Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
File: PheDehDbHT3XPiDfC0eeQNsiNv4.mft (raw, json)
Hash identifier: WfFYO+6ZGADqOsMb5hExZEAU7D/Tm6KdIeFmKIJcBDY=
Subject key identifier: 0A:3E:53:74:06:2F:4B:48:70:A8:87:69:98:6C:1B:78:BA:0E:24:02
Authority key identifier: 3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
Certificate issuer: /CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Certificate serial: 0194BCA9CA316CE497EC4D20F1EB03032CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
Manifest number: 0C3E
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: IjLvJG0-M1KnBbBDVenkXKquV78.roa (hash: n27HZGX2v3aJZrtVUVhPUuskMFjClOmq43C+EIraFso=)
2: PheDehDbHT3XPiDfC0eeQNsiNv4.crl (hash: LhUx1QOyzUeg5Yd1SPmqajH5hkGPskVUKMWCMoYK32c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ca:31:6c:e4:97:ec:4d:20:f1:eb:03:03:2c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=0a3e5374062f4b4870a88769986c1b78ba0e2402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:d0:7a:6d:2c:92:eb:ec:f0:da:5a:7c:f4:
4a:c8:00:05:95:aa:6a:bf:78:dd:00:20:70:4f:c9:
31:3c:d6:b2:ea:aa:03:b7:9b:cb:19:85:dd:1b:27:
1c:8b:bb:cb:eb:3f:19:b0:cb:8d:94:78:d4:6a:b2:
ec:7a:11:90:97:fe:9f:09:e8:4c:db:62:9c:58:b2:
28:55:59:05:f7:d3:98:06:31:91:34:0a:9e:9e:1b:
a9:9b:d1:43:97:b6:db:f3:81:38:52:fb:56:81:dd:
15:d9:88:a1:61:1b:b7:62:d1:2c:f4:53:e3:77:9c:
8a:f1:d4:82:2c:6f:70:5c:86:76:4f:f5:6a:3b:1b:
75:a1:a8:55:85:7a:82:16:42:41:f4:cc:22:0b:41:
d1:7b:0c:48:bf:15:d8:db:9b:81:9c:23:2c:c6:3a:
3a:f3:6c:aa:c9:85:f2:a1:dd:d8:d8:e2:fc:9b:1f:
7e:21:cd:3c:a2:e0:94:3b:44:73:e9:7f:86:7e:cf:
93:c4:e2:c2:1f:f7:7e:5a:55:d4:ea:ef:59:56:bc:
a4:71:49:89:e7:23:51:3c:09:55:26:f6:65:88:9d:
e8:ec:fa:e8:d9:4a:23:a2:ad:72:b3:89:42:89:9e:
6c:bb:06:d4:cf:55:e9:5b:d5:3a:2e:13:95:09:64:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3E:53:74:06:2F:4B:48:70:A8:87:69:98:6C:1B:78:BA:0E:24:02
X509v3 Authority Key Identifier:
keyid:3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:70:a6:45:cc:10:3f:a6:12:77:2a:f0:8a:af:e4:4f:be:2b:
95:99:9c:6d:b8:b7:84:73:ae:2f:5f:5a:c9:70:c2:64:3a:8e:
33:e7:fa:86:09:80:0c:46:bc:1c:34:89:b6:51:c9:61:b3:85:
29:64:35:42:e1:14:4c:fb:25:6b:ba:13:b2:40:cc:10:08:72:
e4:50:5a:53:f8:68:d1:e4:91:01:91:fe:ad:03:16:c5:01:23:
29:84:a6:8a:2a:2b:59:69:aa:53:12:93:d1:4f:55:76:d6:44:
ec:2c:2e:0a:c9:da:aa:06:30:16:18:40:2a:97:d7:61:ca:11:
8b:dd:7e:ad:f7:b6:3f:83:6e:e7:1f:a8:86:2c:e9:5c:86:cb:
81:1b:cb:c3:55:04:05:49:22:11:87:ed:25:d8:4a:de:7b:dc:
f1:c9:d3:0a:7d:35:26:8a:d1:b5:dc:24:0b:61:6c:59:98:c7:
02:fc:bf:a6:b2:10:97:f3:f1:cd:7a:6e:78:81:fb:8d:74:82:
8e:1e:d0:b0:ed:16:52:8d:8d:9c:c7:47:6e:02:87:12:fb:1f:
f1:d3:ed:5e:68:f2:28:33:52:4b:04:07:92:05:92:c6:c3:6f:
13:7a:90:a0:69:00:fc:c9:d4:e5:5f:0e:b7:c8:a0:f2:3a:c7:
a5:8d:f7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:11 2025 by rpki-client