Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
File: PetYF7vn5aHF-xMFUbhKtIgBb5I.mft (raw, json)
Hash identifier: CqaPmNx/wssg2UYZmQmpx172Akbi1yQjYmDUkGwHCNg=
Subject key identifier: 74:31:D4:02:07:B4:79:F1:70:E7:49:61:02:27:DB:FB:8D:BC:00:25
Authority key identifier: 3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
Certificate issuer: /CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Certificate serial: 0194BBCDF9F0AD038366F8D670CA42894B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
Manifest number: 8A
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: HaT6DXZ4LF2lc652Plm-kzzODow.roa (hash: VZ7qodJDKPgUVh1pa0yajPCZJZwGY0+Ucvcj6Tjkgzc=)
2: PetYF7vn5aHF-xMFUbhKtIgBb5I.crl (hash: J4oqSa7ncw9EVQwYc5yZVeIHkhXdhW0h77yBEoWZB/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f9:f0:ad:03:83:66:f8:d6:70:ca:42:89:4b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=7431d40207b479f170e749610227dbfb8dbc0025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:07:74:a0:8d:c7:54:a8:b1:a5:5c:c2:11:
e0:43:aa:37:7d:f3:cf:0f:6b:34:a4:57:cc:e2:53:
6d:c1:d5:eb:4a:9a:b9:ca:e7:ca:06:d9:31:a3:da:
f8:9e:cd:e8:6a:a3:c0:b6:1f:f9:21:8d:03:68:bd:
fe:7f:35:70:f2:15:ae:48:7a:3d:06:57:17:98:b5:
55:3b:29:4e:77:ed:8a:31:90:d3:6c:6e:4a:c4:16:
07:60:cb:32:36:e9:da:56:12:51:80:8f:24:46:a2:
b9:d3:f9:32:99:37:45:a8:e2:dc:05:08:8e:74:3b:
51:3f:0a:b8:a9:74:9d:d1:3b:df:77:6d:78:75:4c:
7a:c7:7b:ac:c1:5f:97:4b:a8:c3:91:b5:d3:53:4e:
d2:e6:c9:95:63:b1:69:21:33:23:f9:5c:1e:52:07:
2b:80:b1:0d:df:83:cf:6e:60:59:38:1d:7a:af:e7:
9a:94:89:6c:05:08:ef:3d:9e:60:bb:5c:78:1b:71:
f0:cc:2b:48:63:0b:10:50:86:11:65:d9:6a:69:1a:
ec:97:cb:03:cc:d6:8b:ae:fc:8d:86:ac:7a:59:0a:
10:6c:c8:24:8f:dc:54:6e:78:9e:73:b6:9f:fc:e5:
04:3a:44:c7:af:c8:0b:d5:00:62:c6:68:8c:ec:07:
0c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:31:D4:02:07:B4:79:F1:70:E7:49:61:02:27:DB:FB:8D:BC:00:25
X509v3 Authority Key Identifier:
keyid:3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:05:93:bb:f2:ad:bf:70:94:89:16:45:b4:95:5b:68:cf:58:
b9:5e:39:af:17:da:36:37:0c:aa:1c:90:c9:9a:11:9d:f0:85:
65:1d:3b:8b:2e:33:b1:5f:84:37:f1:61:c5:e4:19:6d:41:d9:
91:70:e3:db:43:c7:57:d0:73:61:39:d8:72:c7:05:22:5a:bd:
bc:87:e8:42:76:22:87:2f:5a:e6:3b:5b:0e:94:6a:41:ab:ec:
69:77:9f:93:4a:6e:a0:fa:16:cd:d2:da:44:43:90:69:1c:ca:
29:dc:61:8e:03:a0:c3:e3:2d:dc:77:71:c9:d5:22:61:6f:84:
82:c2:05:8b:bf:bf:85:c6:f6:83:26:9c:77:6d:25:2e:3e:47:
3f:02:7a:4b:88:91:28:06:24:1b:55:01:f9:ec:58:00:b2:98:
df:af:73:db:a6:6c:af:d8:81:82:6b:eb:93:4b:04:4f:e1:d0:
81:c7:cc:9b:b7:c6:d8:c2:f3:ce:ad:04:fc:7b:f8:ba:2a:58:
41:3c:37:17:67:9d:0f:ba:18:eb:50:11:a1:f5:28:13:02:cd:
10:ee:ee:3d:db:78:43:9c:f7:99:00:0f:9a:92:22:7f:60:b9:
f7:3c:91:bd:b3:c2:6b:8e:7c:9b:3b:67:c8:8e:5b:33:9b:84:
10:ac:b9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:28 2025 by rpki-client