Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: +D2k29W8gZZI/ORt9SQKaSEBN6ZGlsGQkvpXcIjgbqE=
Subject key identifier: 24:B7:40:67:33:8C:A4:4C:08:29:6C:4C:02:20:EF:51:AE:BC:66:3D
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 0194BC04B195A052E3128053C4089DA08073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 0E67
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: 1Xqi7Z1GlyKJmmpJLPuLaaDGlwA.roa (hash: R1V6MsHqSpwWAHrp5zkXdM7XbLDDs5vw6HyT3BRV75o=)
2: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: 7kPDenZeY2BpTqvdCf3wJRKcjsWc0ABFUAvA6TQCnSs=)
3: k0e8XrkRjigLyVCK_c8tyoDjXqU.roa (hash: VlaMdbNDNwgFwQ8MfYZ/SEPVePx9cKrNfoX/5Qh79Ow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b1:95:a0:52:e3:12:80:53:c4:08:9d:a0:80:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=24b74067338ca44c08296c4c0220ef51aebc663d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1b:8c:6e:af:63:3b:7a:19:45:ec:b0:c8:d2:
74:49:0c:9c:13:03:1f:6a:e8:4c:39:e8:d1:8e:49:
26:bf:ea:14:29:20:e2:a8:a2:2f:a8:f9:0f:64:37:
1e:19:0d:68:83:e3:c1:95:8a:ba:b9:c9:be:d3:88:
c8:d5:ba:6f:2e:03:fd:fd:bc:b2:a2:8d:74:f3:be:
fe:ea:97:d6:57:6e:22:03:3d:3a:c2:98:98:86:d4:
8f:f5:66:66:1c:e3:21:26:42:0e:ff:16:be:cb:16:
fb:e3:7d:aa:20:f6:c3:6b:f4:aa:b3:0c:d4:55:b7:
af:8b:30:22:0d:14:88:c3:8d:b3:2e:8b:33:71:97:
f9:67:ca:b5:fb:5b:5b:19:fd:31:75:aa:56:dc:1c:
3a:63:e9:8e:67:40:f5:a7:98:61:25:dc:02:cb:ce:
4b:49:6c:43:62:50:64:1f:31:a7:6d:5a:4b:8b:db:
8d:4b:0a:7f:15:0a:7a:65:a3:5b:26:be:39:46:6a:
bd:b8:be:df:df:72:25:0d:45:68:b7:40:c6:f2:cd:
10:73:4e:e4:aa:16:62:af:21:a3:e0:03:fe:e6:0e:
cf:d4:c0:ce:24:04:6b:ff:5b:b3:4a:64:c1:5d:55:
70:4c:59:3b:22:0a:96:b8:f4:f0:2d:0d:69:92:0f:
be:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B7:40:67:33:8C:A4:4C:08:29:6C:4C:02:20:EF:51:AE:BC:66:3D
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:75:49:30:4d:de:6c:5c:50:24:ac:50:25:86:49:a9:88:64:
2e:64:a5:75:91:9b:2b:1a:d9:74:84:b6:6d:72:54:f2:bd:f4:
57:75:bb:28:6a:58:ae:37:97:2b:a1:67:7f:90:3b:e5:1d:74:
14:91:e0:f5:33:82:e7:28:b4:a3:83:16:66:5b:11:2a:9b:2c:
24:49:85:ef:20:c0:6b:ea:73:d8:9e:5b:30:7b:c2:f8:35:19:
21:71:50:5d:4d:e9:d3:5d:66:1c:9e:38:2b:0d:b0:bf:f9:9d:
17:48:cb:de:40:9d:04:46:35:db:d4:51:c8:3a:49:53:f3:03:
8c:d3:f4:78:ac:58:68:d3:bd:f8:3f:79:22:6e:aa:3a:42:52:
f6:60:e4:84:2b:a8:38:08:0d:28:5a:60:eb:8e:30:41:68:53:
b9:32:55:61:72:db:c6:4b:ac:05:d9:e0:dc:57:dd:79:5d:d4:
e0:26:f4:44:3b:61:82:52:e6:38:da:55:e4:5f:79:46:c0:6d:
a5:c2:01:7b:35:05:9a:90:60:22:55:59:67:48:6b:0a:df:da:
16:db:8e:0e:af:e2:95:1b:2b:6d:f2:fb:de:29:f3:a1:c1:c5:
2e:2d:70:73:18:28:75:11:ac:67:d4:38:dd:a0:e3:80:1b:7b:
75:15:a4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:26 2025 by rpki-client