Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
File: pi-5_THCxgq9oU4LPJKomGaCnY4.mft (raw, json)
Hash identifier: oT/hnVJ1PCcxi9MzFxveOG2FxNT45sGjgujs4rWOU8A=
Subject key identifier: FD:CA:E1:FE:C6:7A:45:DD:9B:19:78:F8:FA:21:D3:1B:60:35:54:21
Authority key identifier: A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
Certificate issuer: /CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Certificate serial: 0194BCA9B2B10594974633C8C3E33051CB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
Manifest number: 0B4A
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: ZIKQeQoBMcgJAAR9TP75a76cDn0.roa (hash: mC8mJajWFAnAfTbKX+aRBKG3/mLcH0XDCCRpUt2qu64=)
2: pi-5_THCxgq9oU4LPJKomGaCnY4.crl (hash: DT3jNtI7W+3TiKeyBQbBiE8bZ2LYHUnZOA6HY1d4itk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b2:b1:05:94:97:46:33:c8:c3:e3:30:51:cb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=fdcae1fec67a45dd9b1978f8fa21d31b60355421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:63:9c:69:bc:45:ba:17:7e:ea:46:3f:90:
2f:b1:45:db:a9:6b:8c:e6:9c:b8:e7:17:4e:4e:0d:
c6:53:a6:8e:02:0f:f7:4c:76:19:06:1b:04:be:f7:
c7:46:6b:30:93:3e:d9:4b:9f:11:a2:14:34:00:6f:
d1:3c:66:bb:c6:94:e0:9a:b0:f0:c1:80:aa:46:97:
42:d8:7d:8a:db:89:01:5e:d0:3c:f6:ba:3f:ac:66:
7b:23:2f:c0:55:fa:27:5d:9d:4a:b1:87:4b:e5:77:
e6:61:6a:5e:78:d3:8f:e8:5a:6e:50:34:46:d7:9d:
4e:9b:74:5a:ba:fd:0c:31:b5:0e:57:2d:76:a7:24:
d9:77:9e:b9:36:4f:98:d7:0a:e0:10:72:74:de:c3:
e9:47:77:1e:cc:4e:87:36:6f:96:5e:aa:36:e0:a2:
df:d7:3a:aa:b9:2c:99:3a:95:0d:ba:5d:6f:65:b8:
83:19:59:ea:2d:e7:b9:94:00:e7:b9:c9:fc:1d:cf:
31:68:f8:9b:dd:c3:c6:1b:15:2b:20:30:44:c7:3b:
f5:bb:c6:4c:e6:f5:23:ff:61:63:be:6c:c3:9f:20:
0e:0e:ba:06:f9:b7:df:52:12:e7:98:3c:87:73:97:
b5:f8:fb:3e:bc:7b:36:0b:c4:87:fa:5e:68:65:4c:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CA:E1:FE:C6:7A:45:DD:9B:19:78:F8:FA:21:D3:1B:60:35:54:21
X509v3 Authority Key Identifier:
keyid:A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b0:06:83:00:11:13:a4:6d:33:c0:91:3b:72:58:d1:a7:46:
8b:d6:f9:59:30:0c:da:9d:c6:1a:0b:ca:3c:06:9c:cc:dd:df:
09:f4:c1:b3:1f:10:30:6f:21:fb:9c:bc:6c:5f:a2:51:fe:a4:
70:0c:42:05:e8:cf:79:0d:1c:a5:ca:e6:0b:a0:6d:d0:e7:eb:
10:1e:16:13:59:c4:e0:4b:0d:a0:64:1f:23:6e:87:b9:73:2d:
aa:b4:47:4c:af:43:09:c9:bc:df:e4:ce:54:d8:55:1b:82:c2:
1c:4b:10:4c:d6:f0:d5:35:ee:47:4c:19:3f:5f:0d:9e:05:cf:
bd:20:77:5b:36:3e:67:f9:45:a0:21:61:06:af:6a:2c:9b:32:
97:8f:21:c6:32:9f:e7:26:3a:96:67:b7:75:f9:10:0a:97:14:
8f:c1:88:fc:41:7f:84:da:69:81:02:35:92:6f:75:1b:e5:08:
e2:13:47:22:dc:26:e2:de:ee:2c:1b:11:0e:d5:0d:c9:dc:2f:
45:f4:6d:9b:ec:df:50:c7:7a:c3:30:9a:60:7d:d0:a8:94:08:
98:01:d0:ec:12:ba:3b:6f:26:cc:d8:83:02:34:dd:c8:18:05:
1f:e2:db:2c:f2:33:2d:32:67:22:e8:29:b3:5c:d0:db:0d:01:
82:48:dc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:27 2025 by rpki-client