Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
File: PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json)
Hash identifier: 8R7U5mMeuVC4cdWnhKgIJc2LUMocaJIrqztEYJ5vEKk=
Subject key identifier: B4:7C:D1:EF:00:1D:2F:6B:36:54:05:16:36:00:D5:81:A4:2C:CD:55
Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
Certificate issuer: /CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Certificate serial: 0194BC3C8B62E4A7E40C4F1AC10466A13AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
Manifest number: 022F
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: 0-NbRqc8zQ3-jTIYZOwXbybz260.roa (hash: F4aAH1P/CqccbM0rJQ6/jB1mC+tQi8oCbtTD8Uif+I8=)
2: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: 2elPj2kReCiiP27sYn7etkvyI4ZEZ+X6nuYc1fjSFOA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8b:62:e4:a7:e4:0c:4f:1a:c1:04:66:a1:3a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=b47cd1ef001d2f6b365405163600d581a42ccd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:a4:0e:f1:0d:8b:1f:85:bf:a6:db:38:e7:
dc:39:f1:38:da:c2:d8:2b:fa:73:7d:8a:4f:77:28:
f2:3d:b2:b3:a2:1d:e2:d1:48:21:bb:99:00:ed:9a:
4c:5e:72:d1:3d:b7:94:8b:df:7a:0b:75:c4:56:60:
40:af:1f:f4:84:c8:00:11:c3:88:4b:e0:29:83:d3:
56:b4:05:fd:e2:de:b0:2e:42:50:d8:78:68:e4:44:
bb:f7:80:a6:a2:33:72:d2:eb:9e:53:46:6d:ec:13:
9b:8a:32:9c:c1:be:cb:15:08:ca:76:94:f2:e2:0b:
c1:d0:7e:47:e5:71:20:7a:ca:00:ba:dc:64:f3:85:
d5:8d:9a:84:68:f5:1a:a3:d7:9b:c5:fd:71:1c:50:
cd:d9:4d:59:27:9e:a1:91:33:02:93:26:85:17:a4:
26:47:c9:97:ab:b2:41:8c:54:24:21:45:28:97:59:
d6:8d:41:83:d2:15:27:4d:bb:5f:06:32:e3:2e:0f:
2a:97:f0:ca:04:66:55:3e:b1:80:19:d3:3b:d4:62:
8e:25:c1:15:ce:17:1e:b5:d0:a5:cf:1e:9d:5c:d4:
ec:9c:d9:25:46:75:3b:38:44:58:6e:46:10:35:36:
db:78:ed:93:92:73:a2:c3:a2:73:db:bc:a1:73:68:
6d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7C:D1:EF:00:1D:2F:6B:36:54:05:16:36:00:D5:81:A4:2C:CD:55
X509v3 Authority Key Identifier:
keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:40:39:7c:4b:17:89:d3:05:f2:bd:f8:39:4e:c6:2a:9d:4e:
62:65:4c:2b:d2:5b:c8:57:d7:4b:48:72:c9:10:be:a6:61:6b:
00:7d:f0:28:77:a6:66:e1:07:67:bc:80:41:3e:16:5f:23:55:
fa:9c:a1:50:55:28:0c:3f:7c:3f:8c:e6:35:3c:b2:f7:fe:ba:
16:5e:de:1b:2a:3d:04:9f:39:cb:2b:49:96:bc:96:71:5c:d8:
28:c3:88:9f:af:38:60:d6:c5:f0:be:2e:77:c8:87:2f:06:c5:
92:12:4c:50:4e:2d:97:dd:ad:e3:5f:ee:2d:78:ca:7a:c4:fc:
aa:b6:54:82:d8:7a:65:90:a7:ad:a3:c0:5f:cd:d9:02:d3:79:
30:c6:4a:91:9f:01:f5:9a:bd:90:65:11:24:e0:d0:51:9a:25:
e5:19:2f:71:f5:51:87:2c:17:99:35:c7:9f:8c:97:53:24:64:
8a:d8:01:20:47:a7:b0:bd:38:90:13:7f:45:bd:4c:72:6b:69:
41:5a:44:d1:7a:ec:5f:ee:c9:24:80:32:0b:a6:ca:94:c8:a0:
13:1e:dd:d4:d6:93:aa:b1:a3:83:ff:41:57:df:53:82:e9:b6:
1b:54:d7:53:16:5c:90:74:c7:16:7e:bf:42:05:ff:13:46:83:
0c:14:34:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:29 2025 by rpki-client