Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
File: pxErNcd6Sxb761YSHJdNWdVmeEs.mft (raw, json)
Hash identifier: 0XrSg8ARXyeaEm2ZflQCx214ruGRZi3GRLcPXKNyhyA=
Subject key identifier: 08:F1:D0:AB:B4:E4:CD:42:DD:54:A1:C0:93:1A:FE:5B:B3:18:C9:BC
Authority key identifier: A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
Certificate issuer: /CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Certificate serial: 0194BD17F0D51CD6D3473FE267303704A7DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: BwH9GKC4b7MR-_mPUkvo5kX6MbM.roa (hash: RyMXzPGYxLYPm9LtvHil8vaRU4zoAb2AHBWbWaC8/jg=)
2: pxErNcd6Sxb761YSHJdNWdVmeEs.crl (hash: mIRM/mEjxkq0kws+a5bl10zs9ZCm1L0Jt6uGwsRwVN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f0:d5:1c:d6:d3:47:3f:e2:67:30:37:04:a7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=08f1d0abb4e4cd42dd54a1c0931afe5bb318c9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:0a:7a:4a:e7:f2:86:94:8a:82:d5:39:e8:
6d:77:1c:7c:06:1a:e9:f0:2d:83:d7:31:76:3a:b6:
ac:f2:3f:a6:d3:74:98:75:c3:e2:12:1c:ff:84:8b:
85:0a:ff:83:95:b9:70:74:d4:45:a8:a4:bd:d8:73:
58:04:31:8d:4c:2d:b1:36:62:3f:f4:98:00:36:88:
a7:37:ed:8c:36:6f:9e:8c:b1:6e:fb:4d:82:03:f0:
0c:a1:14:c3:0e:8e:82:ac:ae:0d:4a:80:d0:8e:28:
d6:bf:b1:86:9b:f2:3c:ef:ff:a2:9c:10:4c:14:b1:
12:0d:eb:a3:da:2a:2c:dc:9b:5f:b3:7a:16:60:48:
92:0f:42:a6:f8:5d:44:65:f9:0f:67:99:9e:c8:42:
45:99:1e:3d:69:66:07:07:e9:b3:d2:74:e0:52:0c:
72:c1:ab:f1:f9:70:bd:ad:bc:f6:4b:f3:91:34:62:
2d:37:ba:f2:4b:fe:0c:19:77:e6:a8:0c:b7:d2:aa:
90:95:e2:3e:ef:cf:67:83:f8:78:fa:ae:81:a3:5f:
57:31:a8:02:30:b6:7b:aa:58:72:38:f5:3f:1a:7b:
8b:a4:bf:47:b5:59:a6:60:03:24:65:5c:43:8c:b6:
5d:13:d4:d1:ee:13:6c:81:d4:63:96:b6:c1:c9:9f:
b6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F1:D0:AB:B4:E4:CD:42:DD:54:A1:C0:93:1A:FE:5B:B3:18:C9:BC
X509v3 Authority Key Identifier:
keyid:A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a7:73:81:47:5c:67:79:d0:26:f1:0a:e4:46:80:1f:8d:29:
39:c3:fa:2a:be:b0:e7:ae:19:a9:97:77:3b:4b:dd:1f:a4:16:
8d:7f:b8:ea:a8:6b:a9:c9:16:41:b8:3b:b8:26:12:d3:c8:ff:
9c:cf:f5:7c:f9:00:88:d5:ed:d2:ab:f5:09:27:b9:41:6e:9d:
18:bc:14:f9:e7:c8:58:ba:77:01:a7:d7:3d:a2:60:6d:06:3c:
c5:ab:ae:df:a7:f7:55:b5:ac:e8:dd:01:e1:63:8e:bf:b5:d0:
90:64:95:1f:ec:53:ec:80:b1:5c:62:96:0b:74:76:aa:37:1b:
ac:43:4e:6c:5d:6d:69:2e:32:c6:dd:63:77:95:4c:2c:27:11:
5d:a9:d2:c2:db:50:96:59:d1:b7:73:b8:c1:54:8d:1f:61:8a:
c6:e2:9f:e1:c3:4b:0b:74:38:75:23:c1:f7:8c:49:f9:46:97:
fd:db:ab:63:cb:92:d2:90:96:49:91:fc:6f:dd:1f:35:c6:90:
a4:b8:66:a8:31:0a:0a:f2:09:f8:15:cc:5b:90:b1:80:a4:03:
68:54:78:a4:37:2d:db:db:07:c4:a9:b6:0b:12:24:78:7d:eb:
92:da:e3:90:30:2f:f6:08:50:5f:ea:3b:0b:66:2a:58:0c:27:
e9:56:91:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:15 2025 by rpki-client