Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
File: pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft (raw, json)
Hash identifier: H8mWUwWeLeeFIoMV5KoYvMuacptI+a0tKE88PwPviOc=
Subject key identifier: 84:B5:1A:EA:8E:26:C3:0B:28:A1:1F:3C:4A:93:87:CF:7F:9F:D1:2D
Authority key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
Certificate issuer: /CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Certificate serial: 0194BC72C9869B8148CE1B246B1EE51A5EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: LnuT6eEdb88-TghvQ_FZnRefVyk.roa (hash: XQk1e8dAGrgYT1azOGp5hpmR57maWf6UhLO79IbQj1k=)
2: pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl (hash: CfG4LC/GxtQPxvcVUCLk6uJD8NGRU6R+aR2moPOsxb4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c9:86:9b:81:48:ce:1b:24:6b:1e:e5:1a:5e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=84b51aea8e26c30b28a11f3c4a9387cf7f9fd12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:e6:1a:73:c6:18:f0:45:d5:25:4a:77:c7:
c1:85:b0:32:f4:1c:58:f5:19:52:b8:26:2d:33:47:
22:f5:53:ad:6b:6f:07:c0:a8:97:5f:f7:7b:b7:14:
cc:3e:8c:1a:ce:3e:62:8d:90:22:e1:c0:a0:1b:3a:
1e:b6:5b:75:f7:34:b2:0c:d8:88:57:48:cb:19:4c:
0f:ea:86:6b:5d:68:a1:5e:68:a9:a8:c6:b6:80:1c:
f2:22:be:b0:a8:bb:e2:01:9e:4e:8b:39:4a:99:81:
e1:6e:a2:3a:5f:e9:b8:2a:da:66:b8:ab:98:30:dc:
83:ea:73:c5:d1:17:e8:bf:58:3a:ca:b2:5a:47:5c:
42:e6:e3:d2:c3:36:84:03:73:8f:da:89:3e:0b:bc:
4e:a5:1c:e8:a4:e6:09:28:82:f7:e4:0c:f6:ce:3a:
de:e2:32:57:2b:96:06:88:8e:69:b3:50:20:33:06:
90:65:cb:5a:8d:0d:cb:a9:c6:2c:98:d3:79:a7:7c:
d6:8a:45:e9:e3:57:cf:10:af:bd:63:e5:50:13:8e:
42:df:7e:76:b1:4a:13:5a:dc:43:a6:6d:f7:9a:7e:
3a:5b:f1:bc:c3:b8:da:62:a4:a8:29:c3:9c:2d:df:
c5:84:ef:87:2b:a9:ee:4f:a9:c0:9a:4a:a5:be:38:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B5:1A:EA:8E:26:C3:0B:28:A1:1F:3C:4A:93:87:CF:7F:9F:D1:2D
X509v3 Authority Key Identifier:
keyid:A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:81:2c:61:a6:93:0b:06:b6:38:f3:0c:08:09:26:cd:a9:74:
bb:64:51:af:d8:5b:3b:dc:18:76:ef:0a:1a:e6:c7:51:00:a2:
35:0a:09:77:8c:8e:70:39:2e:76:cb:4f:bb:69:34:cd:4a:0d:
ff:44:69:4c:ec:20:b4:99:75:48:69:16:3e:42:f8:1a:b7:3c:
7c:3a:e4:f2:9c:88:87:4d:f0:9d:2d:fe:d9:ce:ff:ca:92:04:
de:21:9a:14:93:28:66:3a:73:8a:b3:e0:81:75:d5:98:7b:ea:
65:06:10:b0:e6:5f:dd:78:24:86:30:51:97:60:df:76:5c:5b:
38:f9:0b:d3:50:ea:b3:e6:03:62:48:96:78:57:ce:db:e3:a4:
25:0e:50:65:8c:36:6c:f4:82:91:0e:25:2f:82:da:40:f5:fb:
3a:bf:db:77:69:8f:ff:5c:36:38:69:dd:88:06:2f:06:26:fd:
5c:4b:5b:74:6c:47:35:c1:a3:44:72:e0:8d:22:22:f4:24:18:
7b:28:72:8c:74:24:e8:8b:16:21:7c:70:62:4e:98:e8:f9:86:
c7:ad:18:ce:ea:58:df:ad:f9:ed:45:22:19:af:e2:5f:63:02:
2b:ac:d5:00:99:85:7b:86:86:e9:34:c9:72:bb:54:35:ca:d7:
e9:69:e6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:14:18 2025 by rpki-client