Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
File: PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft (raw, json)
Hash identifier: 0CpF5T5m6CIhL/lgcbLPc/srwONConO1iVCc9I/USGk=
Subject key identifier: 0D:F8:F0:CA:FD:21:19:45:80:D2:75:53:1A:00:43:E9:27:53:A1:60
Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Certificate serial: 0194BD4E3D8B42849D8F74CC2859F0E2CFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: OEpDgvPaXUzQjnGh8DicbzVRQqo.roa (hash: Tur6sEnsgmRlnAb38JyLyFtsAnKmMwtkefk62vCJp6k=)
2: PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl (hash: zVc2fDsTaZ3jmx/HVmvCG0/dUdglleBHyjBXSbKE/qk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3d:8b:42:84:9d:8f:74:cc:28:59:f0:e2:cf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=0df8f0cafd21194580d275531a0043e92753a160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9c:07:98:45:70:0d:fa:e0:8f:33:83:74:68:
31:5a:c9:9c:29:c7:cb:79:0a:cb:ee:7f:fb:91:a5:
fc:a4:57:df:5a:bf:ac:87:9c:2b:a4:56:d9:01:21:
57:c1:00:c8:b4:b5:17:8b:a1:85:4c:97:78:84:c1:
6f:84:87:ce:45:01:cd:65:c1:c6:94:e8:7d:60:00:
cc:d6:66:7c:13:a2:dc:d5:6c:94:64:a5:62:6b:30:
eb:e3:e9:22:6f:65:a8:36:c8:15:d6:ac:d9:a7:0f:
96:e8:bc:fa:c0:96:9a:c8:60:02:45:5e:ec:de:c3:
48:24:1c:34:e0:cb:23:dd:81:06:ea:3b:77:c2:0e:
87:8b:c6:1b:19:fb:27:5f:7c:c9:1c:18:bd:ac:6c:
37:c0:b4:41:eb:c4:51:3d:57:ad:60:83:1d:6e:ad:
cc:ee:27:fd:66:8d:95:58:04:a6:6f:e1:5c:46:15:
6e:1a:d5:82:cc:01:41:fd:29:ee:23:76:6a:8a:c5:
00:e5:df:c4:5b:3d:3a:0c:28:62:bd:c3:e9:0d:b3:
15:82:e6:97:e0:ef:0e:92:ad:e2:83:50:0a:aa:9d:
b6:c6:d4:d1:e5:3e:a2:6d:43:36:9c:fa:d3:68:36:
8a:33:5d:fc:51:5a:b1:2e:65:e8:ff:38:82:84:c3:
00:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F8:F0:CA:FD:21:19:45:80:D2:75:53:1A:00:43:E9:27:53:A1:60
X509v3 Authority Key Identifier:
keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d4:2f:7a:86:a1:ea:6c:52:e1:5f:29:bc:7c:6f:f6:b2:cb:
be:20:f7:1a:e0:2e:47:23:0c:eb:ed:36:49:fb:ef:3b:26:40:
23:b4:33:d1:04:0d:d8:80:8d:54:cc:23:ef:25:7a:63:ff:59:
bf:20:7d:29:e1:b0:0d:22:de:5c:a8:ea:f8:ec:64:01:02:aa:
4d:df:ce:c1:2c:1a:45:e4:a2:93:31:80:58:60:d6:76:10:f8:
2d:aa:77:e9:e5:0e:31:f9:26:2c:7c:ad:d3:c0:46:42:02:ab:
66:ec:02:8c:20:83:5a:e8:82:3e:44:eb:50:d9:ce:ce:c5:80:
99:29:f1:5e:05:f3:7d:83:66:2d:b5:f1:fc:47:2e:73:f0:ca:
2e:7f:37:10:41:03:4d:11:55:17:60:4b:78:ed:ab:3e:30:98:
0d:e3:20:19:1e:5e:5f:a4:b5:f0:5d:c2:c8:33:bb:f0:98:af:
70:f4:05:58:aa:7a:11:33:2d:33:08:b6:e0:14:3f:d0:1c:d3:
de:9a:64:5a:d3:44:c3:30:85:f2:0f:c3:cf:48:98:ac:e0:72:
3a:ab:09:a2:e9:39:41:30:3f:2b:fa:46:9e:47:20:c6:8f:89:
03:9d:96:c5:78:a3:1d:2d:7b:96:9c:21:9d:9c:b9:c4:5c:7d:
84:48:1b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:15 2025 by rpki-client