Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
File: p4wD9FkI30xFw_B9KkssQCRdUTI.mft (raw, json)
Hash identifier: bSz1wkCznG071tHSu2QglMAT5rHpKS0mkogBHeLOtD8=
Subject key identifier: CC:8B:55:02:5F:A1:8D:7B:59:24:27:FA:CC:A9:70:57:AF:B5:31:66
Authority key identifier: A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
Certificate issuer: /CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Certificate serial: 0194BBCE838F3F87444351BDA8C96BB5F613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: p4wD9FkI30xFw_B9KkssQCRdUTI.crl (hash: dTidk4E7ThC0ORPbKxsTXpELXdHO53TyPkukfor6o14=)
2: zPOGOjbboaQbMeAXK6bmSX50QU0.roa (hash: OFCJwWf3DDsRtbtAfKkoaMdc4vMktJu9Jl985uyVWSg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:83:8f:3f:87:44:43:51:bd:a8:c9:6b:b5:f6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=cc8b55025fa18d7b592427facca97057afb53166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:f8:71:72:56:d2:f8:d9:31:5a:51:1d:42:
02:08:1c:c1:2c:80:24:83:5c:be:e1:1a:ba:6c:2a:
16:bd:6d:a1:18:b8:a3:af:f5:cb:b1:47:6a:49:f3:
cf:9c:81:04:24:02:99:0f:0d:c3:b7:a0:57:e1:83:
48:ab:43:ef:6c:d1:ef:a1:10:a5:33:9b:54:da:e9:
d6:0f:a3:b9:a0:2b:7a:1a:3b:41:e7:f2:cb:bb:be:
5c:82:bf:be:01:30:ad:77:87:8b:14:62:8d:a2:a8:
d2:c4:81:7a:2d:40:99:96:07:95:85:b2:37:4d:1e:
46:33:ec:61:68:c2:62:4e:92:18:0d:3e:0a:35:3c:
f0:4e:41:3d:a9:11:55:e1:30:c0:eb:91:09:fb:e6:
96:c7:d9:ea:56:ae:c7:72:e5:1e:57:7b:db:2e:5f:
c7:08:7e:f4:b1:46:1b:4a:4e:5a:7c:ea:13:54:9a:
d9:9b:a0:bf:80:08:14:c5:10:e5:77:40:e6:53:66:
10:cd:00:44:85:0a:0d:8c:5c:96:fc:b6:dd:16:2e:
fa:73:79:26:3e:2a:fc:dd:25:81:1e:74:a8:c3:62:
87:7a:eb:e2:c0:e2:34:92:fc:3b:8f:c7:bc:90:8e:
54:00:3e:7c:56:eb:fe:82:98:5b:af:5e:24:08:b4:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8B:55:02:5F:A1:8D:7B:59:24:27:FA:CC:A9:70:57:AF:B5:31:66
X509v3 Authority Key Identifier:
keyid:A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1c:83:51:41:04:c4:7c:43:79:5d:02:1e:46:c0:4d:11:63:
6a:e0:d6:80:5b:8e:0b:e7:ea:4b:33:76:27:44:49:41:ad:54:
b1:d8:7a:50:c0:8a:0b:4c:d8:7e:57:20:bf:cb:ad:49:5d:9d:
fd:3c:0e:31:65:36:89:c1:ea:42:15:1a:44:10:dd:0f:bc:29:
f6:f5:b7:1d:5a:c4:bc:8d:7a:b9:6e:2f:b1:61:5b:de:4a:60:
33:fd:99:50:ff:88:e2:a6:96:b1:7a:88:de:c1:c1:d5:65:61:
0a:b1:6a:90:63:2b:eb:4b:8d:0b:c3:23:6b:b4:1e:62:07:9f:
86:10:47:48:93:46:9f:f5:fe:8c:b6:10:26:ca:70:42:51:4b:
b8:ae:9a:43:55:b4:06:db:c7:99:e4:12:50:67:73:aa:bb:5b:
e8:cb:c3:c8:75:3d:06:81:9e:44:50:c2:15:72:d8:27:34:b3:
f4:34:66:59:9c:ce:2a:b8:28:98:16:9e:6d:6b:92:b5:3d:30:
21:65:47:51:40:57:35:57:7a:d1:12:45:f4:98:61:44:6e:5b:
ca:12:e7:86:b3:05:b9:a4:e2:d3:46:e2:0f:21:84:fe:fd:10:
e5:24:96:a7:75:d0:18:e4:f3:39:ab:23:c4:6a:36:9b:db:df:
4c:27:84:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:23 2025 by rpki-client