Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
File: pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft (raw, json)
Hash identifier: 0ffvA5KCocNqTP76/w5mqHCQ5BozCGpirC+EBem6xp0=
Subject key identifier: CB:D9:4E:A8:2C:D1:63:AC:1B:A2:4C:0C:7B:EC:C3:91:FD:EE:9B:A6
Authority key identifier: A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
Certificate issuer: /CN=a57089c45c55088fe90eb61002f07f0f95862672
Certificate serial: 0194BBCDF5CD9560624C3D711E6196F99962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: GKayJjEpupDXezS7bWkDTRh1Jmw.roa (hash: eS8ptq1DKXKa+SvWnQjPvtWlOO+ME6pmCZKUb+C3VCo=)
2: pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl (hash: K2BKPTBHmIgpFq0+whVK4OXtCadN7pE4eJ7DrEhQlP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f5:cd:95:60:62:4c:3d:71:1e:61:96:f9:99:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57089c45c55088fe90eb61002f07f0f95862672
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=cbd94ea82cd163ac1ba24c0c7becc391fdee9ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:30:51:90:81:f2:6d:8a:56:10:29:67:0c:
c6:80:2d:ab:2d:15:ed:d3:54:bd:45:d2:48:59:f7:
a0:c2:4f:d4:d4:40:4b:ad:32:95:4c:74:17:31:96:
c9:ae:a8:e0:07:3e:6b:61:5b:1a:8c:ab:e5:fc:a5:
08:1e:13:f1:0f:a3:ad:2a:5b:b5:29:96:ce:10:29:
8d:d7:a4:c6:6b:01:44:db:5c:6c:78:47:b0:00:2c:
75:b6:24:94:10:ad:9f:51:0c:71:49:63:b1:c0:83:
67:46:a7:46:87:f5:e4:7d:a5:47:3a:0f:90:03:2f:
38:60:94:91:0e:d4:ba:c7:71:06:41:21:a2:5a:4f:
a9:12:52:c7:31:8b:0d:3e:db:ed:bf:5f:da:a1:12:
c3:71:d3:f5:73:93:49:e2:9f:03:53:b1:5b:dd:7b:
23:43:87:66:89:aa:7d:54:6f:8b:fa:29:fa:bd:49:
af:c2:3d:e1:96:24:e6:81:25:e6:7a:ff:08:ff:65:
52:ba:91:db:f5:a2:07:6c:c8:99:89:2e:ea:e8:1d:
29:d4:d5:11:0a:9a:2e:d7:57:10:66:58:04:08:a1:
0c:bb:01:05:e0:73:d8:51:a1:5b:e8:b7:04:b9:cc:
a0:f1:0d:7e:ec:08:81:20:a2:7c:52:a5:f0:82:6c:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D9:4E:A8:2C:D1:63:AC:1B:A2:4C:0C:7B:EC:C3:91:FD:EE:9B:A6
X509v3 Authority Key Identifier:
keyid:A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8f:62:b2:1a:7d:94:91:bc:5e:22:c0:ea:8e:08:f3:b1:20:
f6:c7:5e:11:93:9d:d4:26:3b:fc:a0:e2:df:39:ce:fe:d6:09:
e8:fc:12:a5:2e:93:8c:78:cc:52:1e:88:ef:e5:6b:a1:25:7d:
65:06:2b:ba:e1:f3:89:1a:05:39:5e:42:11:2a:fc:d3:d2:61:
8e:db:35:b1:fc:6c:b9:26:92:4b:a6:17:d0:57:07:c5:b2:29:
51:f8:79:b0:e0:43:2b:a6:11:22:ed:5a:45:47:0f:41:7d:d4:
a9:bd:c4:4d:12:ae:cb:e0:da:f4:d5:1e:19:1e:08:8c:c3:b5:
f8:e6:50:35:cf:63:61:4e:df:77:fd:62:6b:0c:5c:b9:e4:fe:
aa:58:a1:a2:c9:a0:30:28:ed:fd:9f:18:9a:e4:ef:2e:0b:d0:
44:e2:e1:c7:bb:09:20:9c:6b:ac:16:74:6e:ac:2c:96:10:d7:
15:38:03:84:3f:bb:90:8b:cd:26:59:92:df:16:5d:bf:31:bb:
e3:ad:74:9c:9d:55:50:c0:07:9c:53:07:f8:66:47:d5:9d:e7:
95:15:a2:ff:c0:24:3f:75:f7:19:1f:c4:ed:67:84:59:cf:66:
d1:6f:f1:90:2b:df:1a:2f:e4:35:a0:40:0c:61:70:d8:8d:52:
38:6a:c4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:39 2025 by rpki-client