Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
File: pWMWxxKYMeBREHlTLe2B3BLIHaA.mft (raw, json)
Hash identifier: vRpkOKVc4HT02X1QV/R2ffJQ2K+mB/rAfMCUEeWSdJs=
Subject key identifier: 63:A3:D4:AC:46:B1:16:53:9F:F1:F8:07:14:5F:D7:8A:B6:85:68:BE
Authority key identifier: A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
Certificate issuer: /CN=a56316c7129831e0511079532ded81dc12c81da0
Certificate serial: 0194BC730708DAC4F161E84E5AFE86B75CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
Manifest number: 0A39
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: XAMH6mQExatvC2LMnoXanctLKzE.roa (hash: pCAATiBl9IRxnVx1ZfARnp3JybBqcsAW/QN7pstrTq0=)
2: pWMWxxKYMeBREHlTLe2B3BLIHaA.crl (hash: i5XpGEkqBamq5XR1l6vBFxjVVnbY0RHtwLuHFYWLxBM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:07:08:da:c4:f1:61:e8:4e:5a:fe:86:b7:5c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56316c7129831e0511079532ded81dc12c81da0
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=63a3d4ac46b116539ff1f807145fd78ab68568be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:51:8f:01:80:b4:de:f8:8a:19:16:1e:d3:a0:
df:50:ae:e5:49:d5:2c:e9:4d:d3:4d:fb:11:e5:30:
87:77:7e:a9:72:48:84:36:51:c9:54:e6:33:28:8b:
a3:d6:23:27:5a:24:80:30:e3:f3:f2:43:ab:ba:13:
d6:f2:ea:e4:f9:3f:60:ad:5b:3e:26:4a:a9:60:5b:
3a:fb:bd:f7:2a:9a:46:12:a0:68:71:d5:f7:25:0b:
39:77:43:d9:2e:f8:33:56:91:6b:bc:9c:b0:32:50:
95:7f:93:00:b4:33:77:ce:c4:69:70:45:d1:65:d4:
2b:7c:57:12:c5:2b:6b:ac:8a:1b:c5:a3:e4:26:2b:
2f:50:d2:36:e5:92:91:46:9c:88:70:db:6d:ad:45:
88:d5:57:b3:ca:49:05:20:9d:10:42:4f:ff:ad:d3:
49:b2:29:e2:50:9c:01:25:a4:90:dc:b4:2d:be:2a:
85:09:64:ad:61:7f:4f:3f:11:3f:8e:fe:51:cf:84:
4e:a7:d2:d8:d3:b6:d7:0a:38:20:1a:0b:c2:c8:48:
46:b8:3f:d2:b5:0f:ec:7b:87:96:14:0d:be:1a:d7:
4b:0b:78:ad:0f:63:2e:5e:59:9f:06:c5:48:10:84:
3e:6a:a2:3b:a4:71:18:93:f2:78:12:01:6c:8a:6a:
2c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A3:D4:AC:46:B1:16:53:9F:F1:F8:07:14:5F:D7:8A:B6:85:68:BE
X509v3 Authority Key Identifier:
keyid:A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:57:0e:14:42:9c:52:82:a9:e5:97:2e:5a:88:1a:94:80:41:
c1:0e:29:21:8d:fc:eb:24:51:5f:20:35:9c:00:8a:2f:54:24:
a1:e8:11:b7:eb:ca:ab:77:50:4f:75:2b:40:2b:cf:34:b0:da:
d4:2d:7c:5d:a7:c2:a6:3c:54:9b:15:43:26:f9:08:80:54:5b:
1a:3f:f0:4e:70:9d:7c:b1:61:de:98:cd:92:15:86:ed:d3:9d:
7a:16:07:06:db:5b:6f:c0:f4:d8:38:c2:1a:93:30:6b:c3:51:
16:35:d6:16:f3:b6:c0:4f:95:d7:0a:19:1f:84:a1:10:36:18:
0d:4a:e0:82:95:79:de:39:0b:3e:20:53:3e:5f:b8:a0:01:24:
e0:68:dd:2c:4f:57:45:3a:ff:d9:a2:81:3b:48:21:fc:74:20:
3f:6c:66:78:29:0e:de:1b:55:80:07:9e:57:84:b1:7b:6b:06:
59:cf:db:5e:9e:95:61:8e:73:22:2b:a2:94:fa:78:35:99:5f:
5a:ff:dc:63:4a:52:9c:53:79:80:30:59:0d:3c:b9:93:59:b9:
fb:82:ed:17:7f:98:34:53:ce:22:df:5c:dc:fa:2d:49:09:0d:
76:8c:9c:85:7d:51:c1:95:77:8d:6a:9a:46:b4:19:cc:f7:bf:
26:4f:de:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:10 2025 by rpki-client