Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: KCvH/4JgYEHXShvjDPfCnwhfnfnfAs6evqlnngz1O3I=
Subject key identifier: CB:C4:03:9A:78:20:E0:20:18:64:AB:4B:A9:82:65:4B:50:5A:68:99
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 0194BC72987E4C0973AE1FB713CB174DF3D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 1155
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: JNAtdBMSX5VhwApOgTuAEW816wE.roa (hash: /ZrZUMi4cKx5uDajSWU/yOuRSvJFXt9XoQWTgblnDdM=)
2: Kk_Nqx-T7Pv-J68aF1UpAxcFsyI.roa (hash: SIEfBbEbGt2Z3RQ6DVZe/KIGqB2xRs2VDt+6m/NBCj4=)
3: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: wFK+CDYDpeGCDJ/+YCRbHnDL1BPJKpEM3l/BNWbyJlY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:98:7e:4c:09:73:ae:1f:b7:13:cb:17:4d:f3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=cbc4039a7820e0201864ab4ba982654b505a6899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:33:cf:7a:6e:52:ff:12:e1:46:76:50:0e:
69:07:b3:af:60:2a:f7:a1:a4:41:32:6a:6f:2c:2a:
2d:03:87:17:52:9a:2f:9c:49:8d:0f:f2:95:66:cc:
a8:56:52:15:33:22:66:60:d4:ba:05:26:6a:2a:51:
5c:5f:ec:05:16:a0:7d:75:6f:c0:9c:0d:42:18:e9:
77:b1:8b:2a:a3:eb:02:23:ff:5d:49:a1:74:9a:37:
1e:5f:23:39:e4:40:10:09:aa:e3:1b:a0:35:10:95:
03:7e:35:70:f0:11:45:bd:35:33:a2:a8:64:cc:99:
ce:89:c6:5a:9e:c3:34:78:32:8b:26:50:83:11:69:
05:6a:9c:f8:1c:c0:c8:d6:df:fc:1a:6f:97:ce:73:
82:09:49:f8:57:f1:56:18:63:88:1b:af:60:9c:2a:
cf:0b:69:2d:ba:21:e1:3a:14:7a:d1:47:76:3d:16:
f5:0e:85:f4:c0:b4:4b:46:22:99:ed:93:35:b0:5b:
5d:eb:0d:d1:46:2b:34:3e:a9:67:86:cb:4a:8b:9e:
2d:c4:d9:27:56:d6:60:8b:ef:ae:33:83:fe:9a:79:
30:ef:77:5b:77:7c:7f:b5:93:82:88:7f:5e:4e:f8:
15:51:67:0a:51:f0:a9:b0:cc:06:4a:b4:b2:0e:06:
2e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C4:03:9A:78:20:E0:20:18:64:AB:4B:A9:82:65:4B:50:5A:68:99
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b0:9a:e6:7b:85:b5:27:2d:ad:9d:33:48:93:92:86:ed:04:
38:f4:68:91:6b:e0:13:24:31:c6:6d:6b:3e:80:c0:84:92:18:
1b:cb:db:42:c3:78:38:a5:2d:e2:5a:98:a4:c3:19:96:c7:30:
06:26:44:81:76:8e:85:35:60:da:d0:48:9d:dd:1d:bc:68:5a:
5b:ee:d0:b4:19:57:fb:b9:d2:16:c5:cd:1b:35:dc:7b:e3:1e:
ef:38:19:58:4e:dc:e6:bc:51:d6:35:4b:b0:8f:1b:47:a5:c5:
d9:9a:b1:63:54:b1:b6:b1:e2:20:20:7e:34:c3:10:66:fb:c1:
cb:97:a5:e3:b9:17:5e:45:f6:73:50:16:cc:5d:75:5f:05:e8:
af:75:0a:a5:09:08:47:f2:45:96:d2:e8:a8:41:2a:69:3d:4b:
57:1a:3c:53:51:6d:15:72:44:3b:9e:83:72:c1:fb:1d:5e:e6:
97:41:d7:de:e5:83:31:5d:90:63:8f:fe:dd:b6:0e:81:23:5a:
1e:cd:50:92:ab:37:b7:ed:f4:61:1f:92:08:6f:a1:77:c4:65:
fe:77:4f:4d:8b:be:3e:35:7a:3b:c1:2a:da:c6:2e:11:f5:74:
6d:22:0b:52:92:83:c9:5f:a4:9d:56:1c:7c:1c:47:7b:bd:4b:
9e:60:4f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:27 2025 by rpki-client