Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
File: p03gktwuTXKqfmqWDSGtTnl1izw.mft (raw, json)
Hash identifier: E85SI5BHfS1Bfg+m/XFTmm+365x9cGGHa4ooHYoFYCc=
Subject key identifier: E3:71:07:B5:0E:22:CB:D9:76:69:DE:45:33:88:D7:19:13:51:F4:DB
Authority key identifier: A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C
Certificate issuer: /CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
Certificate serial: 0194BC05044C888ED582602B716AFFC38A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: h56nNbes2ivx0npJDLsxR_z62Zo.roa (hash: wxs3EMyvsXJWyJHCo0ZYi2lqFjVWRDaFII6/r1MtHp4=)
2: p03gktwuTXKqfmqWDSGtTnl1izw.crl (hash: DIkSbx3uBos66yDZ0QelL6Dlf4ZsDL6XtTfphS2eEbo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:04:4c:88:8e:d5:82:60:2b:71:6a:ff:c3:8a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=e37107b50e22cbd97669de453388d7191351f4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:e0:20:dc:6b:c5:37:bd:89:5e:c2:8f:d4:
f3:f2:25:bd:a6:4a:ef:f8:e2:2e:7f:45:23:39:cb:
3c:13:12:b0:d2:14:84:14:13:26:0e:3c:48:92:a5:
39:2c:48:6c:58:fe:f8:cd:f5:43:70:4f:07:32:9c:
4c:9f:5a:d3:c5:08:a5:ef:fb:75:9b:34:65:dd:e5:
f9:8c:ca:80:c8:9c:19:c6:64:a1:46:c5:5d:b9:14:
89:00:ec:ab:1a:2f:19:f3:04:c5:00:88:3f:9d:d8:
16:6e:f3:72:42:ba:cf:11:41:23:9c:eb:7f:55:29:
e4:2d:a3:52:77:9d:82:a8:77:b1:77:46:81:16:ec:
07:c5:ca:17:4a:3d:b6:e1:99:df:13:d7:3e:85:a6:
a3:26:eb:1a:87:9b:ff:1b:3a:04:ff:e9:9b:8a:f7:
4f:2a:97:a8:25:cf:56:a1:64:86:06:8c:19:95:22:
fe:e4:1c:5d:67:7f:bc:0c:90:8d:45:8e:8e:be:2d:
e3:bf:45:3a:59:e3:a2:11:de:79:26:dd:23:9b:a6:
71:d4:fa:39:7c:19:eb:fc:30:33:70:66:47:cb:16:
19:d0:2f:1f:04:fa:64:7e:d5:37:cc:65:dd:9a:66:
dc:d0:25:f1:83:13:ab:c6:a6:7f:4a:9f:1a:a7:f5:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:71:07:B5:0E:22:CB:D9:76:69:DE:45:33:88:D7:19:13:51:F4:DB
X509v3 Authority Key Identifier:
keyid:A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0c:38:c2:d1:16:3b:ae:ea:f5:49:db:52:f4:c3:b4:a4:98:
b7:43:a0:b0:c1:e7:06:34:3a:eb:db:1f:1e:74:93:55:7c:f2:
23:ca:ac:9a:19:64:3a:8e:0b:9e:e3:86:c3:21:af:c0:a1:31:
af:ff:fe:3f:d1:a3:4c:ff:b5:2e:83:23:de:15:1a:2c:94:a2:
99:7d:7b:85:b3:d6:b9:af:f2:bb:05:e4:8d:6d:e8:4f:51:93:
de:df:68:36:aa:48:58:9c:e0:70:38:56:41:2f:79:65:2d:ed:
42:23:be:4d:7e:54:2a:fd:5f:e5:a0:14:44:54:0f:11:49:1f:
e1:5e:3a:4a:ff:7d:71:b7:49:4d:fc:6a:1b:05:7b:5f:bc:86:
21:3c:34:88:65:5b:66:fc:02:b5:6a:fb:87:20:74:cd:f9:c3:
1f:9e:5c:dc:7a:87:4b:a6:ca:8d:e0:0f:04:a9:b3:0f:1f:32:
f3:e0:e3:36:dc:84:29:02:52:f3:b4:e7:66:d0:37:09:d5:66:
da:02:51:d3:d1:3d:16:17:80:b2:13:8d:ec:d8:4a:d2:b0:d0:
1f:d2:9d:d1:62:37:4a:b9:ce:41:13:c4:54:19:49:4e:6d:78:
1f:b3:c8:a3:ea:98:74:b6:fa:a0:d2:fc:75:21:98:9e:ac:d1:
3c:73:09:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:53 2025 by rpki-client