Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
File: P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft (raw, json)
Hash identifier: +9f6QTuUnW1xw2sLZ++O2RPiE34K0z9dDRwwClV0HZk=
Subject key identifier: B2:C8:3A:23:89:F9:FA:D4:11:74:3A:EF:E4:49:17:2D:0F:BF:EC:6D
Authority key identifier: 3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
Certificate issuer: /CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Certificate serial: 0194BD178536BA9F171B96DE957CCEF47544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl (hash: 6VFEK5LV/zeA43skQtEV68lXND35F+H/V1KCx1MHI6o=)
2: nJCyjIsWdPchQmqQbO_MPjGVVDE.roa (hash: Cr0JPO8tp2KrCcxC2yxuo3jq4OH+RZvqc/vb9Mmb68M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:85:36:ba:9f:17:1b:96:de:95:7c:ce:f4:75:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=b2c83a2389f9fad411743aefe449172d0fbfec6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:0b:bd:ce:c6:5a:03:08:13:47:bc:e9:a2:
33:34:59:5f:60:9d:09:7e:94:9b:1c:36:25:3f:93:
95:90:c7:67:63:ef:c3:49:21:91:01:71:59:00:f6:
40:a9:6a:1a:a3:03:20:ad:a2:55:a8:7e:2b:4d:47:
bb:e5:89:e9:c5:32:d3:da:a8:db:a8:58:08:39:26:
44:bb:d2:06:9e:95:9e:24:4a:90:ee:fc:81:36:54:
70:61:6b:c6:9a:5d:10:8b:d5:82:c9:af:3d:08:8f:
bb:81:a5:87:9c:d8:59:94:80:e7:37:78:c4:d6:69:
2f:4d:cb:96:3e:a0:f1:90:c0:96:db:b7:97:0a:53:
8b:18:ed:cc:8e:93:af:6d:63:1c:ff:5f:70:60:57:
c3:c7:c4:b0:42:ea:9b:72:65:72:0c:fb:f9:20:58:
63:90:b3:81:76:32:71:5f:26:67:af:18:79:2e:b5:
65:fb:89:93:9f:c1:99:f4:26:9e:ba:26:19:9c:ec:
c6:aa:d1:9b:d7:f3:57:ab:0f:ea:aa:b8:ac:d8:50:
8d:ad:71:ee:81:ae:d1:63:e0:d9:42:9b:d0:ec:7d:
d4:60:f6:c4:55:29:1d:e8:a1:be:7d:a8:83:09:83:
db:32:1d:83:b5:20:90:cb:49:f1:b7:ea:1a:00:d2:
1c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C8:3A:23:89:F9:FA:D4:11:74:3A:EF:E4:49:17:2D:0F:BF:EC:6D
X509v3 Authority Key Identifier:
keyid:3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:eb:49:1e:1b:57:91:66:59:8a:53:d3:53:cb:27:32:f7:d9:
fd:5a:e2:08:24:5a:6c:8c:4d:6d:8e:8a:1a:9b:ce:ce:36:44:
45:46:2a:50:43:d2:a1:27:8f:a6:4f:d4:6f:8e:86:d3:dd:88:
21:a2:1b:62:35:c4:2f:82:c3:97:48:eb:36:15:81:db:6d:bf:
c3:45:44:0c:00:98:2c:fc:3f:34:da:f1:84:e3:e5:9d:4f:ca:
5b:08:55:88:a3:ed:64:53:4b:21:25:a1:da:6a:5c:50:a8:bf:
d3:ed:27:07:87:c7:bf:38:ad:cc:63:99:73:05:62:dd:ce:50:
fb:66:fd:67:e7:cb:7d:51:02:95:ae:98:7f:1a:97:a3:d0:53:
a1:ff:e1:ff:14:51:ea:3e:5c:23:ed:65:4a:59:18:cb:21:02:
b6:85:e0:c2:39:30:32:20:7c:81:98:06:6a:74:c3:fe:7b:dc:
69:63:4d:cd:27:d0:a6:9f:31:e9:08:20:5f:48:b0:69:61:21:
9b:bb:a0:fc:e5:cc:a7:0e:8f:9e:83:ba:3a:45:f1:e6:58:e3:
12:ae:6c:50:91:4b:68:3b:89:73:34:f2:f4:20:cd:27:4b:88:
bf:ae:77:74:13:af:c2:c6:11:dd:e2:80:81:b1:6e:1b:5d:07:
92:76:e1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:20 2025 by rpki-client