Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
File: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft (raw, json)
Hash identifier: B5D0JDiforlf+LXZJ/leA5fzHIxhxiSmrjEjLPaDsRQ=
Subject key identifier: 35:E2:8C:E7:61:FB:0F:C8:3A:2E:31:28:74:E5:11:B3:C4:2F:59:37
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 0194BBCE541F617751B8551334891B5B7172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: IsTCtVmTNyn-RD8cnFqGYXSoe0E.roa (hash: L2WChiXDdgP/OiZ7K6XF82266pxnvmteFE2BApkpXrw=)
2: OrkpU5LXbswPLcMQ-jdTVeQggeo.roa (hash: utFHWwrMfYX1wYeHbjq+sWQDA/Qeqiengif6dz1gjKU=)
3: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl (hash: XobyIA2z4wmx/OrDcu+vDw9y7pVfXA/5A7V1aFekO30=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:54:1f:61:77:51:b8:55:13:34:89:1b:5b:71:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=35e28ce761fb0fc83a2e312874e511b3c42f5937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:32:b2:ea:65:02:b7:7b:52:c7:dd:57:a6:a0:
3a:d1:ed:e3:1c:47:40:0a:7d:13:35:d2:64:f2:b0:
e6:70:e5:38:79:00:13:11:5d:be:ce:12:40:ad:fe:
b2:3f:0e:89:f6:1f:91:cb:a1:97:08:18:85:3b:1e:
2f:b5:66:da:37:40:ff:41:e0:c8:92:2d:b8:ef:5b:
f3:4d:9a:57:27:28:27:00:7f:f5:31:5f:2d:15:01:
0e:46:26:a6:16:ec:fc:f4:c4:19:2b:f4:9a:f6:3a:
37:41:7d:f9:8f:13:17:46:57:39:02:19:e3:c0:27:
f9:01:99:0f:96:2d:bc:de:0e:77:8e:c2:c6:d6:77:
c3:ce:1e:7d:12:c5:c5:27:53:c4:25:d6:15:74:22:
76:6b:d5:63:ed:32:11:09:b7:cc:4d:92:72:ce:5a:
20:58:54:b9:c8:7e:9c:74:56:aa:38:f8:89:13:b7:
de:cf:0f:d8:45:64:4b:79:40:23:30:89:61:21:f0:
50:9a:df:22:87:a3:4a:eb:ba:d9:1d:e0:d1:1a:16:
af:d5:8b:a8:5f:b7:1e:f8:a0:94:66:80:e6:48:62:
cc:10:9b:2a:23:34:f3:8d:97:2b:e5:53:45:7f:03:
30:f8:79:63:44:55:dd:a4:65:fb:ad:85:99:bc:bf:
2b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E2:8C:E7:61:FB:0F:C8:3A:2E:31:28:74:E5:11:B3:C4:2F:59:37
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d7:30:67:1f:e7:15:fd:70:ae:02:11:72:66:d7:98:d0:6b:
f8:75:b6:69:8d:6a:12:17:8e:77:f4:d0:78:13:01:c5:3e:4c:
a9:b4:fb:dc:66:a9:32:20:d0:82:c6:a1:fc:bf:d1:7a:37:6e:
e1:6c:81:b7:1d:2f:40:56:b6:2d:e0:26:1f:6a:e2:2f:10:a1:
19:3e:d7:c3:7a:94:37:17:3f:53:6c:51:00:c8:63:fe:3f:02:
43:2c:f8:15:ba:bb:64:6f:d4:70:13:49:52:00:43:2b:39:5a:
98:a4:40:8e:9a:68:df:65:da:a1:67:41:ed:2e:0f:db:a2:2d:
a4:db:3b:18:f6:83:46:33:7e:54:a8:0d:e3:d3:00:7c:e1:40:
9d:53:38:4d:bd:7b:ab:0d:b1:25:fd:71:a1:85:f5:98:86:9e:
20:bb:8f:c4:ca:0f:0d:7a:30:44:92:00:71:a9:38:d5:e3:57:
d4:99:40:32:93:eb:93:19:17:91:b4:35:5b:72:ba:85:c7:69:
12:1b:17:98:39:99:c0:1c:37:39:91:85:7d:37:e5:f0:f8:15:
22:06:f1:9c:87:a6:7e:d8:7f:a0:e0:99:ec:64:06:88:e6:e6:
94:e4:24:05:a8:4f:5b:00:39:07:fe:a8:f7:89:6c:b5:6f:b5:
62:b0:12:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:31 2025 by rpki-client