Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: P1pZRCowYw8wBnrqOUnGlY1UctG39OD7i637Or4i3O8=
Subject key identifier: 3A:C6:8B:C5:E6:B7:50:2E:2C:59:A4:C6:11:DD:11:28:24:46:89:37
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 0194BC73299128E0ECA0261B6DBAF98DF862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 13:00:51 +0000
Manifest this update: Fri 31 Jan 2025 13:00:51 +0000
Manifest next update: Sat 01 Feb 2025 13:00:51 +0000
Files and hashes: 1: 2dLH0vNFJnWg2lZelybNLzc06cc.roa (hash: r/Z+8xB7CHc6LECAv+vBuRY+QqUaeEKJ5DtFzihx2Zs=)
2: HtYH7IfWThQC0FjsfIOLJnPcCb0.roa (hash: JQOoHMUiGQozF5WEbUjnDZo1IaMc3weZxMTmvWza6pA=)
3: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: 95ZhcNyc9qblx8+Lq6fAuw4sEDxmRvWumPrceixpb1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:29:91:28:e0:ec:a0:26:1b:6d:ba:f9:8d:f8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Jan 31 13:00:51 2025 GMT
Not After : Feb 1 13:00:51 2025 GMT
Subject: CN=3ac68bc5e6b7502e2c59a4c611dd112824468937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:1b:77:30:b0:dd:67:40:86:71:88:87:5e:
1b:9f:c0:51:0c:7f:16:b8:a9:a5:26:9c:5b:2e:f5:
35:0f:d5:36:a4:25:27:17:26:2f:d9:48:de:21:69:
50:e5:90:5e:a7:e8:57:c4:c1:62:63:71:18:79:b5:
b9:4e:2e:2c:df:61:60:0b:62:3b:d4:e1:1e:4d:18:
55:55:5a:44:5b:aa:c6:0d:41:ab:d3:d5:85:87:39:
08:e4:75:98:ec:49:5d:32:06:6b:81:89:fc:88:bf:
99:6d:b9:aa:17:2e:de:f6:21:a8:b6:d9:7e:c1:bc:
13:44:7c:b9:9e:61:66:21:2d:d7:c7:3d:43:fd:e6:
8c:b7:85:ff:f2:25:b5:55:ff:6b:d1:db:59:f0:b7:
50:0c:74:19:2a:b6:cd:2d:97:ce:f0:4d:b2:62:db:
aa:55:66:94:88:61:40:13:ed:fe:7a:1b:77:4d:a3:
03:d4:b4:2c:e2:c5:42:a6:74:13:8b:3d:29:b5:44:
91:fc:37:a7:3a:63:ef:b5:4b:13:bd:f0:19:6a:34:
ac:0f:5f:ff:cb:db:79:d7:e2:1d:af:8d:a3:cf:1a:
0f:09:c9:77:69:c8:48:cf:a1:eb:c6:d4:16:61:51:
7e:18:79:40:52:8e:d1:12:82:fe:d9:aa:e6:92:b4:
56:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C6:8B:C5:E6:B7:50:2E:2C:59:A4:C6:11:DD:11:28:24:46:89:37
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:59:26:b4:ee:77:07:0e:32:f3:d4:c8:40:86:49:50:5a:e8:
bc:88:df:56:e2:a8:4a:10:89:da:02:a3:7a:4a:84:0e:04:5d:
37:25:85:4b:da:d7:2c:15:e0:5c:4c:a8:61:d6:26:6c:60:2e:
76:64:b0:c4:01:08:86:9f:9c:26:6c:0b:5a:7a:01:50:3b:8a:
d8:3a:13:85:e5:d3:2b:ff:2c:f8:d2:61:e9:82:b9:83:ff:52:
66:86:df:5d:98:5f:c0:5c:38:7f:5c:75:e3:13:6b:7f:a2:fc:
ef:d0:2d:e0:87:43:30:25:8f:85:e3:cd:87:f6:00:77:2b:79:
27:d4:4f:3c:00:af:64:1b:94:f0:d7:ba:a7:13:43:fb:16:48:
48:ab:fd:60:61:24:93:0b:24:47:e4:fd:66:da:cd:eb:c5:40:
5e:c0:ce:ed:42:49:19:2e:f0:5b:b8:ce:6d:e2:cb:f7:7b:1a:
94:51:09:d4:09:3b:60:5a:87:c7:f8:7f:75:3f:2a:81:94:02:
c6:1c:0d:23:00:c7:e8:26:9c:77:e3:f9:58:bf:00:3d:49:fa:
5a:11:2f:d9:a9:fa:aa:f7:68:07:26:cf:c3:6d:5a:19:08:87:
22:2e:5f:01:5b:42:05:32:47:ec:8b:60:e5:be:da:5e:9a:c2:
1b:39:7b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:16 2025 by rpki-client