Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
File: pxn9xw058Tw3hNMlrith8PPJn0g.mft (raw, json)
Hash identifier: LclnxiClMRiHQluiblkyrPVlxMbtiWBTgQJC1QftPeQ=
Subject key identifier: 5D:6A:13:23:05:E8:B3:E5:3A:7F:2F:3C:E3:33:AB:8C:3B:A9:BA:6F
Authority key identifier: A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
Certificate issuer: /CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Certificate serial: 0194BCA9CF7B75F9E5389DAD5F0EAD694D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: ldBjKa6qQD6NaVa0xAumkdWo3gI.roa (hash: 2YMpg6Ripbk87w4Re6g4mOYhXFU2yNWWD+lkjoRwRkM=)
2: pxn9xw058Tw3hNMlrith8PPJn0g.crl (hash: NChBLLlFwvAAo0uw527///GHZ4wMnHQj2STlBJNWQng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cf:7b:75:f9:e5:38:9d:ad:5f:0e:ad:69:4d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=5d6a132305e8b3e53a7f2f3ce333ab8c3ba9ba6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:99:cf:9f:0d:d9:d9:a5:58:34:43:94:71:
d7:cc:a4:7b:a6:2f:30:92:18:1e:4d:26:4b:5a:5d:
49:ba:02:36:64:68:be:7e:ac:87:e5:02:22:41:f9:
fd:1a:5f:d4:79:03:67:fa:0c:e9:a4:38:68:3d:d7:
a6:f8:f8:8c:4d:18:4f:87:76:8c:8b:c0:14:94:0d:
cb:91:0a:f3:74:66:69:e5:a7:5c:4b:d0:13:9c:93:
8d:3f:44:f8:e9:d3:eb:f9:df:ad:5b:9c:75:77:0b:
ee:1b:d9:0b:c5:37:28:aa:50:89:d0:14:98:02:91:
c8:46:af:45:90:f9:53:8f:70:a4:08:87:64:1b:03:
9a:76:ba:02:4f:32:2b:08:b6:eb:77:78:c8:96:0d:
fe:c2:84:c3:99:5b:f4:07:97:f7:6b:11:cc:ff:67:
b6:8f:b0:29:21:7e:ff:33:52:17:31:7c:88:0d:f3:
14:a1:10:10:19:48:fc:f6:3b:0f:89:0b:17:11:52:
79:53:c7:ae:2d:2c:78:8f:0e:d9:fe:0e:5a:ce:a2:
ba:b4:03:2d:c3:5d:c8:9c:81:e4:3f:d9:6f:87:8c:
97:6d:4b:0c:95:02:40:f3:ac:57:ce:85:57:0b:1c:
3b:59:95:54:85:4d:5e:fd:3a:80:cc:4e:26:16:73:
99:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6A:13:23:05:E8:B3:E5:3A:7F:2F:3C:E3:33:AB:8C:3B:A9:BA:6F
X509v3 Authority Key Identifier:
keyid:A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:88:3f:c5:9e:e2:c7:aa:cd:3d:0c:1c:3d:3f:8b:b3:72:29:
49:07:39:1e:30:26:ca:af:6d:f3:a4:6b:a5:e6:84:ed:09:ca:
77:a5:c6:eb:56:a2:a7:c6:3f:97:f5:fa:77:f6:23:21:a0:11:
63:ed:40:a7:22:e3:26:34:9a:1e:c9:08:ef:8a:bc:f7:bc:1c:
aa:ca:5b:53:a0:dc:00:11:73:b4:6f:46:ef:5a:56:64:75:74:
27:ce:2f:b7:04:e3:4a:d0:eb:bd:85:47:0e:41:88:ea:b9:18:
b6:de:e2:a3:7a:db:b0:e7:01:4b:e9:0f:5b:3b:f0:5a:7d:a9:
02:29:9a:98:78:fe:6a:e5:ac:19:1f:55:3a:7e:75:e6:96:97:
43:ca:a9:08:05:95:46:6f:ef:3f:b9:79:6f:ea:d5:a4:b4:fb:
2b:0a:01:2b:80:88:29:76:a8:77:cc:a6:13:e7:26:96:2b:46:
83:b2:45:79:83:9c:d7:37:47:04:3a:d8:19:f9:57:ed:05:2a:
a4:f4:ea:6f:85:23:35:18:b9:40:d8:9b:48:a2:5b:e8:d4:53:
3b:c0:88:6a:45:e8:4d:7c:5b:7a:9f:6c:27:1d:de:1b:02:43:
ba:7e:9e:2a:69:d7:9b:3f:5c:06:a3:6c:e1:31:72:22:1e:22:
36:73:64:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:31 2025 by rpki-client