Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
File: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json)
Hash identifier: LbdSowEBvjWUucUETEo/bvZZXPhUwsNBNdPAm9r64FQ=
Subject key identifier: 73:DB:B0:E4:F6:D5:04:66:A6:4B:B3:93:E0:5D:FC:7E:B8:95:31:E9
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 0194BCE085B4F7B50D4C9243F7E66CE24F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: CahBkkjIRD5RSAyC_TG87QI2fzc.roa (hash: xwWB2SdIUKCzemaOm29fIJHDchBB//Ii3x59COqFn54=)
2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: s+iESflyqdVT50TNU41X0ozZa5MvzYvOBxbicQwvp5Y=)
3: j4vYQ759MLoLj0cN0zuQjHrzqiw.roa (hash: uApwJtUDHaWf6V3ibkhcekhPd8rOwJMJCw2CtVWuA6s=)
4: mXcskRJTzyB3nxmoygHfU8qKFgw.roa (hash: uQEoqefAcfOcPTcbOqYeFxWZJNwhk/YLJx7Ey5o+17w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:85:b4:f7:b5:0d:4c:92:43:f7:e6:6c:e2:4f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=73dbb0e4f6d50466a64bb393e05dfc7eb89531e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fd:6d:33:bd:3a:8c:c9:f6:b5:75:c4:98:78:
67:f4:15:34:a0:f7:4d:22:88:13:17:8d:b9:3c:97:
8f:63:c1:b9:10:06:8e:64:be:ed:ce:4e:66:d2:4f:
86:8a:ab:35:aa:13:e2:01:e3:3a:b6:85:55:f1:e1:
71:90:4b:d9:76:88:02:f2:aa:79:74:0d:84:9d:84:
03:88:33:4c:7a:2b:ef:9b:36:28:40:5b:60:a9:1e:
d2:20:d1:a1:cc:4f:94:63:34:10:99:b9:33:1b:4c:
33:16:bd:6c:70:20:c4:59:c2:ec:ae:c0:74:e9:35:
25:52:1a:0c:bf:32:53:0f:34:ec:02:09:24:81:e9:
f9:54:95:44:1f:42:56:4e:aa:7f:aa:c0:40:77:fb:
c2:2e:1f:77:4f:80:82:68:31:f5:54:f3:25:d2:47:
69:a0:ad:e7:0f:66:6b:04:78:81:e4:27:11:7a:25:
06:ba:68:08:ca:3f:2b:95:68:e5:f2:58:4c:f5:e6:
9d:ab:ae:31:fe:7d:9e:40:b8:ec:e5:44:db:12:3a:
45:6a:b0:a4:51:53:0c:ef:bc:fd:a6:e6:88:cf:94:
9c:27:e7:cb:6c:5f:4e:08:d7:b0:1b:24:09:70:79:
c9:a0:7a:59:10:6c:02:80:96:af:eb:89:60:a9:33:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DB:B0:E4:F6:D5:04:66:A6:4B:B3:93:E0:5D:FC:7E:B8:95:31:E9
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5f:40:63:27:41:90:ed:73:f5:cb:f2:b9:bd:d0:57:e2:58:
66:c6:ed:73:47:b8:bc:f7:74:45:74:83:c0:d4:32:36:d6:60:
f9:16:6a:92:48:91:67:a5:0d:e6:f9:fb:23:9e:e2:20:a8:f4:
a9:15:a5:eb:75:89:72:03:b7:c9:d8:f4:d6:5e:a0:98:77:1d:
23:ff:3e:4e:b9:2d:1a:87:40:26:9f:3a:96:41:1f:1c:65:d9:
88:1a:d4:a1:f1:88:39:55:3b:5d:3a:b7:6e:64:13:6c:28:d2:
85:02:75:6e:d6:2c:4a:b2:6a:7b:41:5d:fd:0e:65:05:ab:f9:
0b:3a:2a:2a:5a:21:d0:a3:b3:61:53:a8:63:98:23:21:d5:28:
aa:46:ba:ae:05:c0:9b:e4:7e:3d:ba:3d:65:04:ce:73:5f:d0:
6b:97:10:1b:bc:c9:94:14:7e:87:33:f1:84:45:fd:8f:ee:ae:
45:50:fb:7c:d7:76:95:f9:6c:d0:e6:e8:dd:12:ed:f6:6c:99:
7b:dc:3b:f5:c5:72:31:6c:23:f6:3e:a7:f3:03:7f:5a:1f:77:
5a:30:3c:c0:2a:61:62:c7:d3:77:35:76:c6:65:19:b5:c5:57:
c8:a4:08:b4:fd:b7:ee:b5:45:ca:28:10:6a:eb:35:75:4b:d9:
84:bc:18:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:27 2025 by rpki-client