Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
File: PComfc4HIjjpwEUV5n65kmcuNRs.mft (raw, json)
Hash identifier: 4tQMN3jx35X+wbNTNSqKbiiGutOxRgCRk7bfRhpuCS4=
Subject key identifier: 0E:5F:39:CE:38:C3:7E:1F:EC:C0:B1:8A:A3:72:2B:98:6D:29:08:93
Authority key identifier: 3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
Certificate issuer: /CN=3c2a267dce072238e9c04515e67eb992672e351b
Certificate serial: 0194BC3C6489EEE4B45EC5BEC78777B70C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: PComfc4HIjjpwEUV5n65kmcuNRs.crl (hash: qBas5zApt3+z7rC5KGAmL5r8uG3CC8mHUAxyhYZ1sPg=)
2: ZGY0lWkEYWemqocgFCB9t9qlPGA.roa (hash: fiVljxbXsWOkY42tbBEX2UBc5QCY0m1ysP8nQ4McSh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:64:89:ee:e4:b4:5e:c5:be:c7:87:77:b7:0c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2a267dce072238e9c04515e67eb992672e351b
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=0e5f39ce38c37e1fecc0b18aa3722b986d290893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:9f:4e:38:e8:4d:d5:d3:b7:02:ed:ba:97:
c9:95:f9:b1:4d:f4:08:bb:77:3a:55:ee:37:28:80:
0e:0c:33:1d:09:34:36:8d:07:44:3a:63:19:aa:40:
ba:fe:9c:71:a1:47:64:f3:04:1c:bd:09:77:f0:33:
5f:01:ec:0c:8f:83:73:aa:7a:f4:49:30:9d:60:ab:
d5:49:be:93:9b:f8:f5:65:45:09:94:a6:2c:a6:8b:
d6:be:5c:64:b6:47:2b:fa:b4:0a:02:88:56:0b:e5:
bc:38:09:a8:67:30:5b:65:1e:c4:28:9e:8c:79:0a:
e1:44:c0:69:63:63:a7:a3:48:68:37:4e:98:23:20:
a2:1c:50:c5:45:db:59:83:79:76:b7:d8:3b:75:e6:
3a:86:78:f2:84:bc:6a:29:6a:a5:91:2a:c7:e8:bd:
45:51:1e:e2:55:da:ef:ca:36:ec:3c:f1:77:50:5f:
38:50:9b:24:71:ea:5c:ad:68:ec:0d:03:bd:c5:00:
f9:86:59:ac:36:ac:61:d6:cc:c3:b3:5f:87:23:af:
09:32:6d:99:b8:1f:b6:da:01:0d:58:7d:df:1c:a8:
3e:aa:4c:4c:60:95:93:f9:61:4e:d3:a4:1b:53:2e:
04:56:38:a4:69:82:86:f7:46:72:b2:9b:7b:99:bf:
a4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5F:39:CE:38:C3:7E:1F:EC:C0:B1:8A:A3:72:2B:98:6D:29:08:93
X509v3 Authority Key Identifier:
keyid:3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e9:de:ab:dd:7a:1f:ba:3f:66:5e:79:0f:3d:a1:9c:fc:56:
10:77:cd:06:60:3f:0d:e0:ce:f0:46:94:03:42:ac:a7:a6:83:
b2:cc:4c:e3:27:3d:58:fb:4e:3b:7a:99:3c:a5:bf:3d:e9:40:
b5:eb:d7:11:e9:c3:bb:af:10:83:37:3b:d9:06:57:da:81:94:
18:55:97:2c:2c:c1:96:89:cf:d6:21:c5:aa:54:e0:d5:e5:11:
c1:0c:10:49:b8:4e:33:92:f8:89:08:01:75:51:84:f2:d9:f7:
b3:d8:d4:a0:f4:b8:de:95:12:a2:50:19:a5:37:a3:0b:f8:66:
62:c1:61:93:17:9d:f4:a0:b6:6c:18:30:6e:2e:c4:dd:2c:92:
f7:00:a4:11:72:3d:34:2c:39:be:36:81:90:64:73:e3:54:a3:
46:14:e6:05:e1:b5:91:cf:de:9a:ba:81:5a:4f:cd:cf:87:82:
a9:58:d8:1d:15:d3:14:43:37:e6:0e:d7:48:95:77:81:70:fb:
ad:8d:1c:bf:a2:35:3d:01:3d:fe:3e:07:4e:68:04:a1:66:bb:
44:33:a9:10:50:81:b2:01:df:04:db:e4:90:ba:92:b5:ff:26:
2b:6c:2e:19:d2:9a:e4:7a:56:d4:dd:96:2c:fd:8c:37:97:9b:
b7:0e:d8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:14:42 2025 by rpki-client