
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
File: PGFL8lfTr3cLvzxsLTW_pGVobOs.mft (raw, json)
Hash identifier: qCLE7YEw6emp6zsQZEpF1CnoHXZBfzG0J3N1icmlSdc=
Subject key identifier: 41:96:33:3A:83:FA:6D:44:52:28:45:05:E0:15:B6:19:88:57:12:98
Authority key identifier: 3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
Certificate issuer: /CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Certificate serial: 0194BC05305F3FF356078AC35A752955AB07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:44 +0000
Manifest this update: Fri 31 Jan 2025 11:00:44 +0000
Manifest next update: Sat 01 Feb 2025 11:00:44 +0000
Files and hashes: 1: PGFL8lfTr3cLvzxsLTW_pGVobOs.crl (hash: l7H69HSRNm4HHNeqr2l3oo5tcZU9IODktlvrpqp7P18=)
2: idSC5Hw5WkkMOAbfku6Dkz9XO6I.roa (hash: UXJcLdtFjpO9Edbh8qYFBpHmdjidm11out2Ag90FqaE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:30:5f:3f:f3:56:07:8a:c3:5a:75:29:55:ab:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Validity
Not Before: Jan 31 11:00:44 2025 GMT
Not After : Feb 1 11:00:44 2025 GMT
Subject: CN=4196333a83fa6d4452284505e015b61988571298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:45:07:5e:19:93:29:39:2c:f0:3b:03:16:
c2:aa:f0:36:9f:2b:bf:d7:84:db:94:a9:ce:8f:6b:
09:05:90:f7:3c:60:4c:82:b3:dd:6a:cc:47:d6:41:
64:f8:5e:1a:86:45:55:a4:5e:2c:c3:bf:9d:06:97:
ba:20:4b:41:f1:d8:2f:6f:f4:0a:8a:49:3f:37:29:
88:86:05:46:5a:8b:0f:0e:e9:4d:3d:fd:7e:d8:40:
cb:44:db:c2:6f:40:bd:71:f9:71:7f:eb:b8:89:62:
4a:d9:75:73:c4:60:67:4c:23:95:df:54:fa:c6:0c:
6f:71:cd:d2:dc:60:36:af:e9:7d:df:40:c6:9a:90:
ad:8f:7a:7f:97:9b:e0:70:d6:52:35:e0:26:30:0d:
3c:fc:6a:b3:bb:66:4c:85:13:aa:ba:fe:9b:c1:70:
13:4b:5d:e9:80:14:c6:70:03:d5:1b:f4:b7:65:cc:
4c:7a:83:87:2f:b0:96:90:58:50:f1:f3:0e:5d:2b:
1b:53:e7:00:1a:fc:ff:69:35:fb:88:5d:59:ac:a6:
f2:47:53:1e:df:e3:b2:04:70:93:4c:28:cb:36:ba:
59:0e:4c:bf:ec:00:6e:26:48:78:20:26:a7:d9:e2:
bc:6b:1b:49:a1:08:47:7b:ce:c6:9b:78:e2:f6:9e:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:96:33:3A:83:FA:6D:44:52:28:45:05:E0:15:B6:19:88:57:12:98
X509v3 Authority Key Identifier:
keyid:3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:10:8e:fc:3b:e3:7a:dd:1c:60:55:0d:ee:fa:1c:f9:72:29:
6f:35:72:06:03:12:98:53:fa:37:e0:e6:db:5d:e4:30:cd:52:
1f:6d:28:4a:8f:a0:e2:26:f0:6a:8c:dd:cc:44:56:e1:33:3e:
fd:04:92:91:f6:22:bb:62:fc:34:70:22:5a:63:9d:e4:ee:26:
ac:29:72:0d:75:3f:72:37:5e:bd:8c:4d:fe:d6:65:14:0f:b8:
20:21:cd:14:14:cc:49:93:4d:5b:88:54:bf:62:66:a0:0b:f1:
50:3f:89:33:63:54:ba:bb:c4:d6:ae:73:73:4b:8c:8f:80:60:
34:32:67:5d:18:ef:f0:ac:90:ba:6c:82:90:7c:d3:1d:45:df:
4d:31:70:3e:31:24:51:62:01:6c:32:10:30:6d:6f:e9:91:f2:
28:58:ab:18:42:86:b8:87:3d:fd:e1:3f:47:30:91:be:ae:33:
13:d2:e4:e9:e1:04:f2:54:be:a0:03:bc:a1:a5:68:63:35:74:
08:a3:1a:c4:2c:ee:93:c8:9d:fb:b8:13:56:8d:04:95:cc:fe:
04:2b:79:60:73:cb:25:74:e6:b9:ff:28:f6:a1:15:76:63:0a:
42:fb:17:97:e1:31:7f:1f:42:72:29:af:4d:09:e7:84:72:53:
f4:16:3b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:23 2025 by rpki-client