Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: TPaO9VcP0sCYFa989BM8xr97b9zNYxTZzo5LnxzAx7w=
Subject key identifier: 1C:5B:EA:22:4B:C2:A9:06:29:F7:C2:9F:A9:F2:30:EB:25:0C:4E:5C
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 0194BD4E6CD8A6BCAC402AFF36445ECB706B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: XTYDavgtknOlnwhLwE8YM7gzGNo.roa (hash: PldFwC0OKAPE16YsYJiSJ7/6hQNZV4y5TLuWK0kyNJ0=)
2: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: rKqFNxiHnpF66cGB8YrgjvGmjB109iBet+0vMiKjeio=)
3: sSPz7KsWNIMKyyRHlSkiZwosgKw.roa (hash: wjM7pq8MRvpOQBEJDje34R/IkWbdszEvqnHRsuBbId4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6c:d8:a6:bc:ac:40:2a:ff:36:44:5e:cb:70:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=1c5bea224bc2a90629f7c29fa9f230eb250c4e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:45:e3:84:23:a8:21:a7:9f:39:68:94:65:
80:b6:9f:7a:37:dc:7d:30:5e:7c:6b:37:ba:b0:98:
24:4a:5b:53:5a:4e:41:4b:76:5e:51:10:41:5a:ee:
5a:76:4c:2c:8a:85:bc:41:0f:2b:5b:87:85:92:b0:
77:d3:e6:ba:0e:e0:a1:5f:0d:59:ff:ce:3d:59:4d:
b3:39:c4:05:43:44:40:a8:f1:f5:ca:12:fd:c8:61:
a3:44:f7:49:25:9c:65:18:5f:d1:1e:80:d3:37:ee:
83:10:70:bf:4a:a6:e8:fe:0a:c9:5f:49:de:a6:a0:
ba:ab:89:8d:29:7e:48:b9:5f:f7:0d:84:d7:13:e9:
10:1b:01:1e:c8:70:64:d1:d7:33:cf:bd:57:ae:00:
de:75:9c:e5:2f:31:81:78:e5:9d:43:1f:8c:a6:fe:
48:d8:d7:5a:04:cc:bf:07:ed:e3:61:e1:67:94:00:
cc:98:df:4c:cc:db:4a:15:48:45:9e:3e:e0:eb:6d:
06:87:f4:cc:09:01:7b:4e:da:a8:56:64:e9:33:4e:
f1:92:9f:60:63:41:5b:d5:8d:81:88:54:8b:56:98:
10:c9:6d:fa:65:a0:5e:5b:91:b2:71:62:57:9d:8a:
e0:0d:f7:77:b8:82:c5:22:ff:ab:53:7d:96:32:53:
ab:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5B:EA:22:4B:C2:A9:06:29:F7:C2:9F:A9:F2:30:EB:25:0C:4E:5C
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c4:45:13:54:e5:da:be:ad:61:10:4e:c8:d6:9e:25:a7:5a:
2d:5a:be:dd:dc:19:72:27:ce:ea:64:79:bc:81:a1:cc:2d:c5:
18:d2:f7:56:f9:be:bd:e4:6a:47:ad:52:38:4f:25:1a:60:b5:
5c:a1:ca:6f:d0:8d:41:10:52:18:06:a9:4b:91:87:c5:80:4b:
20:ed:22:9d:2f:ce:e1:ec:5a:c4:66:83:87:12:ca:62:ea:23:
53:54:42:57:6a:52:bd:4c:40:c8:8e:dc:25:52:4d:61:42:ab:
ce:00:ba:77:14:8b:be:af:1a:51:2a:be:e8:bd:77:fb:f9:6d:
cb:83:d5:28:b9:7c:99:cd:00:94:15:2d:43:0c:08:1a:bf:bb:
2a:2b:5f:d7:7b:d1:a6:c6:89:6b:54:62:b6:a4:b9:01:bd:eb:
c2:9d:42:db:be:72:f4:90:e7:85:b7:09:d9:66:f6:00:b6:51:
f3:86:3e:40:e7:e6:83:8f:98:3d:a7:b7:4e:2d:8d:0b:62:76:
3e:f3:07:f6:7e:da:1f:8f:39:2d:fa:ff:d0:f4:5a:8c:e3:df:
ce:01:44:66:d2:03:13:75:81:97:a1:a2:63:de:58:e1:f7:37:
ef:98:f8:06:04:92:e4:e6:d0:7d:44:e3:25:5b:40:7b:f0:e1:
5c:23:b5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:03 2025 by rpki-client