Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
File: PIbsMh5y_UbJjcwM18cLytVX1Zw.mft (raw, json)
Hash identifier: ZXO7b+5czizoDf0qgCKsDvS4kk2QtwLWhbj2gV+F2ho=
Subject key identifier: 09:A2:BF:B3:F7:60:2F:F5:B7:B4:7B:69:45:BF:EB:BA:14:9B:CA:FC
Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Certificate issuer: /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Certificate serial: 0194BC04BDDA09CA063114A10FF250F1095F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: PIbsMh5y_UbJjcwM18cLytVX1Zw.crl (hash: BXn6EffQGxQq+YTe8BxyVk1XyAvHlULeU1KJBoyg0gc=)
2: XgpSQjhhfxwk9vZfnDmQ4hugM38.roa (hash: 0VqbQTYbejzGPg6sOJbQNqmXP31XYN5qUoi8IUVN5jw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bd:da:09:ca:06:31:14:a1:0f:f2:50:f1:09:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=09a2bfb3f7602ff5b7b47b6945bfebba149bcafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:10:3d:5f:b4:91:a6:e4:da:67:1a:36:7d:
85:b6:fd:3d:cd:e5:95:35:34:f0:a4:f0:17:97:0c:
42:0e:f1:1e:85:6e:3f:08:bc:8d:5b:dc:cd:0a:b7:
22:ac:b7:77:af:57:ed:c3:6d:50:43:47:a7:43:52:
59:0f:95:d7:41:d3:1a:ec:b0:e4:a3:32:42:e1:be:
e1:77:e4:31:6e:d1:7d:85:b5:ff:75:dc:da:b4:58:
5d:d5:b5:ae:a0:ed:38:08:d3:5c:4f:97:a8:bc:a8:
ba:71:70:a5:89:92:f1:d1:2e:41:71:c7:32:cb:e4:
71:14:9f:ef:dc:23:39:dd:37:7f:82:f2:d3:91:2b:
ea:30:c1:47:3a:69:2a:38:50:f2:93:e8:12:b4:8d:
ae:0e:3b:ca:b9:cf:ac:73:f6:6c:ba:a2:af:b2:52:
98:e3:4a:16:f9:42:09:61:47:c3:c7:94:ec:12:dd:
09:f5:8a:6a:36:55:94:3e:14:16:a3:e4:cf:a9:2b:
c1:f3:73:c8:ef:ab:35:89:0f:24:28:21:36:07:dc:
15:4a:8e:b2:b2:03:c2:1f:24:57:96:8e:93:76:e6:
05:c3:f9:32:f1:ca:79:b3:fc:3f:16:a7:4d:43:62:
3e:6a:66:be:fd:88:cb:8a:a3:a9:cc:00:67:f5:5d:
c3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A2:BF:B3:F7:60:2F:F5:B7:B4:7B:69:45:BF:EB:BA:14:9B:CA:FC
X509v3 Authority Key Identifier:
keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:63:08:f7:8c:f6:76:5a:50:9c:8b:87:ef:ed:d9:bb:56:11:
70:a4:be:68:3a:5c:d2:cc:19:9b:e5:85:ac:60:ad:64:78:c5:
8c:c7:0e:b4:ff:e7:f5:cd:2f:99:8d:20:0c:d9:90:6a:f7:2e:
e2:3f:a6:7c:93:24:53:af:d7:26:96:dc:e7:a4:68:bd:4e:28:
0d:41:17:ca:a0:36:0e:dc:0e:48:5f:3a:c3:8e:1d:83:63:1a:
9b:71:e3:da:d7:4f:93:00:9c:46:61:7d:23:38:42:85:26:dd:
04:61:7f:a4:d1:bd:c6:12:e9:09:1f:25:8e:eb:12:aa:63:70:
6f:2d:df:4b:2e:bf:44:57:d5:c5:bf:86:ef:f0:cb:19:94:3c:
f5:d9:46:c0:69:d5:75:10:68:eb:4f:3d:35:1a:78:0b:b1:19:
25:40:40:ed:f2:c9:7b:41:a4:08:87:cc:71:3d:fe:71:9d:d5:
3b:24:c8:cd:35:a4:34:4f:7d:65:7e:ac:d6:43:f3:ac:de:8b:
9c:19:74:a7:1c:79:e7:07:e0:eb:f5:44:39:c7:79:98:2e:fa:
e7:06:0d:14:79:ad:24:08:69:8d:e5:84:64:36:00:cf:32:80:
3a:67:7f:58:53:4b:93:ea:58:0d:13:2c:0c:ad:fa:f4:bd:60:
47:de:fd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:18 2025 by rpki-client