Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
File: PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json)
Hash identifier: t25z5c8yMXkoX850wg1WJOpsK843dS4UbJnE3MQonXw=
Subject key identifier: E1:FF:4F:6A:B7:E5:ED:2D:33:6C:0E:FA:17:B0:BD:A2:05:37:46:0C
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial: 0194BBCE66627C9A9E4005832D8F4341B530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
Manifest number: 07D9
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: Fw_E1L4Nw5Hr77P4PSs-fCdld4o.roa (hash: 02j0pLQbdlE9MH5ggabxr1xIMQYmyzEOYjg+Z13q0BA=)
2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: /CXJFp1SAJT0m2fI7l0bvMuhAYO0GgbGv3niBTSuI28=)
3: VrCXOdxzLdld1tE0j_xLZ92cqsk.roa (hash: QEJHs3sdF5W7Kc4VSrPn7L7Yyup7NDcWYP/rulbrnEw=)
4: wbEopCsHgdsUwl85d1p6YVkQyt4.roa (hash: Mueh9tzlM1Esxrp4PnyphjifQnr2qX7ryaFawIufllw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:66:62:7c:9a:9e:40:05:83:2d:8f:43:41:b5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=e1ff4f6ab7e5ed2d336c0efa17b0bda20537460c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:92:89:ce:3f:eb:c6:8b:03:2b:1c:14:52:
1e:87:9a:c6:4b:7b:5c:1d:82:79:42:1e:35:10:33:
b5:66:b6:76:d8:f2:01:b9:c4:59:86:5c:b7:c1:7e:
87:3d:19:c5:75:29:b5:f2:f6:a5:52:fb:53:bc:7f:
19:69:8a:42:90:aa:89:08:42:c8:b7:25:ea:f4:69:
1f:d7:5c:00:88:14:e1:4a:10:a9:ae:04:f5:66:74:
a1:3c:1c:a5:8f:4c:a6:8f:3c:a6:46:c6:85:99:0f:
62:bd:d7:01:95:20:db:9f:0f:81:71:fd:9e:49:60:
04:e6:9f:71:d6:b8:86:d9:1e:79:01:dc:3e:c8:21:
2c:3e:8f:73:0f:f1:7f:f5:5a:ef:05:89:06:c9:fc:
34:5e:48:c9:f3:00:4a:f2:9c:8f:fe:86:83:5b:29:
dc:1e:9b:f8:63:1a:6a:17:1d:b8:49:88:2a:70:d2:
26:5a:94:7c:47:54:25:33:46:66:f6:19:67:7a:8a:
e9:c7:95:c0:96:bd:42:41:40:78:30:4e:58:c9:47:
59:30:2f:ad:b8:16:b8:e9:f6:c9:0c:b0:01:9e:4d:
7b:90:74:0a:ce:54:1a:17:7e:3d:d9:2d:63:65:9f:
88:70:a6:43:e4:10:cb:a8:bf:56:9a:d0:34:07:43:
8c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FF:4F:6A:B7:E5:ED:2D:33:6C:0E:FA:17:B0:BD:A2:05:37:46:0C
X509v3 Authority Key Identifier:
keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ea:29:82:a6:d9:64:be:21:ed:23:6f:07:f2:88:48:f4:78:
9a:a5:cd:63:cd:b3:2b:ce:44:8c:2a:a8:31:6c:94:26:62:af:
fe:74:19:03:b0:47:d7:71:b6:96:28:d2:c4:27:39:27:9f:3c:
05:d1:81:fa:7d:54:64:de:e7:cb:0f:b9:12:40:03:66:17:a9:
75:7f:f9:4c:2f:de:b2:d0:98:e7:cb:1a:ea:9e:70:32:d8:c4:
a7:7d:a3:ed:15:e0:3f:d9:3e:fb:49:17:35:7b:55:cd:6b:fd:
a5:19:4e:c6:81:43:61:83:05:6e:16:22:79:cf:b2:42:f2:77:
f9:0e:3a:7e:5c:8d:3e:19:9b:ec:51:84:e2:d6:45:b6:3d:3e:
de:12:93:bb:4f:18:30:ad:dd:1e:1b:01:76:41:8d:55:5c:d4:
8d:e3:41:d7:7d:d7:cf:68:3c:22:1c:0d:e5:73:f9:72:44:c7:
3d:a9:a9:1d:27:27:75:f4:13:ff:86:0c:09:2d:a6:74:9d:8a:
ad:21:bb:2d:78:6f:d6:ec:79:4c:d4:da:78:99:82:e6:15:c9:
bb:5a:01:79:5e:0d:a8:a1:b7:e8:cc:8c:8c:07:25:13:f8:93:
55:e2:de:02:fe:a0:ca:0e:9e:38:0f:3e:cc:21:1c:3e:c5:f2:
7d:05:da:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:53 2025 by rpki-client