Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier: cPdO0UaFJgJI7W1oUKhrRt6E4jiTwU341V8LcqKnTQc=
Subject key identifier: 30:FC:93:2C:28:05:55:6A:50:95:0A:88:BB:F5:AB:60:96:7B:FE:FB
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 0194BD4E656DC96D2AB1C9645864EF16A647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number: 0529
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: AcEkQsHgOk9cJvafcwY_24-gqJU.roa (hash: P0WFMbng9Ro3ND0yeTy1ArY8fd/+6N/p4Vx6hJOnIpk=)
2: AhGacAZRO8Gx3hNBgiDjl4oZgqI.roa (hash: /EpJOq122VUgjLXObaWDOaWwB7lmX3CrZN3WS11mATY=)
3: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: RO5ZnmxYJpbHBLNpeQVBrhGg5KPmno2HduXpPXPCuhM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:65:6d:c9:6d:2a:b1:c9:64:58:64:ef:16:a6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=30fc932c2805556a50950a88bbf5ab60967bfefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:86:5b:f6:53:35:62:7a:c9:13:73:97:3f:
8b:2a:06:38:c5:6d:8f:b3:21:0a:de:13:39:7a:47:
80:10:68:3e:cc:3d:f7:fb:17:da:7d:6b:e3:68:8f:
3b:5e:97:a2:70:1c:84:14:70:1e:84:e7:c9:7a:e7:
4f:dc:bd:68:91:ee:7e:99:52:44:ba:51:50:b2:89:
7e:8a:6b:fc:c7:40:1b:0b:31:6a:b7:f6:b1:b1:fc:
ca:55:bd:55:64:9e:64:e9:35:48:f6:9e:4b:12:53:
cd:87:89:02:8a:4d:a8:cb:d1:53:4a:30:f9:0f:8a:
52:78:04:2b:d7:c5:1d:cb:40:e0:a9:15:ee:65:be:
12:8a:2c:b8:a4:62:58:54:63:ef:3d:31:ae:32:aa:
41:83:59:87:62:f4:de:6f:f2:14:4b:a9:a8:dc:b8:
ac:0a:58:aa:0f:9a:a0:29:e5:b2:31:3c:7c:68:06:
7b:28:0d:fe:2b:48:cf:0b:96:a2:02:7b:e2:9d:9c:
64:d9:2d:1b:21:a0:f9:6e:4a:8b:57:44:d0:04:50:
0c:c1:93:20:e7:89:dd:eb:0a:04:47:e0:6a:c0:52:
5f:06:1e:24:8c:36:ec:ef:b0:8a:42:40:91:65:05:
e1:e5:40:dc:8a:bf:b1:ca:93:a9:3e:4f:0d:24:f4:
44:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FC:93:2C:28:05:55:6A:50:95:0A:88:BB:F5:AB:60:96:7B:FE:FB
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:43:71:3e:8c:cf:99:87:bd:e6:b7:94:8d:22:29:f4:f2:4c:
54:e0:22:59:b6:6f:c0:2b:ef:a3:19:cb:86:63:c4:cc:f4:ec:
4a:df:e3:61:58:b5:ce:74:ae:cc:73:eb:d5:1d:02:fd:88:1f:
25:6f:96:27:99:fb:0b:ae:5c:70:65:c8:fb:7f:b7:62:2f:08:
ab:42:71:2f:f4:87:88:ef:d7:1a:50:5b:2f:5f:7e:66:65:47:
09:7a:d5:04:76:6e:85:31:7c:47:0a:da:ee:fa:5c:fd:bc:83:
8a:86:5f:9c:37:1b:48:24:20:f7:a8:7a:25:6b:32:25:a7:46:
6a:c9:54:6b:37:1a:8b:f4:4c:84:6b:2f:70:43:ad:a0:b5:d3:
0b:a7:09:b9:a5:4e:83:87:78:2e:d8:4f:ee:7b:97:96:a5:5a:
8e:fe:2e:e0:5e:02:63:a3:26:12:2c:9b:0b:12:7c:00:e4:9f:
cb:a8:ac:d9:b4:0c:8c:7f:0b:75:b5:1b:2a:d6:33:f3:f3:16:
48:f2:0c:62:61:78:16:1b:72:11:2c:79:7d:74:b7:90:c0:35:
5d:f2:96:14:e0:71:04:23:e3:84:d9:e6:b6:a3:ee:06:e1:da:
ed:dd:bf:00:22:ae:fd:57:b4:ba:03:c2:04:48:cc:85:3c:92:
21:e7:4c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:02 2025 by rpki-client