Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
File: PiWraYX3nKneBumOi52iRdhVmrY.mft (raw, json)
Hash identifier: DlPOCGtCch6o4oFtGAX/nNXvzQGN1rnuKjtKTe2WVrk=
Subject key identifier: 7E:AD:12:5A:6A:E5:B7:9C:08:2F:99:70:B5:4F:FE:8A:B0:82:06:55
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial: 0194BCE05F4F0FFA00F0D5365F04C2100437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
Manifest number: 01A8
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: Lge5ZNKhap-Px7gqBCCXWeP9nEI.roa (hash: R6c1c1aT3Wtl7Kks1MgAiey/fCNqyQA/+R9blHUJEyk=)
2: PiWraYX3nKneBumOi52iRdhVmrY.crl (hash: du4yktO+j6lLj81GRQmM/1nChUrhIeazl3JyXDtRRv4=)
3: hjDsKa7PgCyxLZd-n7fPu4YJNMY.roa (hash: QbjTyyOso0F6DQuk2NtMyiPym++x2bG0DkG5mbISZEk=)
4: oXW8GWaKetGdBKsu2Z2IY-9T_9A.roa (hash: HV9TKH6QRnK6qfQ0eObEVR7yRAca23tprem52+Wydrk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5f:4f:0f:fa:00:f0:d5:36:5f:04:c2:10:04:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=7ead125a6ae5b79c082f9970b54ffe8ab0820655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:66:36:f3:54:82:6b:e1:30:1d:e3:63:5c:5c:
0b:3a:35:c4:1e:61:5a:0b:22:56:d6:b3:c9:eb:ae:
79:b9:97:8d:31:cc:b0:0f:bd:1b:16:10:07:51:3c:
37:79:73:0d:6f:28:b6:f8:68:c7:d4:dc:de:a5:5d:
91:1b:1f:d8:38:26:e4:15:5e:1b:a7:3d:fc:02:56:
6e:0a:7e:e4:72:f8:06:eb:78:6c:21:17:19:f2:4a:
3a:c2:4b:bb:2f:cc:8c:4b:96:e3:fb:fc:d5:ae:be:
51:ac:d1:47:4e:6e:a4:21:10:e7:45:7f:64:9d:3d:
af:7c:7c:f2:18:ab:9a:cc:30:e9:bc:0c:50:84:f6:
55:e1:0e:e9:f9:d9:46:2f:1d:07:75:89:31:33:35:
11:f9:c8:19:c4:bc:d4:4b:1c:5d:51:00:e9:30:dc:
77:99:cf:12:cf:33:e8:64:3b:b1:f3:c7:1d:93:d2:
87:87:fe:77:9c:9a:7c:11:c4:c9:70:e6:4b:62:e5:
a5:91:c9:6e:e2:7d:64:d7:ed:35:4d:3c:d3:7f:df:
f8:d9:d1:de:53:40:62:36:ff:b7:12:b5:14:69:bb:
66:14:bb:06:46:4b:1b:21:5a:0f:79:57:7b:ac:b8:
95:ac:29:e1:01:de:7d:68:5b:51:d2:4f:38:00:3e:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AD:12:5A:6A:E5:B7:9C:08:2F:99:70:B5:4F:FE:8A:B0:82:06:55
X509v3 Authority Key Identifier:
keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2d:bf:8a:5f:72:3a:4e:43:b8:ad:9c:a4:73:d2:74:2b:a4:
b8:26:86:50:3e:07:0b:20:41:1c:89:8f:a7:45:c5:63:5a:ae:
ab:ca:53:38:c2:d1:70:46:1e:a1:60:50:99:db:59:a9:83:07:
97:12:3a:c5:c8:76:06:2a:19:86:b1:76:68:30:b8:22:82:9d:
96:56:f1:c8:00:34:9f:3f:a6:c2:45:6b:9d:11:7f:77:1a:c5:
64:b6:7c:51:bf:23:e8:9d:a9:7d:cc:e3:88:9a:58:9a:b7:6c:
46:4d:c6:d6:3b:98:af:f0:2b:41:e7:8e:fe:b2:f3:f6:b7:22:
3a:33:ed:39:f9:97:f4:84:33:c0:85:f3:ce:03:70:cf:4b:9a:
91:cb:ed:6e:fc:5b:8e:f1:e9:8b:6a:63:78:59:eb:07:7d:c5:
96:aa:31:1c:1c:d5:5b:92:4e:58:9e:b8:ea:bf:73:2d:a0:1a:
96:fa:f6:d7:bd:12:87:72:a9:d0:30:b7:41:ab:7d:87:88:a3:
1a:10:e8:61:cf:8d:9c:02:b0:30:ef:01:71:27:c3:81:8f:1b:
89:e4:ff:ee:dd:0b:1f:9a:d0:fe:fe:6f:a9:66:94:88:a4:b7:
8a:e2:92:73:c9:0a:bc:50:89:a4:f5:cb:64:93:50:f2:44:01:
38:20:ee:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:31 2025 by rpki-client