Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: 3IE2o0WyCQBeW+B51IQMoPKCkY7fxts5RuTUixwGGMw=
Subject key identifier: D8:21:73:94:46:73:5C:B9:99:56:C7:D1:8D:26:2F:C8:EC:00:45:6A
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 0194BC72F0D549B468F30155AF9996FA3822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: OWo+QymqT2VHJaO9s/O4bwiS9GaSuFILfXAv1IsQSHo=)
2: qjNgLrezTzPzPZHoRa0PyC-9c_E.roa (hash: gjQzNWtyWkBxUXT4We5fyARX6Waght/4yDMrIeCr6j8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f0:d5:49:b4:68:f3:01:55:af:99:96:fa:38:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=d821739446735cb99956c7d18d262fc8ec00456a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:ea:f2:79:eb:9c:ba:c6:43:e9:f7:0a:3b:
5d:d8:d4:34:df:1a:1b:c4:8f:2b:cc:38:d8:e3:49:
2e:7c:75:27:07:41:6d:07:d6:3b:e8:79:21:56:2f:
93:2b:84:3d:fa:60:cf:9e:9e:52:af:09:77:4f:3a:
f9:c6:01:53:fb:0d:b3:cc:91:8d:9d:39:74:22:d8:
cb:d9:51:60:ed:06:6a:b8:ab:ad:bb:fd:e1:cd:1f:
d9:76:7f:21:75:ed:06:76:2a:d3:7a:da:bb:d9:0f:
9c:61:de:5e:b7:f2:01:19:15:85:15:ea:e2:e3:b2:
58:d5:e7:a7:f5:58:4b:47:4f:bb:2f:9e:ab:78:22:
af:1a:e4:e5:5c:61:d6:2e:22:71:e2:6b:cf:51:93:
ac:cb:18:19:9d:93:b5:da:84:18:a7:b0:08:e2:51:
b3:27:e5:98:e5:16:25:72:f1:af:43:b9:16:67:b1:
78:d5:8d:d4:b1:dc:02:09:e1:62:1b:9b:95:7c:8e:
14:2f:77:51:d7:1a:9b:48:ef:2f:e4:32:f6:71:77:
a2:97:a2:f7:5d:fa:1c:db:19:e4:f0:16:b9:a3:2b:
6e:0e:db:27:e3:4f:c0:7b:c4:32:c1:2f:b1:9f:9e:
94:c2:d8:eb:3b:f3:e8:c0:ac:41:92:4b:97:bb:12:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:21:73:94:46:73:5C:B9:99:56:C7:D1:8D:26:2F:C8:EC:00:45:6A
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6f:dc:15:5b:19:20:d7:c4:9b:b0:af:b2:4d:77:5e:e3:72:
d1:fe:26:1e:71:15:09:72:d7:fb:1a:37:f9:c6:b8:ea:b3:1f:
99:a5:f7:fc:a7:03:84:79:c1:f2:95:ee:0f:51:08:8a:b5:6b:
c4:f6:75:a4:ef:bc:98:1c:39:d1:4a:1e:54:3c:3e:7e:18:1e:
1a:47:80:6e:52:44:06:74:b8:1f:24:ad:79:c7:dd:39:a5:22:
f1:de:c5:32:da:f7:4b:f5:98:ee:59:7f:66:2e:0d:8a:29:98:
4f:b9:ff:4d:47:90:d5:65:06:11:cd:92:5c:77:09:ce:25:98:
0e:37:dd:87:a6:ab:37:45:47:cf:f7:ce:70:78:8b:95:ca:5d:
f7:b4:7f:9b:dc:b3:78:66:47:88:c3:43:b6:cd:89:87:ca:ea:
a5:cf:b0:c0:94:8f:35:c9:05:9a:14:5c:19:a4:c4:c2:8b:82:
ce:74:0b:27:b3:3c:85:a1:b3:60:5b:a3:0f:1f:e8:dd:21:54:
e6:8e:b4:85:cb:1a:27:cb:e2:46:84:a6:d3:46:64:dd:60:90:
a0:dd:cc:da:63:6d:f6:0f:f0:3c:75:ad:1d:1c:e0:b2:41:37:
db:eb:4b:50:41:c9:e9:96:5f:8c:56:24:1b:a8:37:43:1e:e5:
18:65:ca:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:09 2025 by rpki-client