Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
File: pxJZNzLf_jheZ26QVodyMGza63I.mft (raw, json)
Hash identifier: lq8BfJAsgJi3Wm/GAmb0LkqKX/TPQOmTAGOpJWLM3bI=
Subject key identifier: D7:22:54:A1:82:B7:56:68:B8:FA:8F:4C:76:39:0F:FC:EF:9D:22:41
Authority key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
Certificate issuer: /CN=a712593732dffe385e676e90568772306cdaeb72
Certificate serial: 0194BCE0AA373D515E92786DB889CC73E13B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
Manifest number: 107F
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: oMRtMf47yIPyY9ZdrVPhNi3G3eo.roa (hash: 4EnKsD8A0kDOzresfp2Oy03JKmata0Bf/rsbX3H3xdM=)
2: pxJZNzLf_jheZ26QVodyMGza63I.crl (hash: 2L6NFVCAZxpp/sVTuZmFvHj1eyTmFkmJOIJDgD0x1kI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:aa:37:3d:51:5e:92:78:6d:b8:89:cc:73:e1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a712593732dffe385e676e90568772306cdaeb72
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=d72254a182b75668b8fa8f4c76390ffcef9d2241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:11:85:ed:a3:3d:f1:a3:97:19:69:f2:c8:
59:c7:31:3b:4e:27:64:db:d7:35:e3:d1:82:d5:61:
94:91:6e:29:d2:de:51:b9:4d:48:ea:c0:95:39:93:
66:c3:22:6f:52:1a:4e:de:69:21:9d:2b:11:ed:7f:
ae:7d:eb:b1:0e:93:c1:37:51:95:92:7c:64:a8:9e:
23:ba:23:a0:54:2c:71:cf:0d:5f:81:19:88:dd:97:
fe:6f:d8:6c:97:10:bb:9e:fd:28:2d:46:a2:69:07:
2d:52:cc:16:d5:6e:62:e5:01:2a:85:70:f6:f3:4f:
6a:92:33:9e:1e:2f:3e:a0:99:a5:69:6f:55:c0:a8:
85:55:d8:32:fa:f8:45:07:a4:ba:64:e9:e4:e0:a1:
a4:89:45:ed:94:9f:91:fb:2b:54:b6:e6:48:d4:7d:
5a:f1:f3:46:b4:99:df:69:f2:91:2f:87:d6:78:6d:
a8:a3:d1:53:68:0c:fe:87:5c:01:65:02:7d:37:99:
2e:b0:3b:0d:6d:e7:38:52:c8:5a:99:0f:c7:8e:5a:
4e:27:40:0a:db:e7:d4:89:f2:3c:51:f1:f4:35:0d:
10:d7:f9:c5:7a:10:88:56:ac:82:b6:1c:c4:6b:24:
4f:7c:91:4e:4c:b1:43:65:4b:48:00:08:cf:c4:3b:
c5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:22:54:A1:82:B7:56:68:B8:FA:8F:4C:76:39:0F:FC:EF:9D:22:41
X509v3 Authority Key Identifier:
keyid:A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:59:79:20:58:24:44:6f:3d:7d:72:42:b1:b0:c1:c7:81:09:
0c:12:5d:ff:1f:ef:74:5e:16:31:29:c0:b8:5e:5b:18:28:3f:
35:e9:82:96:d0:26:27:94:4f:0d:54:11:14:95:4b:5a:23:c6:
7b:56:43:bc:7a:ca:3f:70:54:10:30:73:b3:79:34:80:3e:33:
5a:25:cd:3f:55:a7:ae:23:c7:4f:dc:26:76:e9:63:ec:1a:eb:
bd:51:61:e3:f2:28:48:a1:58:09:01:f3:c1:d3:0f:ac:49:f0:
91:3c:ec:bf:7b:0c:8f:60:bb:11:86:f0:1a:d4:c8:1c:c1:77:
4a:c8:e8:ea:6e:c2:af:26:30:96:bb:a5:67:06:9e:e6:8e:5a:
36:96:b2:b1:1c:56:dc:23:cb:95:b4:e8:c3:04:25:1b:e5:30:
0f:0e:13:54:0e:1d:27:6b:85:a5:32:6d:ff:bd:93:48:14:22:
fd:d5:c4:86:9e:38:37:2b:20:de:a3:59:7b:5d:7d:44:23:90:
dc:b5:49:50:28:81:05:cf:61:55:40:7b:1f:aa:e6:c4:d3:aa:
b7:8b:22:62:9c:9c:9d:d8:3f:bc:36:e4:42:18:fe:99:9c:48:
aa:19:f5:e2:cb:c9:36:86:aa:8d:05:9f:4a:fa:c6:81:21:5f:
0d:3f:18:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:08 2025 by rpki-client