bf:19:4e:4e:ae:32:16:53:ce:72:a5:ee:
97:a8:f7:6e:e4:2d:4b:84:d6:2a:8c:e3:9c:f0:95:59:68:b5:
85:55:65:bf:b9:bd:3e:64:d5:19:2f:16:a1:2d:a2:d8:50:23:
d8:cb:54:2e:f6:1c:54:9e:0c:11:30:c1:61:2a:07:ef:b8:a6:
91:84:c5:2c:f4:da:36:aa:ad:fc:f8:22:9c:f9:32:45:05:ce:
c5:b5:99:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:27:57 2025 by rpki-client