Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
File: P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft (raw, json)
Hash identifier: sqFmvQSSMmscCzSnzpQykLGH4XU6oVAD01HEm0zF0Oc=
Subject key identifier: 4F:DA:FB:F1:70:FE:22:55:97:B5:DC:7C:27:EE:BF:10:D5:13:D4:F0
Authority key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
Certificate issuer: /CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Certificate serial: 0194BD85ACDBB0A0595432BF1B5718201FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
Manifest number: 13AF
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl (hash: u8wiLGSEmWQv/6rXxschuX6qcyKd7n9EF7sW7XuZOKE=)
2: dfyn6nhNR8JQy6SGJlUvEZfvkyM.roa (hash: k281u51pv38AcL8abAJjlmfLN2hampMY0v32cElp30w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ac:db:b0:a0:59:54:32:bf:1b:57:18:20:1f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=4fdafbf170fe225597b5dc7c27eebf10d513d4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:32:9e:3a:ee:fa:b8:1a:95:f0:ab:1b:b4:
7f:6d:ed:da:e2:a4:e4:e7:6f:11:9c:f9:cd:1b:4f:
db:b5:98:50:4d:33:62:3a:f3:93:81:e9:93:58:ec:
0e:51:69:62:d6:a9:5e:da:eb:82:0a:11:9a:9b:9f:
15:1d:48:2a:35:93:78:90:84:0e:ab:2b:83:35:18:
52:b5:ff:0f:be:8b:a8:f2:36:62:49:dc:ce:c5:26:
dc:ff:15:39:45:5f:88:d7:7b:d8:63:7a:3d:a1:ac:
e7:fe:4a:b2:bd:ed:3f:1b:00:06:bd:08:29:f9:3b:
39:09:84:83:51:56:99:ea:76:96:4c:7a:c7:f4:0c:
6c:59:7f:99:dc:36:56:6c:83:73:cd:c2:99:f4:a3:
58:34:1c:d3:d4:be:8f:40:8b:4b:1e:ec:27:00:a8:
ec:8d:24:4f:16:83:12:88:34:de:2e:11:eb:de:62:
7c:66:11:36:fb:54:7d:29:59:43:88:67:ae:22:81:
e8:4e:7d:fb:60:f0:66:90:58:03:c9:5c:22:03:b9:
58:6e:c0:c9:c0:ca:fa:1e:db:be:18:39:b2:ab:f8:
4d:71:54:c6:52:47:ea:d7:9f:65:27:3a:ff:b4:08:
76:69:a5:6c:49:8d:fe:72:4c:1a:69:45:ea:ad:f3:
84:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DA:FB:F1:70:FE:22:55:97:B5:DC:7C:27:EE:BF:10:D5:13:D4:F0
X509v3 Authority Key Identifier:
keyid:3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:31:4b:91:34:58:0c:1d:1d:9b:36:90:a0:c6:6f:f4:67:0e:
19:80:2d:8f:1c:a9:c1:57:cd:5e:c9:40:f4:96:36:e0:4c:10:
4d:a8:d4:cf:e0:f1:fa:eb:2e:0a:ec:ce:bf:c0:9c:e5:39:44:
55:ca:19:90:8c:5f:4c:c8:70:6f:3b:f0:97:e7:bc:98:1c:e4:
e9:3d:82:da:5b:d6:94:bc:82:93:a1:d5:a0:8a:d5:90:25:f6:
43:90:15:9a:fb:a7:1e:8f:0a:5a:9b:71:ef:d3:ee:43:33:ca:
11:e5:90:7a:ca:89:a9:a1:73:3f:58:cf:58:21:72:b6:d8:cf:
6a:62:53:e6:22:b7:ab:47:a8:f9:1c:f3:20:27:23:aa:78:69:
d5:8b:a3:80:84:44:64:3b:f7:20:96:2e:91:83:46:94:a6:a3:
75:60:68:d9:58:23:4e:35:e6:97:4b:31:e3:4f:72:de:84:88:
26:d7:86:d8:21:88:8e:c8:3f:a9:58:01:e6:bc:7b:6e:db:73:
0c:8d:31:a6:00:eb:9d:87:60:8e:5f:5a:35:e3:7e:25:f2:09:
1a:b2:d9:64:80:d2:7d:b9:9f:58:24:05:59:a2:d5:12:01:fa:
e8:c1:f7:32:f4:5e:68:6d:8d:14:bd:d0:e5:65:39:e7:67:82:
fb:45:9b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:49 2025 by rpki-client