Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
File: PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft (raw, json)
Hash identifier: Ip6nppSOp6atniSIv0Tb4Q7hxRBa9uKCEYAufB3YoDQ=
Subject key identifier: 6A:A1:D1:8A:F2:BC:BD:D6:43:D4:FA:82:DB:E2:F8:26:6A:BF:C3:78
Authority key identifier: 3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
Certificate issuer: /CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Certificate serial: 0194BD85B83A04767D7E095D627B43AB40F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: 2MDxMm-aOr9Av8UXOYCdSDY5SVw.roa (hash: e92Ni3UZiEOlX4qjyE83BJ38B3EV4PZWBH8ze8DKvoY=)
2: PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl (hash: WnwGsEKWgNxnYvg2Bxsmcpa4pvUqxo6xTQ8TJAElVrM=)
3: uzKXKwwaxv9ZwxlwOddK0wuAjk0.roa (hash: LTwXOrA7s8AT8kiK31u64jYBKrFuiT/zV7vy/MG1J4A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b8:3a:04:76:7d:7e:09:5d:62:7b:43:ab:40:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=6aa1d18af2bcbdd643d4fa82dbe2f8266abfc378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:d5:21:a1:5d:c7:1a:97:6c:97:65:3c:61:
cd:05:50:d7:0a:21:77:43:aa:3a:ad:76:75:9f:ac:
bd:11:ff:ba:2d:7b:2a:d6:49:55:c0:3d:40:87:fe:
cd:ed:6f:a6:c5:05:7d:3f:ac:ef:5e:5c:47:e0:65:
e5:b6:0b:94:bc:a1:79:38:b4:9f:99:ff:96:74:90:
80:b0:9d:20:a0:ee:08:6a:a4:44:37:a7:73:fa:1b:
76:5a:60:64:ec:4c:80:96:bf:f4:b5:f1:c0:1b:23:
fd:6e:c4:f0:86:a0:85:84:50:e8:7d:b0:1c:03:8a:
d0:84:5b:ca:1c:c4:0d:f6:60:c3:aa:9d:39:87:c6:
5b:34:c7:7a:f1:dc:a0:1e:95:cf:7d:a0:da:fd:1d:
45:4e:b1:f9:0d:44:b8:40:06:87:0b:f2:a3:d3:43:
c4:e3:0e:44:0a:79:da:80:5d:14:5b:af:ce:f5:be:
f6:ad:70:61:74:ae:ba:54:e7:da:dd:4e:e0:29:da:
c6:eb:0b:78:60:c1:dd:0e:ed:e0:ee:43:0a:46:38:
bf:a3:c3:d1:12:96:5e:0e:75:5f:25:cb:20:00:8b:
1d:c2:36:03:21:9d:6e:73:ef:1b:ed:20:63:d8:6a:
d4:00:7a:c4:5f:99:33:a7:ee:82:0e:48:17:9b:51:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A1:D1:8A:F2:BC:BD:D6:43:D4:FA:82:DB:E2:F8:26:6A:BF:C3:78
X509v3 Authority Key Identifier:
keyid:3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ba:09:01:7b:5d:a5:db:32:c2:59:1a:72:30:26:ae:ca:50:
40:b2:97:1e:9f:20:d0:81:ee:39:e9:99:51:7c:49:1c:50:ef:
a3:73:21:b7:3d:75:87:a7:85:00:18:e0:0d:36:a4:cf:a7:33:
c6:32:9c:01:45:0f:e8:ef:36:75:2d:4c:ca:be:71:4b:a2:35:
62:de:94:c8:d5:89:ee:5c:5c:59:a2:5b:d7:5a:33:35:94:85:
d0:0f:92:3d:b2:7c:32:fe:e1:82:1c:ea:b3:49:2f:66:37:81:
3f:cf:5b:75:81:c4:e2:f8:af:ea:b3:fd:0b:2e:a1:00:ea:5b:
fc:23:6b:47:52:fe:33:7d:62:55:1d:d2:ca:37:45:a3:4a:b9:
16:2a:3d:fa:19:ae:a0:86:b1:d7:f0:28:f4:02:61:fb:05:51:
a7:3c:15:a3:95:54:85:c5:a6:17:3b:73:6d:f3:4c:4c:2c:b3:
eb:53:31:ea:38:27:c7:e7:66:96:13:8f:13:3b:df:be:81:37:
63:25:2f:9b:a3:d9:e0:f8:0d:78:24:b1:2c:20:73:f0:0e:38:
11:04:53:bc:26:41:61:28:ea:30:30:76:a3:e2:98:a6:c5:46:
ad:ee:98:c9:7a:06:58:4a:7a:e4:72:b1:83:60:ce:dc:fa:5d:
f0:7f:e5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:57 2025 by rpki-client