Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
File: P6E212Q_3A0_sdU0Z9irspm3kXE.mft (raw, json)
Hash identifier: uajsxfsHIFLFtgApL0s8MmlGQsHQ8cZqUSKgeggSwg4=
Subject key identifier: 06:C5:D9:51:46:D0:22:C8:5D:71:DA:4D:94:A9:A4:12:40:05:4B:3C
Authority key identifier: 3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71
Certificate issuer: /CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171
Certificate serial: 0194BD85326637D4CCE7227331BD9F246B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
Manifest number: 0415
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: P6E212Q_3A0_sdU0Z9irspm3kXE.crl (hash: 6PVZ3NJEfX5TQxFmeZh1U2rsrAZJCpEZWYFdFTvNlsg=)
2: aQLWCmdbg9aMVtpUr6kgFp-kl8g.roa (hash: MaYzTmKmtA6VMd+7uLB1yAAfoDrTIUYoMrGwKo2T4Fc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:32:66:37:d4:cc:e7:22:73:31:bd:9f:24:6b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=06c5d95146d022c85d71da4d94a9a41240054b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:ac:c6:ff:8d:02:7b:2f:e1:d4:b6:00:3e:
62:e6:59:2f:18:ad:0d:52:ab:52:28:32:d7:5e:99:
9f:7c:2b:71:84:f5:f6:1a:64:1d:61:84:74:8e:23:
14:62:fb:3c:1a:44:ed:ef:5e:ee:b1:66:35:15:db:
e6:c0:e6:9b:00:de:bf:f9:08:be:09:11:5f:01:ef:
3a:94:dc:e7:56:b3:8f:b7:18:a2:9a:c2:38:f8:cf:
6b:15:db:d6:8e:37:67:a8:03:70:28:0b:05:f1:ec:
72:c6:10:3b:82:a7:bf:25:d7:86:b3:62:06:07:eb:
75:df:61:e7:9f:6c:ae:fc:a4:30:3d:37:cf:b5:3b:
0a:eb:4f:4d:34:ce:eb:11:43:fe:57:d7:c8:bc:d3:
82:4f:e0:52:92:c9:c4:e6:de:0d:f0:6d:07:05:d3:
50:aa:67:3d:b6:a9:54:92:01:5c:67:74:cc:34:d8:
62:81:e8:30:5d:34:66:33:d5:92:80:4e:6b:e4:fa:
cc:e4:61:c4:dc:77:fa:6d:dd:6e:6f:ee:38:89:0d:
ff:ba:fc:80:04:8e:f7:60:df:bb:d9:62:37:19:bb:
50:45:dc:2e:21:cd:4a:9b:ff:07:c1:7c:bb:5f:8f:
e6:16:4c:bf:a3:b8:25:5c:c9:33:d6:6c:a1:93:83:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C5:D9:51:46:D0:22:C8:5D:71:DA:4D:94:A9:A4:12:40:05:4B:3C
X509v3 Authority Key Identifier:
keyid:3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2b:2a:cf:b2:81:b9:41:a0:c7:5d:be:87:f0:0f:8d:5a:b4:
31:e2:a0:21:16:d2:28:dd:be:92:54:d3:3c:fe:68:67:af:d3:
65:34:1b:68:5f:3a:a4:ca:02:d6:28:4e:77:04:c9:df:f8:42:
2f:3f:e9:d2:68:3d:ad:78:8d:e4:5e:85:af:b2:3e:96:d7:a1:
6c:ad:4f:19:82:7d:0f:3a:b7:9d:88:b4:3c:4f:11:34:68:bc:
43:e4:e9:8d:f8:fc:bc:4a:93:2c:80:4e:3c:5c:fe:c5:1e:07:
da:5e:04:fc:75:ac:72:03:a8:f2:2c:c4:91:74:b6:67:4f:21:
48:e6:08:fc:11:a4:03:eb:4e:89:c0:fd:75:ca:a2:f1:de:ff:
02:b6:e2:19:28:80:40:26:3f:09:6e:86:d3:d8:f9:43:f0:31:
78:b4:c2:f2:b0:e4:45:9d:f0:97:d0:e4:a9:e6:bf:92:5f:82:
ac:1d:f5:df:a2:a6:35:d9:7f:b0:a5:19:60:7f:11:77:13:c4:
86:80:a4:2a:34:b9:a6:02:8d:81:8c:02:3f:21:60:c6:47:d9:
e9:c0:be:98:6d:83:bd:d4:34:60:74:30:9c:b8:f2:25:41:66:
d6:d6:b6:3e:90:6e:ee:bc:a0:54:ba:97:d3:b1:0a:7f:f6:fc:
ed:77:9e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:03 2025 by rpki-client