Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
File: pvh89KFbnngiRVs6qK8LXtOimfc.mft (raw, json)
Hash identifier: oqptuMNgUtJEQiA1Dbr/jArTS4wbQSG/tAzwUpM9d4w=
Subject key identifier: 38:2E:F3:47:18:A9:E7:81:ED:60:FD:E9:B7:C4:12:F5:E1:C2:1D:B7
Authority key identifier: A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
Certificate issuer: /CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Certificate serial: 0194BCE0946D1F622F94FEB69E55467F7F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: A0AYtzxUnj18_WVT-ZtPo3VQOok.roa (hash: Ky9GG0Y6/3CRG+EZa6gdZtX+mEutz5bg1CsKFSgBHBU=)
2: YoFLZelk0KvVc2c4StbzyHcrvm0.roa (hash: 1/qU4jnzCv1Ym4GrpqvgYqQAdtCVCWo1utnZCleM9zs=)
3: pvh89KFbnngiRVs6qK8LXtOimfc.crl (hash: gLy9lwECDRiTgT8bi5g+qzBpZLznE58hQVwSJ51Te58=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:94:6d:1f:62:2f:94:fe:b6:9e:55:46:7f:7f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=382ef34718a9e781ed60fde9b7c412f5e1c21db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:e1:e8:56:d4:bd:d5:fc:4c:a6:06:e8:33:
c4:e8:ca:9d:0b:c4:c1:16:66:d1:19:8a:a4:db:b8:
06:58:9d:a8:a1:dc:d7:60:e4:d7:f8:54:fa:61:28:
f2:79:1f:98:fe:c0:18:7e:03:aa:9d:30:a4:57:46:
46:e6:2c:82:3a:5d:36:5c:c3:6c:bb:72:dc:ad:a0:
22:28:cb:2b:35:8d:eb:a1:cf:7c:87:d0:f8:d1:d9:
3d:76:38:cf:a6:6e:cf:a9:25:b4:90:e1:3b:a4:43:
69:c4:3b:48:be:14:11:37:17:c0:7f:16:41:16:41:
9b:bd:ab:de:ca:de:f2:4c:28:22:5f:49:50:7d:ed:
22:50:5a:6b:20:b6:22:7c:44:85:28:6b:0f:ac:28:
04:4b:eb:8d:f5:07:23:d4:9e:c5:1e:9e:2c:f6:65:
e5:14:a1:11:95:f2:09:07:23:c1:41:97:b9:aa:3e:
2c:ee:f4:46:6f:09:f4:7b:3f:0c:4b:2c:dc:ec:4e:
47:7a:f9:8d:ea:13:d6:28:69:24:6f:7c:52:1f:3a:
30:d6:39:24:30:0b:c4:49:af:e3:f7:65:9a:86:e2:
6a:21:13:f1:0f:72:bd:63:a0:82:5e:ea:c8:10:03:
a2:32:ec:ca:40:05:b6:d3:c2:fc:8b:50:c7:72:12:
57:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2E:F3:47:18:A9:E7:81:ED:60:FD:E9:B7:C4:12:F5:E1:C2:1D:B7
X509v3 Authority Key Identifier:
keyid:A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1b:ba:6b:01:b3:85:d6:73:98:74:3e:d6:1f:a8:b0:df:f9:
01:4f:38:60:31:f6:56:91:76:23:0c:40:d9:59:a2:31:8d:5b:
9b:59:60:8c:bd:5b:fd:62:fc:b4:00:2a:08:0c:9a:27:dc:06:
ea:52:68:4e:8a:3c:36:c3:8d:4d:8c:90:6f:7a:7d:d9:91:3e:
60:61:bd:71:7a:19:06:dc:f1:79:9b:37:61:12:b1:6e:83:7f:
7e:50:68:4d:bb:17:cb:79:e5:7f:44:55:93:6f:6b:8a:4e:2c:
9c:e7:e9:c7:a5:c0:1c:08:48:ae:49:0d:7a:bf:5f:5e:cc:10:
75:33:68:59:2d:7a:e7:cf:cd:d9:93:72:2b:98:51:67:3c:fa:
37:66:89:7a:48:60:c8:22:05:fd:e8:33:be:a2:bb:30:73:41:
21:6e:a2:ad:7a:fe:4d:de:77:07:b4:8c:52:09:f7:34:10:6d:
54:bf:1b:7c:17:68:92:14:bf:79:b3:5a:fb:75:42:13:e0:bc:
a1:ab:87:eb:0f:73:fb:74:ca:9a:6e:64:c1:27:3b:7b:d0:aa:
d3:b0:a5:46:51:71:b5:f7:b1:a4:5b:a9:2a:7d:41:f8:f8:c9:
e9:2f:9f:d5:f0:19:e5:5e:9a:55:c4:4c:73:37:ac:d1:45:bc:
92:ea:46:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:49 2025 by rpki-client