Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft
File: PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft (raw, json)
Hash identifier: QxDsWwwWkR4j1DNyY7SIh/VFGhivO7fCoqORPVgyFJw=
Subject key identifier: 92:E2:E5:3E:62:53:B5:E7:82:68:D4:E9:B8:14:55:F3:C3:1A:F6:2D
Authority key identifier: 3D:70:F1:F6:56:3D:E4:3A:11:D3:64:49:75:66:7C:1C:28:E7:95:9E
Certificate issuer: /CN=3d70f1f6563de43a11d3644975667c1c28e7959e
Certificate serial: 0194BC3C64CC9E190D028CDE2B8B81DCFC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: 2AYUWvm8F1To8URav6-hliMLNGM.roa (hash: xtydpTSnQLnPEEmzIm3eQJgTUjiDutczP4OZlZO4Bow=)
2: PXDx9lY95DoR02RJdWZ8HCjnlZ4.crl (hash: cSNG0pKuw/gbYR1pWcyK5mYlNdZDrU9bCR13sbml2Ik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:64:cc:9e:19:0d:02:8c:de:2b:8b:81:dc:fc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70f1f6563de43a11d3644975667c1c28e7959e
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=92e2e53e6253b5e78268d4e9b81455f3c31af62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:0b:38:c3:6c:18:aa:69:6e:c5:eb:d4:2d:
47:54:01:01:1d:b8:79:27:d3:3c:70:56:53:b8:45:
ec:c2:db:93:d6:e3:e8:c1:38:30:4a:9f:37:3e:79:
b8:ff:3b:a3:0d:69:88:40:e9:9d:43:37:a8:8b:78:
0e:d9:0a:f1:75:7a:3c:db:e0:09:cc:b1:cd:9b:f6:
87:0f:fa:7f:2f:89:20:73:81:ef:3c:15:6e:d8:f8:
71:c9:92:9e:2d:95:cd:98:48:1c:76:84:47:75:58:
44:2f:6a:91:80:83:68:9f:79:67:83:9f:ec:72:c6:
51:dd:f9:4e:6a:6c:3d:48:86:6f:96:77:73:ee:73:
42:9f:0e:ab:23:fe:7b:30:4a:31:39:e9:8b:3e:b2:
a1:9a:12:ea:0e:11:b8:a7:9f:b0:c9:5a:4f:5a:19:
60:1f:4c:e4:c2:7e:f5:5a:3d:f2:48:cf:75:48:3b:
64:b9:f6:94:c0:e3:6e:b3:51:eb:af:4f:4e:aa:39:
a0:ae:76:4d:ee:76:a8:75:8b:07:73:0a:dd:23:3e:
ad:d6:3c:ec:35:58:54:36:22:4a:86:3e:ee:c8:8d:
a3:b8:37:03:73:7c:af:aa:d3:76:84:8e:eb:11:fa:
36:3a:c8:84:4a:09:49:d5:66:a3:53:26:1e:ad:f7:
53:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E2:E5:3E:62:53:B5:E7:82:68:D4:E9:B8:14:55:F3:C3:1A:F6:2D
X509v3 Authority Key Identifier:
keyid:3D:70:F1:F6:56:3D:E4:3A:11:D3:64:49:75:66:7C:1C:28:E7:95:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bc:8a:15:ca:45:77:25:c8:6f:53:82:43:4b:70:49:56:f5:
e6:c3:c2:3a:30:e4:e3:21:26:b3:a0:8d:39:ab:fb:ce:ef:6f:
a7:a1:12:e1:6e:e1:c7:26:31:76:13:fb:d4:61:9d:b6:1c:5f:
cf:f6:d6:c2:f4:c3:7a:26:a9:4b:24:3d:88:a9:f0:52:37:ac:
b9:d0:d8:28:9b:d7:b4:de:83:67:8c:b9:93:29:7a:f2:18:ae:
1f:2f:de:f2:db:43:53:4e:71:e2:11:9c:25:9f:55:e9:66:5e:
1d:98:fb:1d:5e:87:8a:74:3a:ce:d3:8f:40:2f:71:82:18:0e:
14:8b:ed:70:a0:b0:e7:b2:fe:be:fe:a5:68:ef:e7:94:91:ff:
f9:b0:07:74:3f:40:c2:9c:34:4c:6e:ca:80:57:83:f2:fb:e7:
0a:b6:99:51:3f:e9:a8:19:8a:87:fd:4e:ad:8e:b9:80:c8:05:
6e:04:a7:fb:b0:49:d2:cb:ef:3c:58:62:cb:8d:0f:1a:35:3c:
33:96:f2:4d:7b:45:ce:24:c4:dc:96:4e:c5:fa:69:f8:e5:fe:
a0:3b:12:52:b9:8a:4c:8f:b8:be:74:5a:21:a6:98:38:e1:eb:
7c:1b:9d:28:52:4a:9d:3f:c9:fc:da:25:14:67:5f:9a:e0:6e:
64:6c:9c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:59:26 2025 by rpki-client