Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
File: POsgUJhzLLkIgjBF79XXQCUMayc.mft (raw, json)
Hash identifier: j3zvJvbfSVpfOHhrbv45VG/eXoK0ItF3aIyH69WtbyI=
Subject key identifier: DD:CC:A9:29:34:62:BC:33:0F:E8:74:66:D6:7E:92:A8:F8:FB:3A:47
Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
Certificate issuer: /CN=3ceb205098732cb908823045efd5d740250c6b27
Certificate serial: 0194BC72E2DF935C5936BF575B1EAF93D5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: POsgUJhzLLkIgjBF79XXQCUMayc.crl (hash: reksG9DwZLwUzvZRDzvgOKknvpjmVMigV+uD8HfTPQw=)
2: glhaGjYvz9mGirczYGxMS81rRfI.roa (hash: cPBvD492Ea2g7PNrZgsOnSXH4CPshMieJYjaq9P+dD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e2:df:93:5c:59:36:bf:57:5b:1e:af:93:d5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=ddcca9293462bc330fe87466d67e92a8f8fb3a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:04:da:4b:47:a7:4c:75:a5:5a:2f:e3:da:01:
e2:58:47:31:f5:54:ed:f2:45:83:75:d7:21:bc:93:
27:39:d3:ce:93:0e:21:43:dc:b3:fa:da:89:e7:f1:
03:a6:a6:03:ed:b5:f9:52:0a:ac:9e:d1:38:9b:7a:
54:3b:d9:ed:1a:fd:20:cf:40:92:82:41:dd:2f:2d:
01:9c:ca:13:4f:18:d2:44:34:fe:e0:28:b7:3d:4a:
b6:6e:0b:89:0c:74:7f:46:fe:2e:a4:b0:96:52:b9:
f1:51:10:12:22:2f:1a:34:be:92:9d:35:9a:2e:74:
92:c0:7d:71:6a:f6:b6:3e:3c:76:b6:0f:c9:e5:d4:
fc:18:a3:a4:49:3a:18:33:1d:5a:6e:7b:4b:22:2c:
83:98:81:56:e0:01:86:86:37:3d:df:2b:9e:3d:30:
cb:71:9d:5a:35:bf:95:47:b2:8b:28:49:09:86:2f:
02:57:94:8b:28:16:8d:75:98:11:2a:e8:9d:9c:88:
29:de:bc:5d:55:12:08:bc:76:66:b7:98:74:8f:83:
42:e9:db:5c:91:73:0a:ec:54:c2:be:d2:7f:0b:af:
81:8d:26:57:67:d5:c0:05:36:7e:37:29:8b:31:4c:
ac:32:aa:55:22:0a:4a:a6:f2:e9:84:eb:5d:31:de:
40:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CC:A9:29:34:62:BC:33:0F:E8:74:66:D6:7E:92:A8:F8:FB:3A:47
X509v3 Authority Key Identifier:
keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ec:05:6e:0b:c6:ac:32:4f:1d:33:a8:6a:cb:a8:22:65:ed:
ae:0c:ee:ce:c3:43:55:6f:a2:3e:8c:c8:61:14:8d:99:8e:58:
d1:55:14:56:15:f8:5f:9f:bc:86:c4:18:4c:a9:24:3b:f3:ea:
23:19:f1:32:90:d3:00:1c:ab:b5:1c:2f:5e:26:a2:45:24:70:
31:19:d7:aa:e6:95:a4:28:43:7c:6a:fc:7a:f3:54:3a:b5:0f:
36:3a:37:e6:07:cc:68:6e:c4:94:73:f1:dd:dd:87:61:2b:63:
91:87:60:d9:1f:03:5d:0a:7f:5b:b4:d3:0c:c1:32:eb:d3:7c:
4e:de:07:ab:fc:42:86:1e:1c:6d:9d:5e:75:ce:ad:25:65:db:
2a:81:49:21:00:ee:ac:ac:72:8f:ac:83:61:c7:4e:2a:3d:30:
da:40:96:b1:45:88:eb:a8:63:db:27:10:a5:1e:de:ac:b9:89:
6c:2f:17:97:a6:97:00:a4:61:39:90:b0:c8:4f:c2:1d:45:67:
6f:b6:3c:aa:cc:3f:6d:a9:45:93:4e:4c:a2:c1:d7:49:07:3a:
fc:cd:83:37:c8:0b:44:b7:72:16:0e:0f:09:5d:a1:4d:86:6a:
81:d3:ae:07:15:cf:71:ca:34:15:bc:e8:bb:f1:49:75:b0:3f:
ce:8e:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:16 2025 by rpki-client