Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
File: P6LWhQu8RyBVepF03LyXYK7MCxo.mft (raw, json)
Hash identifier: QA4jPkOJQiEYnR8qSA3Jrb+ymkXuB9zye1YVaviuCHs=
Subject key identifier: AE:E4:8D:FF:22:F2:96:07:3B:15:8E:88:A0:64:43:C6:AD:B2:C7:75
Authority key identifier: 3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
Certificate issuer: /CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Certificate serial: 0194BC3C22C7E5E35EA652FE92A62484D268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
Manifest number: 1136
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: GAO-zTi3etu6ipkvC2n1MQjAfa8.roa (hash: xkkdl+Sobv3rMi6edmSVvQinnG04ZdzSM/7er87DV0E=)
2: P6LWhQu8RyBVepF03LyXYK7MCxo.crl (hash: e4xG09krDxR83Ew8ybHV5zDGYtUtTiyoFkVnDSCSkec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:22:c7:e5:e3:5e:a6:52:fe:92:a6:24:84:d2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=aee48dff22f296073b158e88a06443c6adb2c775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:34:6a:e2:9d:a3:64:75:cc:7d:aa:8d:5f:
98:32:f5:e7:ee:23:bd:aa:76:14:86:ff:63:27:6b:
f8:06:e6:de:6b:66:03:35:40:bb:2f:ed:11:15:9d:
0f:36:13:df:d6:7b:2a:18:10:ae:f7:4c:5c:b6:3a:
3a:11:52:ac:3e:5f:9e:91:42:c2:ba:a3:1d:0d:f3:
41:26:9e:c7:04:3c:b0:d0:f0:b6:8f:d4:6f:9a:07:
c0:ec:7c:6d:0e:88:a3:b8:69:5d:a4:6f:4f:83:a7:
75:1b:a0:dc:9c:01:c7:3a:ae:3c:b2:e6:5b:40:18:
89:fb:11:97:1c:98:d1:9c:e1:b6:5e:25:f3:6c:a9:
1f:0f:ce:72:ba:03:3f:59:de:fb:93:1c:33:69:98:
73:77:d8:c4:dc:c8:8f:52:d4:36:b6:87:14:0e:9a:
5d:de:92:0b:2c:b2:9a:24:0e:85:d4:36:01:9b:67:
f6:b1:2c:53:60:57:a4:3f:35:00:68:f9:35:c0:10:
21:32:d7:ed:2e:2f:96:53:f7:7b:2a:1b:91:a7:16:
b3:86:63:86:04:a9:42:05:a1:3b:9e:ba:14:2a:2d:
82:1e:14:f1:90:85:da:c6:6e:e2:c7:a4:f6:34:1f:
22:d6:42:f6:0e:e0:93:2d:04:b4:56:01:cf:55:52:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E4:8D:FF:22:F2:96:07:3B:15:8E:88:A0:64:43:C6:AD:B2:C7:75
X509v3 Authority Key Identifier:
keyid:3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4e:60:97:f2:ec:ee:a4:d8:cc:9b:98:5e:6c:90:a5:1f:30:
5b:d0:f6:a4:10:de:02:03:de:fa:ba:a8:97:fc:ab:7e:24:c1:
6f:f1:af:fa:d8:fb:eb:fe:bb:66:00:02:f4:c8:00:53:0f:71:
45:63:34:17:d3:c7:98:50:bb:6a:7a:b0:83:c7:59:87:e2:83:
09:45:bd:b1:6e:03:14:66:64:3c:66:73:ee:c5:d9:2e:6b:2d:
88:de:aa:ff:44:31:5c:b5:4a:54:d9:66:cf:ca:e5:58:d0:1e:
be:58:04:8d:76:0f:0b:c8:3f:0a:59:e8:84:fc:90:72:0b:62:
66:6d:d5:45:17:86:43:a8:74:6c:ff:41:c5:3c:2a:82:fc:96:
ca:64:9e:cd:c1:a7:d7:2e:2a:60:15:9a:ee:3f:d1:11:ba:79:
6a:b4:b4:7a:dc:25:94:20:f7:52:58:df:db:3e:b6:3c:e2:c0:
b1:74:75:be:62:25:fb:59:e9:9d:3c:1e:dc:ac:f0:30:d3:04:
85:2d:c5:e4:59:ca:f6:75:c8:9a:23:38:fd:1a:17:df:e7:ad:
4c:4f:a4:50:31:a2:09:5b:82:56:9b:9d:5e:12:6e:33:78:77:
26:1b:e2:0c:61:67:9e:a1:1e:89:27:c7:84:3f:5e:26:e4:43:
ae:7e:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:09 2025 by rpki-client