Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: 2adgNqxORneDmtJewl36/2SvWAmEmy2E/6Usmh4V/jc=
Subject key identifier: 10:C1:DD:FA:00:9D:F4:4C:8D:D6:63:7F:F2:EF:57:F4:1A:0D:9F:45
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 0194BD1795C8E208110FF66C265958422062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: ONMMEr+q2SLa5ipODOy/xqlufKJcQleSIpASNRXLoEk=)
2: pXJDsaj0ZUCw_GiSDcUZAr3Eqys.roa (hash: jxE0YH1Sz5qp4TF2g6NLi4CtXpHMgBECSGalZs0qi4A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:95:c8:e2:08:11:0f:f6:6c:26:59:58:42:20:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=10c1ddfa009df44c8dd6637ff2ef57f41a0d9f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:27:d6:0f:fb:47:ed:60:17:ae:96:0f:80:
13:22:8a:a2:74:ae:63:bf:fd:05:b8:2a:12:65:59:
f3:64:58:af:f3:f4:3c:f1:75:d3:c2:58:1b:27:2d:
dd:9c:5b:04:4a:52:8d:25:1b:dc:f9:eb:2f:52:cf:
a4:e1:df:99:1d:06:36:27:93:3d:f3:37:27:57:8a:
d5:19:ac:c1:aa:53:90:ef:30:9e:68:ec:0e:ac:bc:
f1:ee:a6:69:23:8b:83:24:75:70:9f:7d:52:49:b3:
6b:35:e0:42:55:1f:3b:3c:85:f7:8b:e9:88:68:49:
6a:44:28:82:04:66:24:a7:ba:96:2f:34:85:6d:e4:
6a:d4:60:0e:23:27:87:5b:98:36:c0:b6:75:58:27:
1c:82:0f:d5:aa:7f:0f:88:47:fc:90:99:07:91:b4:
80:1d:56:02:ad:fb:ff:d2:9e:25:99:ca:77:e5:59:
4a:8e:6f:19:bb:eb:3d:72:9f:7f:e5:c6:c4:f2:01:
5e:13:96:c9:b7:56:08:e2:1f:92:95:60:40:6d:bf:
b5:61:91:5d:ad:6a:77:ab:4c:24:95:21:5e:f2:89:
27:2b:72:b0:6b:80:0f:76:d2:65:5b:b5:97:c4:85:
51:de:9c:b3:51:fd:0d:c1:bb:67:6a:8f:e2:c1:e2:
f6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C1:DD:FA:00:9D:F4:4C:8D:D6:63:7F:F2:EF:57:F4:1A:0D:9F:45
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1a:5e:e5:cd:03:2c:2f:23:49:a1:5f:da:1e:b1:85:1e:3a:
f2:d7:be:45:97:d6:34:c3:27:34:c9:67:9e:80:c4:62:56:db:
31:dd:4a:5a:aa:63:2e:a7:75:61:b5:13:68:2c:29:3c:0a:a7:
df:1f:58:e3:f8:3f:65:0b:75:b2:f9:91:e2:4c:c0:8b:cb:45:
89:0c:a8:e2:8f:c3:a5:88:c7:72:33:8b:ed:70:f8:83:e4:3e:
53:15:3e:f4:b1:27:f0:3b:4f:ca:13:f6:89:31:d5:03:e6:41:
af:a6:40:72:4d:aa:08:00:9c:f4:f4:ec:ee:a8:b3:2b:ed:03:
57:92:8a:96:24:33:3f:71:a1:34:9d:5e:98:c4:cf:56:19:c6:
ab:fb:e4:b9:86:32:75:d1:8e:c1:55:06:0c:66:d5:54:76:3b:
eb:dd:9c:be:9c:90:9c:bf:92:bb:7f:04:0c:b6:ff:d2:e5:86:
d9:ae:27:09:4a:61:07:e3:82:28:b4:ef:f2:9a:72:fe:6f:d1:
57:64:40:a6:72:94:53:a9:0a:14:8d:fe:7f:1d:64:67:c3:bf:
4a:b5:25:75:55:a6:96:e7:95:c7:75:04:ef:d7:b7:8e:f4:30:
fa:7d:a5:69:69:8c:0d:12:fa:8b:9a:8f:4a:e7:38:88:90:56:
32:59:64:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:44 2025 by rpki-client