Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
File: Pr6uqg8H3D1UvBFcziAq2pggsdU.mft (raw, json)
Hash identifier: 0QZUExlbgm8J/MZYPASj0n7JaWT+XCBIk+0p9J1oA7E=
Subject key identifier: FC:40:B8:54:D7:09:D8:16:65:B4:B2:C5:32:E4:09:0A:18:93:97:7A
Authority key identifier: 3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5
Certificate issuer: /CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5
Certificate serial: 0194BD4E53EB6143BA37614D31F79FD82EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
Manifest number: 05BD
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: Pr6uqg8H3D1UvBFcziAq2pggsdU.crl (hash: qWUrRjPa2f3DHhjjY7paUk8c6wrWAPoCwzXihPbkhYo=)
2: nV3wzH_1I5VE4qLJ5nCrt9MPHjQ.roa (hash: db3hfBEW1jL4gbyVu0D2s50T0rgPqR4B0mvJEYFg7lA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:53:eb:61:43:ba:37:61:4d:31:f7:9f:d8:2e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=fc40b854d709d81665b4b2c532e4090a1893977a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:1f:6a:a5:f9:fa:93:17:de:18:a6:e1:32:
6a:5c:7a:0a:4c:49:01:aa:13:a5:6b:58:af:d1:d0:
e4:a7:3d:09:b0:8a:ff:8a:f4:12:1b:8c:71:5a:46:
cf:9d:d5:04:4a:d3:93:dc:ad:f1:5a:68:1a:8b:a6:
cb:a9:81:0e:e2:98:db:9b:a3:94:c8:e8:18:5c:62:
0b:f7:ad:53:1c:bd:89:80:c4:2b:e1:ed:21:0c:96:
1f:4d:f6:12:55:f7:00:d7:ce:60:1e:bd:98:84:5f:
ca:0a:a9:62:83:d4:b0:2b:07:62:87:cc:5c:25:c4:
54:28:59:89:df:7b:cf:bd:6e:2e:60:fd:23:8b:8b:
22:36:d2:d9:22:67:a1:22:ab:a7:09:7e:07:9c:30:
df:c6:4b:bb:f5:d0:a8:47:f0:5b:ee:e3:11:f4:da:
28:28:71:9c:2c:2a:6d:a5:73:02:df:37:73:db:f2:
c5:4e:a8:1f:85:d8:5b:69:53:98:a2:94:91:11:11:
67:ac:26:43:c5:b7:52:e2:ec:34:85:13:61:fb:cc:
5d:45:a7:51:f6:de:ef:c2:02:3e:69:1f:2f:ec:9d:
d8:20:df:6b:93:d9:7e:20:56:4f:b0:49:01:70:78:
1a:0a:1d:8c:47:51:3e:5a:21:a5:c0:98:f1:9d:3d:
9f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:40:B8:54:D7:09:D8:16:65:B4:B2:C5:32:E4:09:0A:18:93:97:7A
X509v3 Authority Key Identifier:
keyid:3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:28:15:fd:bd:91:67:b1:ee:08:76:2e:ec:80:e3:e0:4c:48:
78:47:d7:f9:2f:e1:09:af:4e:0c:42:db:c8:9a:1e:3d:95:62:
85:eb:26:a1:90:40:4e:0c:82:b8:94:60:a1:aa:af:4d:0f:b2:
06:4c:31:6e:89:7f:ee:29:76:71:cd:e5:6e:93:5b:75:33:2a:
c5:9b:3d:e8:a7:44:fd:98:61:0e:d4:74:13:27:0a:de:a3:43:
c6:ff:fc:b3:d3:9e:e1:2d:d8:17:cb:a9:2c:76:46:72:fa:6c:
0c:5a:5c:13:81:4e:8a:ab:7f:61:1c:d2:71:77:c9:51:1d:1f:
e7:7d:28:82:9a:ac:5e:b4:ad:fd:bf:d2:88:13:55:f7:3d:4f:
01:4c:87:cd:2d:04:94:87:be:f9:9d:0f:3d:25:d2:c1:c3:66:
11:f3:20:00:bf:a1:56:dd:e8:0b:00:19:88:b1:5a:87:34:f8:
c0:60:aa:be:f1:8e:07:01:7b:06:ec:2f:5c:27:97:a5:4b:21:
bc:a9:49:19:8e:40:2f:3a:45:6c:7b:08:9e:04:82:ad:12:32:
74:50:b2:63:0a:65:3c:bd:d8:33:cc:d6:ee:a3:20:f1:bd:d6:
0d:46:92:99:5d:1f:e1:ff:e4:81:38:4a:28:c1:66:6e:75:d4:
75:f3:ef:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:58 2025 by rpki-client