Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
File: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft (raw, json)
Hash identifier: jgTT0tV6Q/5D+TuEJuMLTn4hGrysP5reu+EzGltr8r8=
Subject key identifier: 4F:89:5D:9E:E6:DB:16:0B:40:07:71:B3:90:32:DC:8C:B8:A6:DE:5E
Authority key identifier: A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
Certificate issuer: /CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Certificate serial: 0194BC3C903E1E76F8F4FEACBE54852D6CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
Manifest number: 08DD
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: 6jOAX6ZKooyhgzG3-RXUavHtejc.roa (hash: zAiUnOceYAANogRzQmsXCXZI4dk5OulIUSwMR15rFvs=)
2: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl (hash: SuAg5001H/2nkVjKRoXwY/pAgtsdjRtiEhksgJTXxKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:90:3e:1e:76:f8:f4:fe:ac:be:54:85:2d:6c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=4f895d9ee6db160b400771b39032dc8cb8a6de5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:83:d4:76:34:7f:c9:21:3b:22:68:8f:d9:
85:17:da:a7:eb:c2:04:15:5f:78:cf:90:90:53:2c:
bd:df:5c:84:a3:61:87:30:e3:fe:d2:e7:a9:6f:76:
45:99:c9:d4:d6:30:ca:18:97:a2:4a:44:56:86:7f:
13:26:88:b2:0d:30:48:0d:12:ef:da:50:b5:d2:a0:
f8:ed:ed:a8:b5:74:a9:bc:94:7a:aa:85:3e:4e:69:
29:8c:d1:f2:9d:53:14:fb:c8:94:b6:6e:c1:f4:ac:
6a:55:35:24:fe:e0:ff:95:7f:7d:fe:79:e4:27:a7:
96:81:ba:91:10:46:c1:bf:9f:ea:ac:48:6c:17:4a:
49:4c:dc:28:d8:3c:70:3c:95:5f:f0:b7:2b:5a:b8:
11:34:5c:83:d1:13:9e:23:61:d3:4e:10:8b:ba:5b:
73:bf:e7:42:cf:1f:db:4b:1d:ea:03:c4:e1:fa:a7:
53:c2:d5:25:39:c1:64:99:66:a4:a2:26:e7:49:fa:
0a:74:6d:c5:6d:01:f6:71:2a:e4:29:cc:2c:aa:8e:
e3:28:16:fb:c8:f7:16:3b:9f:26:07:b6:d9:f5:89:
70:9b:e7:57:a0:3b:aa:c8:e5:4f:ff:4f:71:70:c5:
a1:c1:d4:a1:f8:b1:81:95:46:52:12:8c:c0:60:74:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:89:5D:9E:E6:DB:16:0B:40:07:71:B3:90:32:DC:8C:B8:A6:DE:5E
X509v3 Authority Key Identifier:
keyid:A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:35:a3:a4:3c:bc:9d:25:d0:bd:94:7e:e6:48:6e:d4:77:6f:
4f:42:f7:c4:61:6b:63:54:41:5c:70:9b:53:37:07:81:55:bb:
a2:6f:7c:5a:a2:5c:fc:e5:fb:63:c2:b9:d9:97:a3:3d:61:34:
b1:35:19:97:a4:6a:74:a2:29:7c:63:d1:4a:3c:7a:a5:0f:99:
7d:12:35:7b:c2:92:e8:33:6b:ab:41:f4:2e:1e:9c:81:ed:76:
9c:92:06:85:90:f1:d8:86:83:1a:d1:e9:f9:70:82:af:bc:32:
b7:19:33:4d:91:a1:af:ef:cf:35:35:c5:47:d2:32:ce:76:98:
0e:94:67:f8:cc:55:64:c1:34:50:0c:45:ec:72:c8:73:37:d6:
ed:c3:8e:e3:1e:dd:90:9a:01:53:7e:9e:ee:03:7b:a3:10:4d:
57:b6:3e:4d:c6:e5:34:da:2f:25:db:70:e1:87:5a:b1:e8:82:
29:4e:a0:bf:5f:9c:80:52:44:be:0d:f9:99:75:09:89:0a:b8:
db:df:39:e8:03:32:40:e0:f2:b9:ae:8b:af:85:33:89:8f:64:
8e:d2:21:18:e3:de:d4:72:48:16:e9:96:67:fd:4c:21:47:42:
56:36:4e:df:94:f6:9b:52:6f:2a:27:b6:14:aa:f4:be:6b:f7:
51:21:06:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:15 2025 by rpki-client