Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json)
Hash identifier: YZQgi0TBqaVccJMAJexhjL6zv3AgH878BFCAIT+TOOU=
Subject key identifier: 47:F2:B0:F2:2D:1A:1F:CA:01:78:2A:49:28:A8:9B:14:5F:9E:B8:B1
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 0194BD4EB7D1C108781D4AF942BCA5820526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
Manifest number: 0E61
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: LsnRSFX0fJ6jFaMFhsNOF1N3rXk.roa (hash: dex17lVhtaQHFqLExDWweZahtCv1yqvsMMQYp4bDPYo=)
2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: +xrqS00nG6B1rO6OehhsdG3IOgD8HKts46dCckgmeOw=)
3: ZCv1BvgxYc7es0hHXD_Z0b-Ht0s.roa (hash: M90TxVMUtw28EWlnD72m1jWls/YScUzAXqX8GMvniY8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b7:d1:c1:08:78:1d:4a:f9:42:bc:a5:82:05:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=47f2b0f22d1a1fca01782a4928a89b145f9eb8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:75:fa:05:0a:47:74:70:25:8a:ee:11:a1:
5c:58:ce:94:5c:fe:4e:72:cc:b3:3d:3d:8d:bb:c3:
aa:97:3f:64:43:97:04:38:df:e4:5e:05:f8:e4:00:
9b:11:c3:56:09:9d:ad:b7:5c:04:b6:75:fb:d8:74:
c7:96:f8:fe:ac:45:d0:40:b4:95:c8:9e:94:9b:28:
4f:c2:8c:c7:44:97:85:59:8d:81:c3:79:35:fa:0f:
5f:ce:e7:f4:fe:f7:0f:2a:66:9a:b3:0f:7c:c5:b3:
f9:8b:63:52:ed:d0:96:4d:e0:7a:fa:52:5f:e5:d1:
4a:8b:5f:7c:68:68:ae:46:f3:67:34:be:57:4a:0f:
70:28:23:52:00:fc:4a:d4:b3:bf:10:8b:48:60:9b:
81:f7:f1:d2:80:80:73:55:33:f2:db:d3:63:26:3e:
68:8a:99:c9:6a:eb:8b:e9:ed:1d:15:a3:c8:df:89:
0f:1a:d1:9f:cc:7f:2a:6e:26:6a:a3:55:2a:04:80:
06:7e:44:bd:5c:b9:d8:04:79:16:71:75:3f:aa:e3:
1b:ee:53:61:23:fa:27:2f:20:22:c7:1d:84:6a:66:
49:d0:93:f4:b1:15:49:61:4b:fd:cf:37:cb:92:6d:
43:af:7e:38:d8:15:02:78:a3:de:44:fa:60:bc:1b:
fd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F2:B0:F2:2D:1A:1F:CA:01:78:2A:49:28:A8:9B:14:5F:9E:B8:B1
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c3:a8:20:d7:64:01:f1:e6:02:cd:16:cc:26:4f:2b:d2:70:
63:c8:c3:ea:80:15:4f:b7:67:d0:87:bd:e0:68:9f:2b:a7:9e:
50:8b:99:45:6f:ff:71:ce:82:3c:e1:21:b5:f4:b0:69:d0:93:
06:9c:49:c8:2c:f9:f0:bf:fa:e1:0c:97:7e:2d:e5:59:ed:83:
05:b1:ff:08:e0:a8:a6:23:3b:c7:0c:31:45:2b:bc:92:57:b3:
23:65:f5:c4:f1:fe:19:6f:e9:b1:f4:3a:1e:59:54:4e:23:b1:
b6:e1:78:03:62:38:57:10:ef:64:e9:a6:fd:9d:ea:3a:25:3d:
ec:0e:f6:d8:b8:3d:39:97:fd:ba:05:99:36:53:fb:a4:2a:a7:
72:50:32:ec:6a:c2:b2:cc:db:d8:6a:79:82:5d:a9:c9:7a:ee:
81:4e:71:3b:89:ee:f3:ba:bd:e5:95:56:77:7f:07:54:d2:e6:
59:f8:8a:3a:e3:e5:e8:38:0c:e1:1a:57:38:9b:57:1d:38:ba:
d6:6e:fc:d9:42:d8:4d:27:90:09:ed:04:8a:7d:f9:02:ef:8f:
62:c5:38:83:4f:bc:98:a3:0d:55:4b:14:a8:a8:9e:54:04:e8:
6a:d8:f1:b8:bd:4c:3d:70:f7:1a:9a:8e:0c:45:15:c5:e6:7f:
99:00:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:22:55 2025 by rpki-client