Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
File: pRA1bcClIYlc5h-FSV4G2vehKzs.mft (raw, json)
Hash identifier: T6BYYNwjSPM8JlvPBYXVb0ve0vN66xubiIrNw3oHKYk=
Subject key identifier: 6C:3E:18:57:D7:40:A6:7F:92:4E:AD:8B:80:C0:F8:1D:48:B7:6B:83
Authority key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
Certificate issuer: /CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Certificate serial: 0194BCE0EC6849CBB7DAE7088D0A515D2834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: PyDzr8WmYcRo05FGb5UzcWZdKls.roa (hash: IYIt11a1r2unTfjZQuVOMhykI3XsxsOfurke5JUMHZc=)
2: pRA1bcClIYlc5h-FSV4G2vehKzs.crl (hash: AYgV1gHNypurm40Ok0IegvBWU3DaGeTLkMGZH4i0pxw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ec:68:49:cb:b7:da:e7:08:8d:0a:51:5d:28:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=6c3e1857d740a67f924ead8b80c0f81d48b76b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4b:44:d6:1d:b9:a0:f9:6c:68:ee:1b:14:32:
20:ab:dc:d0:e3:f9:1a:68:ea:9a:13:04:fd:0a:54:
98:1a:c1:8c:da:2e:37:83:d0:a0:a1:d4:3f:d0:1c:
9c:6c:af:3e:34:aa:b3:2e:b1:3b:86:03:36:8a:ed:
17:c2:3d:17:46:a5:2b:15:c8:c4:3c:f8:db:4b:a4:
a8:a7:5c:58:2a:e4:1d:bd:59:5f:2b:90:40:0f:4e:
84:85:d6:1e:f8:5a:19:a3:39:1a:04:5e:0e:37:0f:
4e:f0:78:c1:5a:97:7b:e8:34:98:ad:6e:38:41:58:
27:28:b8:e0:92:23:5b:32:1a:89:01:0f:21:cf:0e:
b8:0a:77:f2:8e:4b:98:5b:7f:d8:8b:d0:7a:f1:a9:
ce:54:ff:56:34:d9:a1:9b:9c:0c:d6:de:5a:05:36:
67:99:95:12:d2:6c:33:f6:3d:3b:ba:c2:24:6a:fe:
9d:3c:d9:c9:eb:1b:28:24:69:91:e3:cf:12:25:07:
82:5b:aa:1a:39:f6:58:e0:a5:9f:84:53:92:c8:58:
16:47:78:d0:f8:9a:8f:a9:09:ef:e7:49:53:ed:91:
03:47:80:c5:6c:91:51:8d:93:52:fa:c8:da:6d:d6:
2e:8f:06:eb:24:9c:7a:bb:2f:ba:41:4d:f8:4c:05:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3E:18:57:D7:40:A6:7F:92:4E:AD:8B:80:C0:F8:1D:48:B7:6B:83
X509v3 Authority Key Identifier:
keyid:A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3b:0b:54:89:83:64:aa:dc:ea:6a:93:0c:b6:e4:bb:2a:6e:
fb:03:ca:e7:5c:56:bb:7e:b0:7e:b4:84:b4:1c:e2:4e:98:12:
87:11:f7:72:92:b1:d0:5f:43:df:7e:20:fc:5b:bb:df:b5:f8:
35:21:6b:18:94:b7:75:5d:4c:a7:16:c6:d4:23:f1:f2:fa:40:
0c:03:8e:f1:f2:75:71:a5:e3:f9:00:90:e1:50:c7:49:c0:8c:
3d:f3:d4:a5:95:87:db:8b:aa:6a:63:11:c2:a7:e5:8e:2d:00:
eb:fe:fe:eb:4e:d4:1c:fc:ed:38:35:c3:55:67:a5:a1:64:62:
99:5b:e4:5e:9a:e9:16:92:eb:d9:9d:61:72:e9:ed:b0:6a:69:
9e:39:f2:ea:24:50:32:f6:f0:17:d5:bc:b0:ac:ce:85:40:60:
15:8d:47:88:37:9b:2b:27:d0:e5:a5:0b:1a:bb:c6:13:c7:cc:
bf:62:3f:8b:93:49:3a:d8:3d:86:38:f2:92:58:a1:ce:b6:82:
fc:b3:f7:0c:74:eb:33:75:3e:ca:68:e3:02:a1:39:5e:6c:6d:
59:d8:a5:79:d0:c7:5f:48:9c:80:24:81:b6:a8:53:97:21:3a:
55:bc:e5:d3:76:6c:4f:c9:cd:96:cc:de:2e:9f:c4:35:16:24:
1d:10:56:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:39 2025 by rpki-client