Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier: Wx6MmuwE+akPdpbQ/LTdbD9v8cEq6zXTQMFd6AD7VfE=
Subject key identifier: 61:C5:C9:EB:EF:EB:CF:E8:FD:F7:DD:23:6D:F7:5B:A6:4D:D7:30:76
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 0194BC7299082A212642947252719C03D7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number: 081D
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: 6OHRPgeifclR-sQC4fugv8s_Vdk.roa (hash: 9ms/24GOH/dvkFj05SjI9iuZc0orkOzTTkOJ0godVy4=)
2: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: CzZZwcC5Wi/isN2vLB8AFB2N4UwLqWxi80NEfpWobMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:99:08:2a:21:26:42:94:72:52:71:9c:03:d7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=61c5c9ebefebcfe8fdf7dd236df75ba64dd73076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:0a:c5:a9:62:02:e6:8d:f9:16:af:7e:0c:
ae:4c:d3:5e:f8:88:0c:0c:a3:46:f1:d6:be:fd:78:
0a:c2:b1:ed:20:06:61:4b:eb:28:ba:91:75:c6:1e:
ce:94:22:c3:6a:46:16:c0:71:21:1d:4d:91:67:35:
b1:f0:95:e1:5e:bc:cd:19:de:bf:e6:56:2b:ff:00:
b0:38:4e:7c:f1:2e:b3:c3:4e:b7:5b:10:a4:1e:4c:
36:1a:ff:b9:67:ec:c4:87:0d:0d:e6:51:35:e5:09:
7e:18:a9:c7:28:5e:2a:9a:d2:e0:5d:88:88:ec:20:
c4:9d:e0:fa:7a:90:29:bf:8c:3f:21:6d:03:dc:88:
66:e6:d8:95:07:aa:98:3f:82:45:63:eb:10:e5:83:
9c:0a:c9:89:e7:23:14:7a:0f:fe:16:f7:65:c8:95:
7d:2c:97:c5:cd:f6:48:ee:c2:a4:f9:2e:b2:60:fc:
86:c0:fe:0c:f3:6b:be:a7:a7:2f:4c:42:00:f5:32:
a3:2a:73:b9:c8:6c:eb:fb:bb:f1:a8:29:e9:b0:0e:
aa:7a:51:fd:02:d1:7b:48:9e:87:e7:18:74:c8:7b:
db:88:bc:ce:b7:b9:3b:36:5b:69:7c:7e:f1:de:20:
58:18:89:de:3c:78:f5:65:9e:6f:60:16:c1:ae:f9:
c6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C5:C9:EB:EF:EB:CF:E8:FD:F7:DD:23:6D:F7:5B:A6:4D:D7:30:76
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e4:2b:39:78:ec:96:2e:09:fc:5b:63:5c:57:08:c9:96:f3:
7f:4c:d3:0b:d5:ff:56:0c:c7:05:0b:0e:6d:4d:a7:8f:c7:24:
f0:05:36:eb:5d:aa:5e:0d:bb:d0:7f:d6:e5:2d:83:e2:67:ef:
3c:42:bc:09:55:b0:05:b9:b7:db:ba:f4:57:d8:a7:a7:3b:24:
7b:bf:ae:87:84:ea:98:39:83:b5:34:17:97:85:88:ed:4c:8b:
a3:97:26:29:52:51:87:85:95:f5:c7:76:89:3d:51:85:ba:3b:
a6:18:ba:f6:9c:08:a4:4d:18:e7:24:d5:a0:be:ac:a3:e3:62:
9b:d4:ab:98:ed:03:1a:65:ea:b3:e1:13:ca:90:9a:00:0e:fe:
ae:04:9b:03:bb:79:f4:25:96:37:f7:70:5d:3a:1d:f7:ed:8f:
1d:df:7c:36:9d:82:ac:65:43:0b:23:0c:0d:21:2d:ae:cc:2a:
b2:9e:01:2b:d0:67:8c:92:e0:54:6b:4e:65:44:93:c7:e9:8f:
b5:3a:17:74:a5:63:36:f0:7e:8f:e2:e4:11:20:e9:31:fb:d0:
00:e8:3e:43:fb:db:a6:f0:30:25:a1:37:ae:34:4e:00:bf:b7:
82:24:7d:d5:da:b4:ea:c6:28:3d:b8:2d:ab:d8:d3:72:3e:bc:
23:b7:0d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:41:59 2025 by rpki-client