Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File: P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier: jIR2Cgr9ftSqqRWVxx2w8Jg6D6/aoiZ8LOYFzM52b2A=
Subject key identifier: 54:91:C2:56:E4:C8:11:B0:56:41:0B:30:2F:76:DA:53:08:7F:CD:03
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer: /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial: 0194BD4EBDBD00F068BEB0C5CAB221081379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: 1JxcI8lRWRwy2hGpjfzjIbgsdvn0prskZSNd3B0rR8w=)
2: QxahHBF5SSiTCKjSwe1FlEjpjhQ.roa (hash: d1pnjZFtEihgfo0iFcK4wvbFSZ9uzn9ZUOrv5mZKK8Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bd:bd:00:f0:68:be:b0:c5:ca:b2:21:08:13:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=5491c256e4c811b056410b302f76da53087fcd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c8:bd:31:aa:b3:e8:fb:32:d9:58:23:be:15:
5f:9c:c1:0e:94:07:a2:f6:4b:1f:c2:10:e9:a8:a5:
e6:25:df:bd:41:a7:c8:a0:d9:63:af:40:73:0d:de:
d4:dc:80:fd:68:04:be:4a:63:d7:a4:d6:2b:46:00:
53:b7:08:39:48:00:e5:1b:53:78:39:bf:c2:f0:e7:
28:5c:e0:15:a0:7f:56:f3:16:ae:c3:44:1a:3c:a5:
32:f2:02:57:2d:1c:00:8a:13:2c:bc:22:8b:bc:78:
b1:6e:04:2a:53:2c:c3:de:af:97:44:04:41:f2:66:
d5:af:9a:e0:fb:64:9c:f7:94:f1:8f:29:ba:71:f2:
b2:7b:18:c9:c5:89:a5:f6:b2:d7:a0:1d:35:d3:94:
bd:2c:68:a5:bc:dd:86:7e:5a:d6:8b:58:96:eb:90:
89:8f:f8:54:a9:e9:da:24:38:47:a2:2f:61:1c:c7:
7f:52:52:0b:33:04:84:99:02:c1:d6:b1:1e:fd:37:
ed:85:b1:fb:93:d9:bd:41:a8:0a:19:8b:42:e8:22:
ba:13:7d:c5:41:ee:4d:97:23:ae:62:0d:d3:65:4d:
a0:74:dc:42:c7:ed:82:47:59:e4:6b:1b:77:5f:06:
bd:80:80:4a:d3:22:22:1d:e7:a3:c4:f7:00:84:55:
03:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:91:C2:56:E4:C8:11:B0:56:41:0B:30:2F:76:DA:53:08:7F:CD:03
X509v3 Authority Key Identifier:
keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:57:7f:6b:ba:65:60:6e:52:9c:f1:e8:2b:6f:9c:7f:bb:78:
fe:c3:30:1f:c1:9f:db:de:c2:af:77:0e:88:de:bb:2e:9c:16:
9c:26:55:6a:fa:a6:f9:b9:64:5d:de:b3:3e:ad:0a:88:a2:ba:
be:0a:ac:ef:21:26:0e:66:fc:c3:4b:dc:02:27:d0:bd:f0:d7:
d6:9e:08:9f:78:7e:72:2f:ed:5a:e7:9e:20:cd:df:c7:10:97:
ae:5c:f6:35:23:d3:ff:4e:38:82:f5:c9:3c:ee:d0:39:7a:bc:
b1:d2:46:00:90:ae:e7:0b:16:03:4d:a1:04:1d:b9:72:b2:1b:
91:ce:9c:d1:8c:06:21:96:e3:74:2b:59:fb:39:80:33:a8:4c:
d5:48:e5:28:c5:b2:44:cf:c3:6a:1e:56:58:09:1d:25:ce:04:
7d:99:0e:fb:0c:42:3f:8d:2c:15:18:21:62:62:e7:5d:67:ca:
32:96:24:f7:28:ff:09:74:8a:47:eb:67:bb:26:a4:08:72:72:
ff:85:70:79:6b:83:8a:a0:40:2c:29:93:ef:0a:46:ba:01:58:
8b:9f:20:89:12:e2:6d:62:b3:81:63:d3:72:31:7c:af:f0:94:
de:fa:6a:17:8a:dc:9f:4c:64:ee:e9:78:24:e2:b7:91:3f:7f:
bb:26:b2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:07 2025 by rpki-client