Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
File: p2t7n3_WaUOSfGDc8SEt3AffBSM.mft (raw, json)
Hash identifier: vPFuOhN4Ia9/1kZRK/bvTEujcCMk8pykpjwQBggHowY=
Subject key identifier: 89:09:33:64:AA:85:2A:8F:A4:4E:DF:AD:19:41:11:0F:AF:FE:4B:41
Authority key identifier: A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
Certificate issuer: /CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Certificate serial: 0194BCA99D01829D49884B04657964B1F8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
Manifest number: 0C7F
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: Da3O9NdT4lSei8Y7CvkDIaDpzJM.roa (hash: hrePu0JTxNPu0+eBuJ/EjFtZTApZ3mGXZCXxWWMuor0=)
2: p2t7n3_WaUOSfGDc8SEt3AffBSM.crl (hash: YraZM9MbaGH46rC/3tlPBAi/vWw03UVrnSarzodN1RA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9d:01:82:9d:49:88:4b:04:65:79:64:b1:f8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=89093364aa852a8fa44edfad1941110faffe4b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:fa:1c:a6:15:a3:ed:8e:57:d5:d1:0e:f0:
4f:0d:ca:59:94:23:63:2e:a5:2a:cf:9b:46:77:a4:
5e:4c:6d:b0:1e:ef:89:87:d9:09:98:58:b2:8f:6c:
ee:0d:95:a1:d0:0b:83:72:b1:03:70:0d:72:95:b9:
91:0f:bf:91:2b:03:25:c1:8f:6b:8f:2b:ad:b3:8d:
48:b0:aa:36:b7:8b:73:e3:76:36:99:e0:f9:82:c0:
1a:9e:23:00:95:d6:fd:af:ef:b2:d3:ff:60:3b:92:
52:64:12:b6:24:93:89:33:0d:f0:98:73:6f:38:7f:
8b:00:68:2c:53:28:b0:e0:71:9b:64:ff:97:f9:fc:
f9:62:31:54:94:b9:79:df:6d:09:5b:31:5b:0b:5e:
d1:89:fb:2b:5c:8f:a4:26:24:b1:2c:3b:27:c5:6a:
97:87:b1:ee:f8:fd:f1:4f:c9:40:27:98:aa:ed:94:
2a:f3:a4:51:cf:32:6f:8f:95:39:63:ad:64:70:91:
5b:f3:52:05:ee:29:24:52:9f:61:ba:84:dc:23:01:
f6:2d:15:ee:71:38:b1:33:5a:c5:57:3f:26:72:ef:
6f:5b:3a:5b:02:0c:03:44:b5:b9:5f:9c:7b:42:ae:
54:9b:ed:10:25:25:4a:a2:eb:1c:96:a9:ac:08:2f:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:09:33:64:AA:85:2A:8F:A4:4E:DF:AD:19:41:11:0F:AF:FE:4B:41
X509v3 Authority Key Identifier:
keyid:A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0d:66:df:9a:a9:c9:6f:db:2a:db:3c:c0:7a:59:70:b6:a8:
f6:d0:95:04:a4:6e:c4:a3:29:44:5a:79:d0:b7:fa:26:b3:44:
f5:f5:82:80:7c:28:e6:b7:a8:60:c3:07:d9:59:d9:64:9d:fd:
a1:1d:13:6d:ff:83:ff:9d:90:5a:40:7a:7f:d4:78:99:78:62:
04:f4:b5:e3:28:1d:a5:41:a3:a2:2b:4f:5c:20:28:a4:86:69:
e2:1b:3e:1c:45:53:43:3c:fa:43:b4:ee:38:98:72:fc:2b:8f:
6b:d7:d1:00:ea:62:0d:4d:ab:62:aa:35:57:f4:38:6c:a9:e9:
9c:ff:ea:88:aa:f2:b5:4c:21:d3:e6:ae:18:77:d1:f1:c0:1e:
38:ac:46:cb:57:8f:dd:5a:f4:f0:97:c6:93:61:99:3b:d6:ed:
b0:db:48:09:c2:bb:34:88:57:69:27:72:db:dc:b6:d4:4b:e0:
d3:9f:87:fe:75:b6:a0:76:0b:67:00:bd:9f:42:a4:6d:4f:98:
be:32:68:28:4b:7b:38:82:d7:25:73:45:28:cc:e1:15:56:b4:
1e:29:2d:15:c3:7c:f2:3b:57:d0:46:07:22:62:d9:87:15:b9:
22:a0:40:88:05:ad:ec:d4:43:26:f2:17:f0:24:5e:16:8c:9f:
30:3c:d5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:04 2025 by rpki-client