Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
File: p5zxDDHy7btVfVVAlzyIB5szIA8.mft (raw, json)
Hash identifier: zts4sSE0s9Sd4aTe7URPhcXAU/Xe4IrCy2ZgRUXgc28=
Subject key identifier: 8D:F8:30:07:02:37:67:C0:0B:9B:9F:2A:FA:85:1F:0C:1F:0F:C7:DA
Authority key identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
Certificate issuer: /CN=a79cf10c31f2edbb557d5540973c88079b33200f
Certificate serial: 0194BD17DDA06F87D08AABA4D0A7112DFFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
Manifest number: 0A32
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: 9XB5L2BKr8qvjKYU2Uioly6fY1U.roa (hash: tKzpvJI6ftqAt+HOqzK+2PC1tLhzH4FaMM6p7/zTUWE=)
2: p5zxDDHy7btVfVVAlzyIB5szIA8.crl (hash: mItY3tDTHSx5EgW5UhmSEfaWXNb2lFsInSXcmS8OWVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:dd:a0:6f:87:d0:8a:ab:a4:d0:a7:11:2d:ff:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79cf10c31f2edbb557d5540973c88079b33200f
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=8df83007023767c00b9b9f2afa851f0c1f0fc7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:2d:08:69:67:98:6e:bc:fd:1d:a2:31:18:
12:72:4a:26:da:72:61:1d:11:eb:d8:a9:85:80:2b:
74:b3:37:1c:b1:a8:60:b7:d7:ea:74:72:fb:a2:1d:
4a:1b:e2:8f:8a:77:c2:f0:17:f0:bc:9d:db:50:2b:
df:53:41:5e:ef:a0:5a:28:b2:5e:b8:1e:4e:81:91:
61:c4:2f:04:45:f9:2a:6b:88:9e:96:ad:d4:1d:2a:
33:5c:43:0d:af:80:8e:ac:61:f7:29:30:a2:0d:c8:
36:a0:bd:e4:c0:f0:0b:78:10:53:22:af:05:1f:3d:
5e:d2:b5:0c:85:2c:b0:c1:06:89:3d:b1:88:f5:e6:
f4:10:a2:3d:f4:09:73:8d:9b:8d:f9:f5:75:4f:df:
d7:16:8d:40:40:cd:a2:db:e7:77:e5:27:b7:80:7e:
00:ee:b7:1f:53:0b:85:cd:53:00:26:fb:e9:d5:e7:
f5:d6:02:b3:65:32:8d:94:a8:15:1c:aa:b7:26:10:
0e:b8:8b:30:65:4e:c8:57:06:0f:c1:d3:29:9c:1f:
85:51:c8:20:5d:f0:6f:f1:95:5e:6e:db:79:5d:32:
79:97:64:ea:8f:da:d8:59:b4:a6:7e:62:33:37:3d:
0a:73:61:20:fd:bc:67:7c:13:4e:3d:16:24:84:f3:
19:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F8:30:07:02:37:67:C0:0B:9B:9F:2A:FA:85:1F:0C:1F:0F:C7:DA
X509v3 Authority Key Identifier:
keyid:A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:03:ab:f0:74:b8:de:4a:de:17:15:12:4f:5c:97:30:a0:f3:
ba:63:66:7d:fc:df:8f:52:77:e1:ea:a5:12:e0:07:74:fb:db:
2d:53:88:7f:5e:be:bc:b1:df:9a:5f:8e:00:ab:2d:13:55:48:
9d:9c:c6:d5:e9:8b:10:10:46:34:18:08:99:d8:42:d9:47:16:
aa:f5:cb:06:02:e9:19:7f:bd:85:04:a9:43:60:8b:21:9e:ec:
09:7b:bd:b2:bf:6c:9e:da:fd:46:88:c2:53:a7:aa:a6:d3:8a:
20:86:ec:57:d0:2b:7a:15:e4:c1:ae:46:fa:24:59:52:62:e2:
02:bc:c5:45:6f:33:c9:c3:65:b8:ae:3a:bf:10:35:5e:bf:3e:
14:f8:c6:2b:75:78:54:1c:b4:d1:cd:22:ea:3c:44:b4:3e:63:
2f:b8:43:7b:6a:c2:4a:fe:c6:37:5d:2b:a0:3e:76:4f:31:c5:
39:06:e6:58:fe:32:a4:c3:24:40:a0:8b:fe:68:81:84:66:c1:
90:b6:7b:e9:40:e7:f6:6a:72:3b:88:5b:4d:0e:78:fc:e0:89:
32:47:a0:4b:e5:21:cd:f0:48:fe:03:44:15:a1:39:06:2d:21:
88:c6:e2:06:1d:8c:65:5a:cd:37:a8:3a:b4:2c:13:1c:f1:ef:
90:3d:a7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:47 2025 by rpki-client