Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json)
Hash identifier: bjIeEMBXY+8O/8fct555wQE8+VPXI9Hc/CiCPR2g6vI=
Subject key identifier: AE:C9:0F:8B:7C:EC:E4:0E:63:DC:BA:A9:BB:73:5E:19:00:C8:19:C9
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial: 0194BD17B1054BE202B908995CE6BB79D026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: kTZXaLi1BGAeOpF60CVflvTOQdX0t+CGw0ydcCORsM8=)
2: rVIEtQUeZ960hMeEwx6AF679dhM.roa (hash: s8qUIneeKVi7X6yParz6sZwUc96D/kko1q8RujoMkJ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b1:05:4b:e2:02:b9:08:99:5c:e6:bb:79:d0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=aec90f8b7cece40e63dcbaa9bb735e1900c819c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:80:2d:30:d8:c9:90:46:22:d3:b0:1c:76:
2e:8b:01:80:cf:97:d1:4a:25:8e:c5:0a:46:75:13:
27:66:19:6f:b6:29:2c:41:fe:03:99:cb:f6:e4:7e:
99:3b:08:3d:12:d0:e1:0f:f9:7e:05:3c:f1:45:c5:
33:ff:2f:74:1d:55:8c:13:9a:2f:8e:ee:42:a2:0b:
4c:dc:fc:d4:34:41:fa:f7:b0:d1:46:75:6e:b2:e3:
e3:46:0a:a2:d3:95:45:88:0f:7e:61:7b:e6:ba:3c:
ce:db:25:cd:8d:f1:b6:26:a1:e6:22:08:f9:d1:37:
ca:fa:9d:e4:1e:c1:52:ad:00:55:2a:7f:61:f3:c2:
fb:dd:69:de:b9:ed:1b:b0:41:87:9e:9b:d8:7a:20:
7c:4b:8d:a1:b1:81:c0:fa:e4:c2:5d:10:97:d6:0d:
ff:e2:6c:c6:b2:d6:5e:5b:d5:21:db:48:98:db:1c:
3d:15:7c:2f:55:8e:95:e6:c2:f0:2d:46:1c:eb:65:
41:9a:c7:26:f5:47:c2:17:33:a2:6d:7f:7b:70:58:
e6:23:93:1b:ab:c6:6a:4a:b5:7f:05:e1:65:3b:de:
f3:bc:fc:4d:ab:a1:d1:80:84:84:bb:5f:bc:49:a2:
2e:0c:54:3f:b2:b2:ad:69:74:9f:ef:09:1b:73:e1:
dd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C9:0F:8B:7C:EC:E4:0E:63:DC:BA:A9:BB:73:5E:19:00:C8:19:C9
X509v3 Authority Key Identifier:
keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:75:b2:c5:15:96:f3:b3:29:34:ab:c4:54:db:17:41:33:1b:
da:0c:c5:8b:6f:cf:1f:2b:39:37:34:45:cb:95:48:5a:96:2f:
75:2e:49:64:3e:a4:e9:2b:c1:bd:93:25:6a:9f:0d:d7:52:a0:
2b:64:42:6b:c2:31:8b:3f:4f:bf:17:04:fe:9a:92:33:fe:a4:
de:49:1c:4e:17:e1:57:ac:e6:89:ee:67:54:af:f6:77:a3:b4:
b0:ee:d6:ec:35:41:31:d1:37:b8:d1:c9:1b:36:db:74:a6:8e:
66:ca:7b:58:20:1a:f5:ac:56:3f:c8:f4:7f:b9:94:cf:a2:43:
ad:c6:05:1c:af:d7:ff:15:1e:47:64:85:d5:ec:df:e5:6f:98:
ab:6f:8d:52:65:98:24:5c:0b:9d:1c:df:e4:0f:10:de:05:11:
d2:f6:4d:07:b4:79:6e:07:c1:79:f9:90:bd:47:51:b3:f0:de:
a8:09:3a:dd:45:50:b7:1f:60:9d:ef:bf:37:e0:90:55:8f:29:
a6:8a:b1:e5:11:2d:ca:17:6f:0e:7a:b2:98:a3:68:ae:00:00:
19:7b:a2:d7:0b:ac:f3:3c:65:b4:6d:4c:0f:51:7d:d0:37:29:
08:51:d9:a2:68:6a:01:30:54:ea:b2:d2:46:3d:73:ec:0c:fa:
c5:37:6d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:45 2025 by rpki-client