Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: J1HGLOwPMyNtBuo1F5oM/TG/TG3cua6EP4QXVWzrGSc=
Subject key identifier: 25:BF:EE:06:CD:D2:1D:AD:00:78:A4:87:CC:BA:EB:9F:EA:A9:71:06
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 0194BD17945F73D9FD5113D6EB0B00E66F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: SNV_1VpgwAmnXneSKWb5jRq8ToE.roa (hash: WATnXIVshclXFF3TBwoPfH1QR7+uJEv7hk540ZBWOkc=)
2: lVzggsEuwHNUmwDhZ4XQcolHpDk.roa (hash: eA/BupKOc3qojEoZ8E13TwJIMViSsM3/KaYEEgTR1Jc=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: Bi3ZOvJfA3n9lum4mBbH9hAFhRJrzb1j9crU3gH/+bA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:94:5f:73:d9:fd:51:13:d6:eb:0b:00:e6:6f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=25bfee06cdd21dad0078a487ccbaeb9feaa97106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:33:e6:c2:f7:0c:47:d1:a8:16:da:75:5e:
bd:a6:8d:72:35:26:ed:92:20:db:9b:12:40:4f:c6:
03:32:b2:84:92:81:62:99:d9:e8:3b:7e:d7:63:f3:
f1:14:f3:7f:5c:54:3e:eb:3b:c4:13:32:1b:dc:a7:
ea:33:e8:df:e3:a8:2b:fc:6f:56:7d:20:94:76:d1:
cb:dc:15:07:69:ce:6a:5c:64:40:c6:17:e9:e5:aa:
87:1d:fd:14:a8:4e:ba:3f:51:7e:98:f6:a7:3d:09:
14:fe:5f:5b:4d:78:a6:c7:99:a7:36:63:e8:98:8c:
da:81:ab:25:2e:51:f0:d8:ec:97:9b:f6:26:89:7e:
ec:02:ce:7d:c4:19:dd:e3:28:4c:a7:ec:db:cd:b9:
a1:63:db:73:e1:82:8f:8a:73:62:b3:8c:31:71:13:
6d:db:e2:2c:da:30:91:cd:9f:be:44:e1:fc:c5:22:
2e:c2:46:48:c3:87:d8:0c:05:d6:2e:9c:26:bb:64:
f0:6d:fe:96:fa:c6:8f:3b:61:bc:03:f9:54:71:61:
3d:ac:ad:27:86:04:48:d3:ca:ef:ac:eb:2f:a7:ee:
22:62:d8:5d:c2:6a:12:19:c5:66:55:73:1f:55:a6:
5f:a9:9c:62:a1:28:63:5f:0c:e6:a5:7e:d5:95:af:
61:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BF:EE:06:CD:D2:1D:AD:00:78:A4:87:CC:BA:EB:9F:EA:A9:71:06
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:56:47:fb:b4:53:94:ed:13:11:0a:52:30:3c:e6:6f:ee:f8:
34:12:03:7b:95:02:04:8c:2f:54:51:cc:67:1f:af:a1:89:9a:
09:40:08:35:fe:db:b0:b9:2d:0e:88:45:2f:e0:94:21:40:9d:
2a:c2:dd:08:7d:af:de:56:8b:20:ad:49:f3:eb:c8:df:2c:b9:
df:f0:82:18:d0:3a:32:f2:d2:27:e6:64:dd:3e:87:56:cc:df:
14:05:a5:ec:41:d3:dc:de:da:85:5a:13:ed:23:c5:b6:f5:df:
a4:08:da:63:90:3e:cc:88:1b:f0:4e:fb:20:47:2e:86:43:c6:
cc:9d:61:ea:26:db:7c:76:bf:cb:dc:0e:f4:dc:85:0a:ca:ab:
fe:7f:9c:38:9d:6f:56:a8:ac:b2:10:3b:e5:6e:71:0f:6a:75:
33:28:e5:8c:e4:c2:57:a5:ba:0d:49:4f:44:0a:f1:c4:99:ab:
d1:70:78:e1:f6:8b:90:bb:71:77:bb:ec:24:47:1e:c2:b9:23:
45:2b:1f:e3:b7:7f:6f:e8:8e:76:99:fd:2e:c8:fc:cd:dc:b7:
de:26:10:85:db:38:fa:40:c5:6c:cc:ae:66:20:56:20:b8:62:
35:24:f8:12:99:4b:00:88:d1:d7:25:00:ad:fc:11:9e:50:f1:
59:8e:cf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:18 2025 by rpki-client