Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.mft
File: Po3UOSjt-xIA77xixEH5zSkEhYU.mft (raw, json)
Hash identifier: HhAhi+FGwvQW2Srx7FJm5pFewLXUzV2FFvv5w5Pqw8Q=
Subject key identifier: 4E:9F:09:FB:4A:5C:8D:52:2D:45:6C:D8:8B:18:6E:B1:AA:15:B4:9C
Authority key identifier: 3E:8D:D4:39:28:ED:FB:12:00:EF:BC:62:C4:41:F9:CD:29:04:85:85
Certificate issuer: /CN=3e8dd43928edfb1200efbc62c441f9cd29048585
Certificate serial: 0194BCE081243B5633E2DB6AFCFC9F25BF94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Po3UOSjt-xIA77xixEH5zSkEhYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: Po3UOSjt-xIA77xixEH5zSkEhYU.crl (hash: ekjcAJq+4bEFdXf20jXqCxLbea8Vq8sj8yrMY5lzUO8=)
2: iLnTG4KE8dlv3U1b1zLTb14pMfs.roa (hash: umNqCdl7NmuDT1iFaPafaeRzRV1NstNTawuuz+ySb2o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:81:24:3b:56:33:e2:db:6a:fc:fc:9f:25:bf:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8dd43928edfb1200efbc62c441f9cd29048585
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=4e9f09fb4a5c8d522d456cd88b186eb1aa15b49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:b6:0f:f9:55:9b:22:ae:54:00:d8:af:79:
52:9c:34:62:48:84:bb:47:dc:bd:d1:eb:aa:21:bd:
2c:22:cf:29:9c:e6:2c:34:bf:dd:c6:ce:3f:bc:7b:
6d:6f:cb:8a:4a:db:38:49:f0:24:a1:b7:b7:c5:36:
a6:dc:52:12:8a:17:90:4f:3e:0d:a8:c9:97:83:0d:
11:19:3a:ad:33:34:ba:1c:7a:0f:df:5a:f3:3e:e8:
cd:e8:2f:4d:78:43:9d:1c:a9:f9:6b:c4:12:97:48:
85:fa:12:af:c1:46:61:42:f3:4c:a1:83:10:a8:f2:
c5:e7:2a:5b:c2:19:bf:10:ac:2d:e1:38:15:97:c4:
7e:00:57:ca:58:77:6f:be:47:27:18:3b:14:7c:d7:
cf:98:fd:3a:bd:46:2c:1b:62:32:ed:46:e2:ff:fc:
31:18:6a:00:95:00:2c:4c:cd:ce:e5:c7:cf:24:39:
4f:ff:a9:8f:7b:90:55:fe:ea:0f:94:eb:3a:9a:7c:
c8:0e:d4:1c:56:d1:9e:94:d7:d8:ad:a7:49:11:40:
35:7d:0e:7f:11:58:54:07:b4:30:1a:97:f7:80:b6:
3b:35:c5:b8:3c:68:13:ce:05:63:f4:aa:05:d0:43:
ee:5e:61:65:0a:f5:85:2e:58:00:e2:cb:b2:7d:d3:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9F:09:FB:4A:5C:8D:52:2D:45:6C:D8:8B:18:6E:B1:AA:15:B4:9C
X509v3 Authority Key Identifier:
keyid:3E:8D:D4:39:28:ED:FB:12:00:EF:BC:62:C4:41:F9:CD:29:04:85:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Po3UOSjt-xIA77xixEH5zSkEhYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4c:54:96:13:e5:2f:8d:2c:7c:01:ce:29:19:ed:e4:b4:12:
c5:48:95:07:f8:0b:92:7d:c3:05:c2:6b:56:a6:74:2c:1d:84:
1c:f0:d7:7f:b2:b6:9c:e8:b8:b0:bd:8e:66:59:82:7f:6d:e8:
63:40:82:e9:7d:c4:c3:4d:fc:8a:16:f7:18:83:b7:68:8b:65:
ae:5b:f8:cc:39:c3:89:a9:91:06:a0:b6:ea:bf:86:a1:84:e4:
1b:a2:c6:bd:11:02:7f:c3:0d:32:c0:c2:3c:0f:d3:65:cc:7d:
27:10:4e:01:18:d1:de:55:d7:3f:0b:f7:06:0c:81:b4:53:79:
dc:84:db:22:b3:c7:98:ee:40:af:0a:30:30:08:3c:26:2f:4c:
74:64:8a:06:a6:2d:02:e6:7c:3f:9b:0b:4f:db:f1:4c:bc:1f:
07:c7:4e:87:46:71:e9:86:b6:e2:7a:f1:a7:7c:7a:b8:df:50:
20:bf:81:fe:77:8d:20:da:5e:43:b0:d2:36:2e:83:75:bf:b1:
82:01:ba:58:a4:c5:d9:c3:51:0f:f6:54:de:fa:51:dc:1b:84:
42:52:07:24:8b:b1:84:4c:b2:9d:e2:95:68:93:d5:3e:b8:83:
f4:03:d5:78:27:a4:a3:f9:8d:5f:06:1e:69:7a:f3:d8:5a:da:
85:e9:59:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:44 2025 by rpki-client