Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
File: p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft (raw, json)
Hash identifier: EAqvvd6f8vdkw+RKnJP2QakCKGcSKTnb56OsssTCw/s=
Subject key identifier: 23:E5:04:8E:BB:51:BC:84:DF:FD:DB:F4:3B:95:42:12:0F:C7:E3:BF
Authority key identifier: A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
Certificate issuer: /CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Certificate serial: 0194BD4EBC52D28E4FD3AD76CDEDBD20598F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
Manifest number: 042F
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: oe0ViHcJehxm3wVuZHtIwUX00hU.roa (hash: RwLw3XJajb9LZZAlaGbGSJVNCQJewc1VgXJkyuKlD8Q=)
2: p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl (hash: cy6Cqo6EE9CrAEaGE4sLQi3pBZZtIUYw0kxGbFB53eM=)
3: rEm8DnSRjF-eOZ8W-19-W5YBOlI.roa (hash: oKxbV7NuBt8nP02xM3KhblNP7v+2Q4dV/sQu1W1Wh/I=)
4: wsmN0GUZsWjC_T-MselV4vkxQWc.roa (hash: yTPdTeVo9RosDc+EbxC7mvYcTFyk5tLkcD8SHn8y0Zk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bc:52:d2:8e:4f:d3:ad:76:cd:ed:bd:20:59:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=23e5048ebb51bc84dffddbf43b9542120fc7e3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:bc:87:93:60:5e:8b:8e:3f:24:3b:d5:82:
34:5b:1f:84:a5:a0:23:c9:43:cf:97:de:fc:20:00:
41:a2:79:49:22:93:4a:9e:e8:0e:8e:2d:3a:02:a7:
a0:e2:0d:83:ce:8e:89:4b:dc:8d:9b:89:80:9b:91:
86:7a:f7:b2:e2:93:92:91:5c:97:5f:9d:2e:09:d8:
5b:a9:af:87:81:18:25:75:8f:5f:5f:d2:8b:58:2d:
73:ec:3e:46:5e:ea:97:95:ba:07:fa:e2:36:7c:cc:
b5:30:86:b4:d6:87:0d:97:3e:50:40:9f:55:e0:32:
9b:d6:8f:1f:70:df:8c:b2:ff:56:ba:75:40:e3:aa:
c2:1b:92:60:34:d7:61:27:08:98:fe:da:ba:44:ab:
1f:6c:63:13:40:10:5e:b2:79:ff:3c:25:f3:a7:ad:
40:f0:02:84:f8:4e:d2:a7:63:04:9e:5d:02:5f:0c:
3b:79:7b:7a:e3:5d:4f:ee:ea:de:d7:74:88:bf:e3:
32:31:37:40:e8:09:0c:a0:bc:1a:dc:9e:6e:46:c5:
b5:da:12:a6:6f:ff:d2:c8:1e:c4:b0:4b:63:90:9c:
c5:b9:14:a6:91:29:ac:a0:18:8d:82:7b:3a:6c:a8:
35:a7:2a:21:dc:1b:a0:c0:4e:ba:04:ca:ff:fe:f1:
91:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E5:04:8E:BB:51:BC:84:DF:FD:DB:F4:3B:95:42:12:0F:C7:E3:BF
X509v3 Authority Key Identifier:
keyid:A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:65:26:bd:d9:e0:05:0e:7f:33:f6:a0:b6:e4:0c:0a:8d:50:
27:d0:b3:08:99:35:f8:8b:ca:f3:bd:72:16:64:eb:b6:39:1b:
e1:0a:9b:6f:7d:0f:e2:41:80:13:8e:9c:46:60:0d:f8:4d:99:
56:84:20:7e:37:b3:09:cd:ba:a6:56:f0:41:a5:94:63:b2:22:
2c:6c:23:bd:16:9d:f2:bf:1f:83:a5:bc:d8:66:d0:ec:3b:ed:
f5:88:58:e5:ac:4e:03:b9:84:b0:7b:7b:85:85:0f:ee:70:a3:
e9:4e:11:5c:c2:23:fb:2e:71:89:7c:93:a4:2a:f0:32:0f:f7:
83:e1:dc:5e:13:a8:e3:97:2e:54:d4:db:8c:97:82:d5:d2:49:
fc:71:53:e1:af:c5:1d:73:11:85:dd:36:c6:8a:3e:e0:c8:2d:
0e:d8:71:ba:1a:39:6c:7d:1f:f0:af:9d:31:2e:0c:12:61:c7:
62:f1:88:3b:e2:f3:60:35:5e:d7:ad:e4:2d:d8:5f:6d:62:5f:
a1:75:f3:da:11:0b:7f:3f:3b:30:d0:5b:fb:f8:27:e0:ca:30:
48:74:59:9d:1c:a9:cb:bd:90:95:b1:2c:71:97:66:c2:25:1d:
2b:cc:d5:c9:0a:ec:05:79:70:91:df:b6:e2:1a:45:cc:b5:e8:
76:a1:0c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:42:46 2025 by rpki-client