Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File: psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier: CMLSt58WmfPAuFYpzVK8b8elQn6+qAnL60yAx/olGfo=
Subject key identifier: 11:B8:31:0A:F6:D2:61:36:A4:D4:FE:4F:9E:BE:29:B1:88:53:60:E6
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial: 0194BD857DF52633FFBDE171DB017D2C11E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: okAV_h5VY2rYZdeinC81X0hRA2Y.roa (hash: Qv1PPO81VnI1ltfb9vhPQi4AdxGUBWm2X2BZUx+f7S0=)
2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: vHM/Q6j/40BAQ6qHpRQ5TJ+bNTDW3G7uhDN9ESSUUjI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7d:f5:26:33:ff:bd:e1:71:db:01:7d:2c:11:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=11b8310af6d26136a4d4fe4f9ebe29b1885360e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:ac:88:60:0c:3d:e1:f6:d1:ee:1b:56:c0:
3f:b1:68:79:a2:1e:7a:1e:bc:4b:e3:d8:5f:0c:4e:
5c:40:13:14:f3:76:53:fb:22:5d:3e:f9:c3:ba:b8:
c4:fd:9b:49:4f:96:ce:4b:74:c5:62:f3:a0:4e:09:
d8:8d:ad:a2:ea:b4:f6:6c:ca:92:e0:81:1c:f0:2a:
20:f5:da:60:7d:68:ce:1c:28:64:46:1d:7f:85:ab:
a2:c5:1c:69:48:de:61:57:99:9a:1e:e0:e9:56:f0:
75:63:49:e1:98:d0:ac:72:24:b1:f7:90:60:ea:ad:
7d:40:07:77:67:62:36:11:ee:81:7a:c7:62:c5:b7:
eb:4a:1b:74:84:35:6b:f4:bf:0c:53:0c:6b:52:18:
79:a4:29:59:9e:e5:71:cd:e7:bc:d0:89:f0:c8:b8:
ef:a6:b2:17:8b:19:f9:87:d0:fb:bd:f7:df:13:a3:
c7:82:a4:90:8b:3a:22:e9:65:c8:2f:2b:ba:87:ab:
e9:85:07:24:d6:15:00:80:d3:79:2f:4f:bc:78:ff:
49:6d:f2:d6:38:43:8d:af:93:fe:fe:aa:3b:0a:3d:
18:a8:d1:2a:4c:1b:ed:49:28:6c:f7:4e:c9:22:bc:
d4:77:6a:f8:ac:da:90:0c:12:90:23:cc:82:7b:ff:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B8:31:0A:F6:D2:61:36:A4:D4:FE:4F:9E:BE:29:B1:88:53:60:E6
X509v3 Authority Key Identifier:
keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:54:5c:27:5f:78:68:61:15:0f:63:c1:1a:65:de:61:3e:81:
85:05:cf:3e:d4:b6:25:9b:61:9d:60:f6:c4:34:10:d3:eb:de:
a1:b3:7b:cb:bd:26:7f:5d:67:22:3c:64:45:ff:eb:dd:0b:7a:
ff:98:e4:31:b3:da:4c:3d:b3:cf:fe:ab:6d:53:9a:c2:39:26:
a7:7f:d5:70:27:19:0e:48:17:3e:b8:4e:5f:7b:4a:29:40:e4:
e2:b5:35:95:9e:d8:2f:ab:8c:cd:d4:14:16:de:cd:03:68:10:
77:b9:a0:f3:9b:27:aa:86:5a:8e:b5:aa:9f:a0:d1:2b:15:86:
e1:e9:c9:bb:2d:2b:01:c5:c4:1d:7c:bd:e5:b1:3d:79:8e:fb:
12:33:db:54:12:7d:7a:a0:af:69:ad:70:eb:87:4d:63:2d:bf:
63:ca:66:44:6f:7a:7f:86:7c:63:91:66:d8:c8:0d:09:b0:48:
11:55:d3:b1:3b:91:ad:70:56:40:81:e3:9e:03:72:7c:95:5b:
8b:df:6d:40:9f:c3:19:07:ab:33:1e:62:23:32:a8:ff:c5:8f:
6f:f0:0a:df:b8:ab:1a:54:ba:5a:4b:a7:a4:97:bd:b5:d4:23:
f1:b1:49:e6:f1:18:8c:9d:f7:f9:9f:54:1c:e3:a4:5b:2b:a6:
d1:d4:6f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:23 2025 by rpki-client