Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: LcRAOS/gEPeRbvIiqnwavE8RnDTfnJb2TexO59uetbM=
Subject key identifier: A4:C0:A9:0E:D4:C7:48:48:0E:E7:1D:EF:82:53:85:03:AC:3A:C9:D5
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 0194BCAA2ADAACCDF899DA8EBEAFC08A1397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: Yqgk5hoRLDAm4lP9Mf7CVlosZpS6DzRNZh6f3+SM6dQ=)
2: q9uMRJMivdNIUmR3cIXWE4hBpI0.roa (hash: k+Mam0ND2lwJk85PckjyzqHvxu7FYX4bMXDwNQs3Kx0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2a:da:ac:cd:f8:99:da:8e:be:af:c0:8a:13:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=a4c0a90ed4c748480ee71def82538503ac3ac9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:b6:f2:33:84:e8:ae:05:99:c8:d8:a6:11:
e8:5e:c1:e4:37:33:1b:c9:79:7f:7e:f3:60:dd:f0:
ab:91:a4:ae:98:4f:5c:b1:09:89:b7:72:37:58:95:
dd:7d:79:f3:98:ba:a3:7e:ed:42:22:88:cc:d7:5f:
d9:b6:5a:d5:d7:d1:cd:12:27:12:37:22:e7:41:9c:
8c:19:c1:b3:20:99:8e:8b:15:43:40:b9:e9:b7:27:
59:42:d0:f3:73:0f:92:3c:e6:a3:a2:f5:7f:27:59:
a9:8c:a9:0f:79:1e:aa:2c:2a:c6:54:9c:e3:0c:fc:
2c:64:81:44:f3:22:27:10:4f:8a:b4:a0:79:40:26:
36:5f:78:12:c6:d2:c7:9d:64:25:4d:97:71:60:90:
b2:37:8e:e4:5c:bb:ed:44:79:94:0d:e7:e4:70:1b:
2c:ec:e8:cf:53:06:be:2d:96:ae:e1:09:f6:2e:e3:
2b:63:4a:ff:e4:4b:28:e1:bb:d1:fb:2c:27:89:0c:
97:e2:2e:79:3e:72:7e:84:d2:88:cf:9e:17:0d:9a:
a8:44:a8:4a:ed:91:bb:ca:d0:03:1b:c3:40:6c:a3:
bb:fa:82:54:21:ac:71:d0:68:00:0f:ce:4a:2d:00:
d9:90:47:60:aa:f6:2f:11:ea:95:5d:95:06:84:8d:
88:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C0:A9:0E:D4:C7:48:48:0E:E7:1D:EF:82:53:85:03:AC:3A:C9:D5
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:70:d8:50:1e:fa:08:bf:1d:11:c8:ba:77:49:4f:93:54:02:
e8:1e:fc:8b:9f:b6:3c:1c:1e:34:63:20:37:4d:41:24:18:a0:
d8:cb:03:a1:98:72:a4:68:6f:ce:13:f0:c5:eb:2d:f9:09:eb:
b3:16:55:bf:99:84:85:31:89:39:30:21:b2:d7:7a:2d:fa:3c:
80:05:13:60:6c:b4:fc:6a:dd:c0:fa:a7:6f:51:e4:2f:f1:9c:
ac:d1:1f:ed:45:7b:1e:88:28:47:da:bb:11:20:f8:b7:b0:90:
b4:07:11:6d:dc:67:fa:95:82:b1:1e:c4:91:5d:bb:5b:19:b7:
8b:ad:8c:bc:0c:f4:71:14:35:cb:99:5f:4a:e1:d4:8c:9f:b0:
1a:a2:0b:3a:b0:c6:eb:7b:0a:50:1c:c0:b4:18:8b:e0:e9:34:
93:0a:71:6a:fa:eb:39:fe:3b:d9:f6:eb:12:75:6c:d0:1d:80:
d8:28:82:ab:31:70:18:17:26:13:a0:45:7b:f3:6a:24:06:b0:
b7:13:a2:80:45:ea:94:15:03:59:bf:66:ed:28:8c:c1:96:1e:
28:2b:d0:4f:ce:8d:64:60:73:bb:25:03:ec:9b:8b:1c:2b:51:
7f:39:fa:51:36:e3:58:ca:60:9e:ba:33:85:61:31:ea:4b:59:
98:d7:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:23 2025 by rpki-client