Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
File: PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft (raw, json)
Hash identifier: JgMwn8LSEjUzY+TsRwivltMMvT2dMy47NvRSyjWfO0A=
Subject key identifier: F3:D9:7C:8F:07:0E:68:CD:34:6D:19:DF:59:5C:E7:62:2F:57:17:63
Authority key identifier: 3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
Certificate issuer: /CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Certificate serial: 0194BD4E756E9D31F3D5F94A8B2449D7485A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
Manifest number: 0D31
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl (hash: 8HPH0A9clB9wU6tedKoLbUr3a+4TWw+fcLfYX41v/zE=)
2: xBrh2puAZLD7pjCAoLg5yGjRnB0.roa (hash: 8ID00PDtROfidLU9/47rFQiCsHZROmYeVHVQ85z87+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:75:6e:9d:31:f3:d5:f9:4a:8b:24:49:d7:48:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=f3d97c8f070e68cd346d19df595ce7622f571763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:53:ec:aa:82:87:ef:46:2c:16:5e:37:bc:
46:bf:fa:3f:e8:be:fd:c2:3a:77:76:13:9b:ca:40:
ab:8b:73:c0:9e:c7:07:de:db:f0:4a:7d:4e:8e:a3:
c1:48:6e:27:69:40:24:77:fa:c8:56:76:c2:e9:d1:
18:ad:71:f9:f2:48:f2:2d:44:73:48:36:89:33:28:
af:5b:2c:96:16:8e:bc:19:56:59:70:59:d9:8e:3b:
f6:2f:97:94:76:be:4f:56:66:f8:43:b7:00:be:8c:
4e:40:44:09:6c:42:ac:31:5b:44:19:fc:76:7d:8c:
5a:66:e0:46:18:db:f3:95:14:de:b0:a7:91:32:aa:
76:93:6f:95:e5:ef:0d:71:0d:92:17:a1:74:dc:e7:
31:5c:ee:76:cf:af:b2:cd:84:29:fa:d6:bc:54:ba:
66:d9:d2:6c:09:2e:10:46:97:1e:13:cf:05:ce:1e:
0d:59:cf:cb:f6:5f:15:09:41:95:59:e0:b2:cd:a0:
8a:77:18:40:38:70:87:70:34:b9:c8:65:0f:fb:94:
c4:87:00:b1:30:1b:a8:61:4a:cf:81:95:20:0e:21:
62:bc:c8:39:ea:47:e1:09:80:9e:c3:1a:a3:cc:eb:
86:26:8e:f5:db:eb:11:8f:30:86:aa:4d:cf:3c:15:
c2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D9:7C:8F:07:0E:68:CD:34:6D:19:DF:59:5C:E7:62:2F:57:17:63
X509v3 Authority Key Identifier:
keyid:3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e2:ad:e2:0a:04:cd:35:15:84:37:36:13:ee:c8:54:81:3d:
ca:83:2a:87:f7:27:68:bf:45:77:1c:a6:82:ac:a6:56:2a:bf:
8c:47:f6:22:99:21:d6:dd:d0:35:b4:ae:eb:6a:89:0d:ca:43:
e8:56:86:f1:12:da:8d:19:da:0d:dd:f0:5b:19:54:c9:35:17:
83:29:99:f1:7d:da:fe:ff:9d:e5:22:94:97:c4:72:cc:33:ab:
1d:f7:c8:55:a1:6f:b6:ee:f6:73:1f:ea:1e:39:45:c1:37:10:
a9:9a:ff:df:10:0b:d6:05:3b:b2:44:8e:a3:fa:33:30:88:49:
3e:8e:05:1e:fa:68:3e:44:3a:45:c7:03:f6:93:7c:fd:13:c6:
f2:ce:0d:04:3f:3f:8a:af:2b:ec:84:7e:01:8e:69:88:44:23:
67:69:c3:d1:4e:82:d2:c9:db:90:c1:ce:e3:cd:7c:9f:c4:c0:
cf:9f:73:04:13:7d:23:c1:85:f1:8f:19:3c:82:82:e7:be:b2:
83:9c:4a:14:72:f2:c8:56:a4:b6:a5:2c:7b:02:77:a3:93:29:
22:60:24:1b:d2:8a:79:ac:ff:d4:3d:c2:0a:3f:72:31:b0:22:
27:34:b3:c1:53:2c:ae:b0:c0:fa:09:3d:93:27:1e:ae:be:07:
9a:ca:ae:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:35 2025 by rpki-client