Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: 9WID8dL59Pd1FR1CONYZhZJJ/hPGVtpIyLKRbndFLY4=
Subject key identifier: 0A:44:16:25:F5:61:1C:1B:4D:5C:19:A8:31:0E:E8:B9:91:06:02:DA
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 0194BC3C8A16F9975FF97DCE0F11E2A567D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: bY2tBQ51YL8a-pcphuYuVQz7bOg.roa (hash: FnAC9AE4W5+r++w2y10UXXpTgultC6LrjOa8S41rhns=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: D4dxcuH56knJ0wLm/MQhwrBjXIGeJuKc8bM6HTOuAcM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8a:16:f9:97:5f:f9:7d:ce:0f:11:e2:a5:67:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=0a441625f5611c1b4d5c19a8310ee8b9910602da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a6:d9:98:7c:e3:2d:44:da:cb:8c:7a:2b:45:
d9:e7:3f:c2:51:d9:4f:ec:aa:62:c4:d9:e5:7b:4d:
5c:59:db:cb:36:d4:19:96:93:1a:d8:86:65:89:d2:
ce:d7:14:7f:ee:19:be:0e:42:0c:f8:2b:9f:b9:0e:
86:cf:ac:86:e6:22:ae:d3:1a:4e:e8:d7:e3:34:82:
63:72:fc:aa:14:21:1d:af:6f:39:6b:fe:22:18:f8:
fc:71:48:d2:f4:6b:71:ed:cf:aa:a1:32:30:60:58:
39:a5:5d:6a:f7:5d:ab:db:82:4a:70:88:fe:a4:10:
0c:b1:78:3a:e9:8b:2d:00:5a:1a:a2:96:17:72:88:
9a:4b:fb:37:a6:f6:c2:31:d0:f8:31:90:d9:b8:5f:
ef:67:32:a3:af:12:56:cf:6e:df:e1:47:ed:05:02:
8b:01:ae:4a:e3:a5:ae:04:2d:53:59:93:a2:6b:8d:
bc:e8:71:b9:79:79:91:17:3e:0f:54:c3:24:ad:dc:
03:39:33:ac:93:87:17:b4:e0:c5:4f:43:e6:cf:99:
f6:3b:75:b7:c6:8b:66:32:a8:05:00:28:16:cf:08:
c8:6f:da:f1:a3:d6:1d:24:41:89:13:a2:21:f0:d2:
38:be:75:5c:d0:bf:52:2b:b4:a5:db:44:59:28:eb:
3f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:44:16:25:F5:61:1C:1B:4D:5C:19:A8:31:0E:E8:B9:91:06:02:DA
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:69:c5:58:cd:88:5f:61:15:01:b4:39:bc:7d:7d:30:fe:52:
72:6d:d7:d4:c5:3b:35:8b:70:72:00:1c:0b:0b:5e:ba:ba:7a:
71:c2:99:e6:7b:9f:3b:5b:a6:32:17:34:1d:3d:5e:4b:41:c7:
58:9d:47:c8:b0:34:56:1f:f7:a9:06:b9:09:69:28:96:d9:a8:
37:f1:59:59:c4:bd:a8:b5:00:ca:9b:02:0e:37:24:ee:de:81:
b0:37:91:b8:2b:31:ec:0e:82:00:29:d7:e0:0e:30:b6:5e:83:
73:ad:fe:97:16:3f:2a:0e:6c:a6:ba:5e:82:c2:45:2b:ca:c0:
7e:b7:37:c7:10:91:f8:e3:57:f5:3c:47:09:78:ae:fd:48:fc:
6e:45:73:9a:9c:5f:1c:85:e5:86:04:41:2b:a3:99:9f:7d:d3:
e9:79:e5:eb:b0:e7:1c:fb:42:83:36:a9:16:42:41:2a:20:34:
c0:6a:91:70:2b:79:e1:49:0a:01:00:b2:ca:25:8b:a9:79:db:
fb:65:34:e5:80:fe:6b:3a:b8:18:78:11:5b:a7:72:f9:76:8a:
90:41:8f:9d:c0:3f:0c:b0:34:c4:f3:56:1b:7c:fc:17:f2:be:
5c:d6:2e:f1:12:9e:bc:bd:a7:85:04:68:aa:b0:03:5a:1c:82:
7d:a2:86:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:06 2025 by rpki-client