Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier: e/Z1FcKuzPhAHILVnauS+t2v3xArJPcoYUuix/V6k6s=
Subject key identifier: 90:5B:5C:24:9D:73:73:05:F1:63:B7:0B:39:4E:24:63:8B:E2:B6:9A
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 0194BD855DFA728EC9B75A024DFE49F89E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: Ql7ItDDdq7bhBxPpwqaRhSHm764.roa (hash: C5tr2QQM8mt5nL4T08yqpG8HFjoTMzn0Nfj9PYa0vX4=)
2: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: 5YEaZLVcWKy9j4hBhjqzhi5cWFMyOTc/c23O1HDZG5k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5d:fa:72:8e:c9:b7:5a:02:4d:fe:49:f8:9e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=905b5c249d737305f163b70b394e24638be2b69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:5c:53:06:51:d1:85:4c:2b:30:4b:1f:43:
a7:29:5d:91:5b:f4:eb:51:b2:4a:e8:87:bd:f7:da:
2c:f9:c6:b6:d9:17:b8:da:59:b4:59:5c:9b:a0:e0:
62:71:10:80:0b:f8:9b:f5:0b:de:c7:fc:6c:3a:28:
75:f8:58:7a:c4:da:ee:39:e9:7b:fe:e6:93:45:0c:
7c:65:09:c1:6e:ae:6c:9c:ab:05:02:61:14:95:c9:
e4:a1:01:a3:d9:83:f1:95:6d:22:66:08:6e:84:a2:
59:f7:b3:dd:c5:a5:b8:ae:b8:9d:08:09:4d:14:5f:
f3:64:c0:b7:ac:78:e8:ab:b9:20:fb:e0:d3:d8:83:
fb:b7:e0:4e:af:7b:04:fa:fc:b4:cf:49:f2:45:c6:
b7:2d:8d:be:39:a5:1b:60:2f:a0:df:ae:35:e2:9d:
44:5c:f8:54:88:63:a2:a2:28:bb:29:6e:18:f1:f7:
33:51:29:e4:45:e0:95:8c:1f:7d:b8:0a:eb:79:34:
7e:1e:10:21:0a:ff:1e:9c:1c:33:47:46:79:30:3f:
fe:05:25:03:6d:cf:67:f1:be:fe:d4:b9:dd:fa:0d:
3f:88:8e:50:b4:d8:9c:80:ad:3e:5a:b3:e0:c8:f7:
ff:05:d3:b6:c1:41:67:77:b2:50:cc:5c:1b:cf:68:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5B:5C:24:9D:73:73:05:F1:63:B7:0B:39:4E:24:63:8B:E2:B6:9A
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:43:51:ce:8b:54:c5:15:42:5d:e1:06:67:ba:31:fb:c0:08:
0b:3a:48:c7:dd:0b:03:53:17:d6:d2:3c:82:b8:64:a1:08:05:
01:57:7e:ee:0f:d5:e4:8d:73:18:d8:f2:6e:e1:5c:96:60:d4:
5f:6e:51:ce:d8:cf:ca:08:d5:a9:7c:6b:4d:87:a2:c9:fe:cf:
7b:2b:71:e8:13:20:9c:4c:da:aa:be:b1:ed:39:fc:14:5b:f7:
4f:dd:ae:90:d1:40:97:83:99:fb:df:33:d4:cc:01:63:b1:e2:
3c:56:40:12:ff:34:35:4a:83:bf:b5:d4:79:db:c9:a6:95:93:
07:65:f9:64:ad:a5:09:b9:16:36:fd:70:e1:dd:83:d2:56:2c:
82:b8:3f:10:a9:7a:c9:36:76:37:3f:7b:c2:5b:30:9c:10:15:
48:f4:d3:35:36:3e:d3:91:1b:a1:3e:3d:e5:45:79:0a:9a:85:
02:27:c4:18:4f:fb:4d:ba:85:95:93:f3:6a:bd:5c:97:0d:c0:
5c:32:7e:23:a6:10:c5:11:a0:2c:d5:ee:c0:77:10:30:79:22:
17:ff:a4:55:b3:f0:ed:ef:91:92:3f:55:b7:a6:a9:64:a6:e5:
a8:e0:e2:7d:56:6d:ff:61:59:36:52:6c:56:0a:4c:88:98:9e:
7c:f8:87:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:18 2025 by rpki-client