Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File: prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier: PTofDJgezZEKkI49aan6DG6u7p0A1JcwZ/2NGlRDccw=
Subject key identifier: F6:73:E5:EA:BD:17:4B:98:CE:22:E9:EF:0D:A4:3E:92:27:41:C4:C1
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer: /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial: 0194BD17B4A1244A70FBF0F5258D31EC7488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number: 0785
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: SY81gJpFL3O5UNAf48JLyqIodXE.roa (hash: jLBfqqRL2Al9+uGkQb3qfdiObpqqeOZguvx4px0RKv8=)
2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: JVxq7rkv7jSPzA6Kz9mMI0EeEuuJllkpjkL6FVrtB9U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b4:a1:24:4a:70:fb:f0:f5:25:8d:31:ec:74:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=f673e5eabd174b98ce22e9ef0da43e922741c4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:27:7f:28:fc:aa:cc:25:17:28:42:78:cc:
26:6a:22:c5:fb:49:06:f2:a3:05:f4:28:bf:15:6f:
8b:89:7c:00:59:c3:75:ca:b5:79:e5:cf:b4:d7:54:
e3:4f:42:14:84:80:68:91:ac:c6:51:42:d1:ab:c7:
02:c5:5b:91:7a:48:83:fb:f4:77:af:a3:17:00:2c:
73:32:b7:f1:0e:f2:1b:d7:19:71:ee:85:88:dc:fa:
02:6f:a6:33:bb:d6:3c:e0:3d:90:e4:60:25:36:77:
51:af:93:e8:5b:9f:a3:a2:a7:3b:1f:55:e3:cb:cc:
d0:9b:c4:08:82:4d:d0:93:72:90:53:36:da:6f:a9:
2a:67:d4:8a:fe:ef:43:06:3d:52:46:2a:8f:7e:29:
d5:11:fb:bd:83:d6:d6:7d:58:a5:73:f1:5e:97:ef:
8f:26:bf:c2:2c:e1:4e:f0:63:59:a7:81:03:e2:d8:
bc:68:24:b0:78:15:90:09:2e:f4:bc:b9:b0:87:07:
da:42:04:32:53:89:a4:38:1a:85:10:f6:03:a4:41:
1c:cf:83:72:f8:b0:f4:0e:d4:13:7b:aa:d7:6d:fc:
05:c6:6c:43:e7:f7:49:5e:2f:38:a3:b4:8e:21:e2:
06:ff:b1:a5:09:21:05:9f:fa:4d:9e:c7:00:4c:5d:
fd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:73:E5:EA:BD:17:4B:98:CE:22:E9:EF:0D:A4:3E:92:27:41:C4:C1
X509v3 Authority Key Identifier:
keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3f:86:b9:b5:2c:46:a9:92:7d:80:8b:d0:ee:a0:93:d1:bf:
7f:bb:19:54:c2:60:4f:69:de:f2:d2:da:4f:fb:bc:a2:1b:84:
6a:c0:d5:06:61:5c:10:87:79:db:3c:d1:82:86:e6:06:70:05:
80:c8:7c:49:9b:1f:4e:d8:ae:9f:25:77:7f:cf:c2:36:f3:bc:
c4:78:56:c4:29:ac:0c:35:98:2c:f9:aa:e8:9d:2c:0e:50:e2:
f8:46:b0:02:33:1b:75:95:03:8c:51:bd:51:e1:5a:11:fa:a8:
58:75:c6:8c:79:e3:c1:51:6b:54:8a:a4:1b:c5:8f:ab:84:08:
f8:40:5d:52:2e:25:ee:21:6b:e8:c8:32:27:75:43:67:dd:55:
50:6b:82:7b:62:db:09:e2:32:53:54:5d:ee:49:73:f0:bd:0b:
27:d0:58:dd:e5:75:76:77:a0:d4:96:02:22:44:59:8e:bd:04:
70:00:61:99:be:be:4d:eb:cd:bf:c5:4b:bc:97:2d:6b:32:09:
6c:b9:7d:3a:c1:b5:a2:ec:1e:2c:8e:f4:c4:22:4d:ca:23:0d:
5b:c5:20:a0:5c:d6:28:50:8b:f5:c5:76:69:36:63:86:08:83:
3d:c3:60:8f:aa:3d:dd:f2:ea:f7:84:49:4e:a4:98:3c:31:a7:
51:d9:da:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:40 2025 by rpki-client