Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: v23IWz7ps4QIETvE7wTm1bfLYPgzyW83bcehfMAzths=
Subject key identifier: FA:A7:0A:E7:8B:4F:C8:F4:83:93:3A:DE:0A:41:24:90:5B:A9:5B:45
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 0194BC7302310C338DCAE7BA498FF66312A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: oetts3gU9EfIJgYJ6ky709fGVI14tOeyjXS0wg9YCOU=)
2: YwjVQrwYeFZPTMiqnnut8eO8rkw.roa (hash: o942C1AhbUgPtgCYdOmXc46V0WMZFJ062pG0YGycwpc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:02:31:0c:33:8d:ca:e7:ba:49:8f:f6:63:12:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=faa70ae78b4fc8f483933ade0a4124905ba95b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:32:87:03:8e:1f:7a:41:d3:90:1f:19:ba:
2a:96:c2:12:67:6e:a5:38:2d:79:74:c1:1b:d5:bc:
58:94:c2:1c:6e:60:4c:d4:5a:55:94:7b:2c:67:ce:
55:5a:09:60:a6:f8:24:28:3a:9d:4b:a4:4c:ee:d8:
b8:02:d7:72:6f:7d:09:b3:85:db:15:5c:65:6d:ce:
b9:ef:70:6f:19:2f:9d:91:a9:3f:dc:f3:07:94:0f:
32:7a:0a:78:00:8c:30:44:7b:27:71:1a:ea:87:95:
b6:cd:98:71:88:c4:11:74:1a:45:48:cd:f6:49:5f:
a0:6a:47:24:58:c2:ca:1d:94:a8:2b:be:81:12:4f:
38:ee:e2:12:90:2b:da:dc:e3:b5:cc:a9:a8:5e:5b:
a4:2c:e2:fd:bd:df:10:2c:6f:5c:e2:65:1f:37:34:
f0:30:a4:7e:ad:6f:75:37:83:42:8a:5a:6c:5a:f8:
93:b9:cd:6d:ab:c7:da:98:97:c7:26:6a:31:41:1c:
2a:c2:db:42:c9:99:58:bc:d0:ad:1e:c3:75:67:b5:
b4:1d:d7:30:cd:a3:18:4d:5f:ea:38:e6:df:33:b5:
73:4b:03:d3:14:71:33:f1:e6:ed:8b:e9:f6:92:28:
54:e9:71:61:a9:9e:fa:0b:86:52:d4:07:0f:0b:33:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A7:0A:E7:8B:4F:C8:F4:83:93:3A:DE:0A:41:24:90:5B:A9:5B:45
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:18:58:11:a8:d2:86:ef:d6:72:08:a1:57:04:72:bd:1b:a6:
58:e3:67:07:77:29:9d:3c:4f:a4:2b:3b:ed:c7:99:0e:6b:9c:
e9:5f:67:49:89:91:99:44:7d:f6:2e:99:d3:f3:58:f6:95:31:
40:27:1b:0e:11:75:a2:ff:ed:93:e6:ea:ea:de:47:64:17:4d:
1c:85:22:56:ad:d0:a3:3b:7e:38:f3:1d:e3:5d:e7:01:7f:9d:
54:5e:b2:c2:81:93:46:c3:2f:83:66:57:30:ac:cc:b6:6d:1b:
01:70:6c:2f:c5:61:a2:64:54:93:a1:23:17:65:5d:f1:31:f2:
80:ff:82:17:bb:59:55:aa:07:35:4c:99:fd:2e:9f:86:77:cf:
ad:77:b7:f8:09:b9:1e:20:10:7b:d1:75:6a:3d:40:57:53:63:
19:30:93:82:23:6c:15:73:b1:1b:70:87:e4:7a:e0:24:df:ae:
18:c8:d1:5e:12:01:16:fa:92:d4:e5:06:af:3d:b2:45:ad:b8:
4e:a6:c0:2f:56:cd:f4:e6:ce:77:49:6e:3c:f4:57:d1:80:c7:
0d:2b:fb:6d:5a:bb:9f:bd:6b:aa:3b:d8:ff:de:56:87:76:4f:
b1:57:5e:04:bd:d5:a8:77:60:9b:1b:a4:db:ab:78:60:ef:0b:
5f:b0:09:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:14 2025 by rpki-client