Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
File: peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json)
Hash identifier: wy9VVwxvYsilTa7USztXLQLvI34VPmYoRPabxO3T+gw=
Subject key identifier: DB:F3:A7:15:79:E3:49:4B:44:B6:B8:3B:37:BB:AC:70:73:01:9C:E2
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Certificate issuer: /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial: 0194BD4E51A8FA27537E5CB27DAEAF00F700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: h7eLMCHte9yG-YlFcanGWeY98cc.roa (hash: XK6lpwQoOO2MYAb/MpQPPdSt14GbrWEwi/jo8t+GYvc=)
2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: PqAW3x/VEQI99yRf9mtkJRQPv1XE0/wPjhxcGZPm4O8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:51:a8:fa:27:53:7e:5c:b2:7d:ae:af:00:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=dbf3a71579e3494b44b6b83b37bbac7073019ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:5c:45:8d:2e:c1:00:f8:c1:37:ef:70:48:
b0:d2:6c:f7:36:7b:0b:47:7a:8d:e1:a3:03:d8:cb:
dd:95:9d:5a:0c:ea:75:02:6c:c0:68:51:dc:e4:e7:
4e:b9:a9:4d:16:a0:d2:da:f3:e4:db:aa:d0:c6:09:
56:1a:a4:fb:88:78:53:95:a6:6e:40:ba:31:7f:05:
8a:01:1c:ce:2a:f2:eb:b4:ae:6c:45:0f:17:66:96:
23:4b:15:ca:e3:c1:bf:90:15:9c:00:b9:32:58:8f:
38:de:64:6b:4a:2d:9b:ec:fe:2d:62:0e:30:86:c7:
23:d8:fb:95:80:0a:f7:81:33:83:4e:83:cf:a9:93:
5f:2c:19:57:e0:1a:41:38:27:17:d3:4c:44:68:48:
8e:6f:25:cb:20:08:d7:e4:94:d5:85:50:31:0b:6c:
be:34:65:30:82:0b:fc:fb:32:9a:bf:94:f6:20:ba:
49:75:1a:8c:15:0a:04:d9:fd:8f:a5:b1:47:2b:d5:
19:a7:a7:8f:91:af:3a:f0:ef:c6:df:72:58:c1:5d:
be:1e:5b:25:04:14:d2:dc:3f:0c:05:36:74:cd:0c:
61:34:ad:8d:af:f4:db:3b:08:4e:61:8e:21:e4:48:
0d:84:22:10:31:50:7a:05:af:67:c6:5b:6f:98:26:
c2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F3:A7:15:79:E3:49:4B:44:B6:B8:3B:37:BB:AC:70:73:01:9C:E2
X509v3 Authority Key Identifier:
keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:43:b0:4a:41:0b:8c:e5:09:c0:bd:76:09:1b:a6:c0:29:ca:
44:68:ae:ba:a0:30:81:8d:2e:1f:6c:dd:4e:fc:4b:ec:d7:79:
49:eb:96:80:2b:28:99:11:b7:41:6a:ba:7a:c9:79:5a:51:b5:
9e:f4:8f:64:4b:3c:c1:f5:21:7a:57:7e:78:fd:48:64:6f:c2:
06:c4:90:99:e1:05:3c:b7:66:5a:26:b1:d8:ce:a8:99:16:06:
39:5b:3b:4a:f7:8e:c2:d2:0d:08:77:6f:f1:48:48:bb:e1:86:
da:11:47:34:60:e4:b9:3e:1a:3f:fa:23:5e:c5:08:91:10:d4:
60:b4:ad:d0:1a:01:90:c4:7e:6a:1b:d1:3b:d7:ca:44:f1:07:
54:00:05:d4:0b:01:af:bc:0a:ae:e1:04:27:24:ee:c9:55:6e:
de:e4:5f:40:ad:3c:ea:dc:8d:28:32:0c:71:40:4d:54:df:81:
2d:8a:dc:70:b8:e9:95:d4:27:56:08:f4:12:b4:67:81:e5:00:
bd:0d:2b:66:78:49:7e:79:9c:f3:71:15:e1:08:0a:d2:05:30:
28:9f:af:a4:06:dd:c2:3e:5d:41:14:34:ef:75:13:11:08:17:
e9:6a:0d:c3:5f:a6:52:74:7e:9a:0e:27:e2:c0:30:44:23:a5:
01:e3:1b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:40 2025 by rpki-client