Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
File: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json)
Hash identifier: 56ZWvRHkCQ02TVfbOJenbIrUgu5r+aMoAVEZNAAoaV0=
Subject key identifier: CE:33:9E:E2:35:DD:79:5A:FD:17:74:46:EE:65:BD:6F:ED:77:22:F8
Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Certificate issuer: /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Certificate serial: 0194BCA9EF78F439194E6AE12967D0FAE244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
Manifest number: 13FF
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: Nuysl6fWLsR/m5tZXBc5GiuDLTNGG4A8x4peG1lErjY=)
2: PRL7sgUPxAooAgpR2OCFKktRv4I.roa (hash: 7EnjkpMFrtIGkSxH/V71N/Yi8O1F+vC6f4Et13UAYFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ef:78:f4:39:19:4e:6a:e1:29:67:d0:fa:e2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=ce339ee235dd795afd177446ee65bd6fed7722f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:9d:b3:1d:86:c9:3c:c9:b8:ca:26:ee:5d:
b0:18:62:dc:19:91:9c:86:b8:d7:9d:e1:b4:a1:08:
9e:e2:d3:ba:08:85:63:e8:7b:b5:60:45:92:f9:34:
ed:77:16:bd:6f:70:ae:7b:0a:ff:2d:de:c4:33:9f:
f4:c6:aa:6a:6d:84:eb:68:08:07:ec:15:b7:5d:59:
e2:9b:9c:01:5b:ea:a4:07:60:6c:c7:8c:ac:50:5b:
fb:e7:1b:44:3d:73:d1:bc:20:89:8e:27:9a:ba:e0:
41:24:df:37:ea:ba:86:64:93:de:da:f7:bc:67:03:
aa:57:43:a7:86:90:61:df:a6:41:3d:16:37:87:31:
65:be:b5:4a:4c:5d:b8:f5:f7:4a:0b:99:5f:ab:b2:
d4:a6:78:48:6d:18:84:02:6b:53:ec:d5:75:bc:98:
ec:76:d8:ff:2e:37:64:1e:53:41:90:91:79:92:22:
a4:0a:99:13:7e:95:e2:ae:68:44:ce:d5:2c:5e:a1:
9e:42:8f:9d:8f:81:4f:39:3f:d8:5f:7c:5b:08:2a:
f4:d2:b8:0a:d6:d9:f9:a2:4d:62:b6:27:0e:19:4e:
54:36:2b:e6:b4:1f:70:4a:5b:da:e2:a1:ed:26:0e:
7d:a4:d7:b3:0c:88:ce:35:82:f8:3f:c1:c2:e9:83:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:33:9E:E2:35:DD:79:5A:FD:17:74:46:EE:65:BD:6F:ED:77:22:F8
X509v3 Authority Key Identifier:
keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:88:2c:9f:cb:ad:0a:e9:2e:cc:32:ea:f3:2e:f1:bc:66:12:
11:47:c6:a1:20:29:01:fb:bf:6e:44:4f:20:75:67:2f:e4:d1:
81:36:d1:90:5e:1b:8b:bc:b6:6e:84:d2:0a:47:20:8e:09:13:
09:91:db:3f:0e:a1:12:72:e5:c0:88:29:e8:7f:16:d3:ee:f8:
18:a8:ba:a7:75:2f:d7:c9:48:ab:98:34:f2:ea:cf:42:98:b0:
4b:27:5c:61:42:03:63:14:c5:3d:87:62:52:7b:5e:18:79:1e:
d2:09:20:ab:82:33:f7:71:1f:1a:2b:a8:36:19:4f:82:f0:15:
97:be:47:b8:06:3a:e9:9f:d2:46:40:bd:48:68:6e:e8:0b:9a:
b8:11:d6:1a:68:82:69:23:5b:ab:18:08:df:87:a5:b7:d7:b6:
c4:2e:f3:9e:09:67:b6:8c:9e:e2:32:c9:04:df:88:47:16:83:
39:24:dd:37:49:91:a8:ea:ba:0c:20:57:19:f4:24:ef:e1:59:
50:5e:b5:db:66:7b:70:0c:bd:e9:a2:f9:3d:30:ed:62:a2:c3:
6f:d3:dc:b9:47:3d:79:46:33:6e:c6:4b:2e:c6:f8:a1:a1:0a:
41:e4:6a:b7:f1:58:5f:ca:f1:b4:7d:2f:c8:36:36:1c:ed:b1:
82:79:e5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:21:03 2025 by rpki-client