Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
File: PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json)
Hash identifier: buuYtiAbZx3tn2cVXWamuAkQ7siQ405G3x5eqfQi+BI=
Subject key identifier: 38:E7:C2:CA:FD:4D:68:26:55:C3:96:23:A3:D2:19:15:C6:C1:10:AA
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 0194BC3C5A2C329FDAA2DC95BAEDFB4F6A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: 4vBZmgBMnVCe-FhubPi7IwTZR7U.roa (hash: pC9viwrfXhDTa2hNSC3okPZXSzJEUX3jBZCttoAMuYA=)
2: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: SFS8NMakITAnCjnhYf9+PyNMUbC8a4cNuKYK2MG6Gu4=)
3: liO3Dk9HW5maOXYINfx-lTJgFC0.roa (hash: q4LEiFG0iKJd0o8pxD+sRsl85pA8hcAalAJZcMAOiLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5a:2c:32:9f:da:a2:dc:95:ba:ed:fb:4f:6a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=38e7c2cafd4d682655c39623a3d21915c6c110aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:f1:8d:58:2d:4c:fa:76:32:c2:0c:ae:e2:
e9:80:8a:78:89:05:c9:82:89:25:c3:87:23:3f:85:
88:24:6b:59:47:42:b3:3a:bd:e3:bc:92:3e:1a:d6:
37:9b:f8:eb:52:67:b2:a2:83:4d:91:98:28:08:47:
f4:c6:e2:f3:4a:38:9f:69:b6:97:af:92:54:a2:8a:
5b:8b:e2:ee:84:85:85:95:29:e6:6d:e8:4e:32:72:
d9:e1:1f:f1:7b:ca:85:76:83:cb:13:ea:09:66:bb:
cb:f4:2c:93:0e:fa:1b:ac:5b:06:f6:ba:7a:5a:74:
02:f9:53:a8:2c:a0:0c:c8:d3:70:ef:e2:a5:af:3e:
fe:c3:43:a3:0c:88:7a:f5:91:98:be:1a:43:c9:b3:
96:6a:73:b3:55:7c:5d:0e:6e:25:c7:f8:2f:61:55:
64:ee:bb:76:35:db:fa:79:ca:63:57:30:9c:26:e0:
af:e8:29:4b:90:fa:f1:40:8f:c1:26:be:fa:ef:e2:
cc:ae:34:c9:af:f3:c3:b5:3f:ef:84:93:1f:09:a6:
06:73:0c:02:c2:66:92:a0:dd:d4:dc:b1:df:46:b9:
f6:0b:53:c8:cb:e0:f3:42:7c:28:85:dc:c8:e1:f1:
27:20:ae:e9:55:49:2b:48:bc:35:68:c2:b5:1e:5c:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E7:C2:CA:FD:4D:68:26:55:C3:96:23:A3:D2:19:15:C6:C1:10:AA
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:32:6b:d6:cd:32:b4:aa:90:fd:3f:51:d6:c8:ce:64:1d:69:
be:5a:73:40:a6:f6:ab:d7:ad:cf:ba:07:b9:fc:4d:39:c1:8c:
d3:ed:46:a2:2b:eb:e3:a4:76:23:b8:eb:c7:48:a0:d6:3d:1e:
b5:12:62:87:79:a2:22:e7:be:6d:7a:86:a6:d8:56:86:14:28:
96:21:70:4e:28:80:6a:ed:cd:b2:29:ce:92:b8:4f:de:8b:9b:
4f:38:7b:a4:df:8b:cc:8a:a2:37:d0:58:18:67:af:89:0e:62:
9d:f9:9b:74:fc:2d:ac:67:60:89:2c:1a:44:0b:a8:aa:5b:99:
77:53:9c:64:13:a3:c0:da:e1:71:b4:11:f4:28:e8:46:9e:09:
38:62:22:95:d2:5f:80:d5:8b:d8:30:98:12:39:14:0a:0f:ed:
60:0f:ef:ba:c8:bf:08:63:21:b7:e3:75:1d:f6:40:d8:d2:db:
12:d6:06:b2:58:67:d0:73:e0:8a:de:d9:86:fa:5f:28:23:5c:
bf:01:e8:fa:f5:59:f4:dc:43:da:15:f7:55:49:a2:56:9b:e0:
3e:ec:ea:08:41:6e:ab:3a:02:a6:d4:21:69:85:af:30:f2:8f:
bb:18:12:f3:89:95:93:c9:58:23:81:e3:40:54:be:4a:3a:98:
f4:d4:fb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:08:16 2025 by rpki-client