Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
File: ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft (raw, json)
Hash identifier: eqp5Dzzq3/oRmql8U9PuRa53lUtJRx6crdJfwK/ARGw=
Subject key identifier: B7:93:A6:9A:B9:83:5D:06:7E:E3:A2:77:82:DE:F9:EB:E8:6D:D1:5F
Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
Certificate issuer: /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Certificate serial: 0194BC3BF779574CC7A921099D064E529DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: Zt9BdmMIpkw0MIyHiOhuungStoE.roa (hash: L7P2p04wT0zw3+4RreSfPUQp7foJhVeuqfmP5tYHfcQ=)
2: ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl (hash: SM4tN8QOQXCMi3KyCN6EHXpfxyF5/OGhBTN8PoIhfcM=)
3: qExzvdMSupP0_V9_-wIZlVv8-g0.roa (hash: vvHsdyvRdZbUNjKSsGyZZ2m21Llpz3lOJPwUT8sNEOA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f7:79:57:4c:c7:a9:21:09:9d:06:4e:52:9d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=b793a69ab9835d067ee3a27782def9ebe86dd15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6d:62:4c:3f:25:d3:ec:f9:dc:05:f7:46:c1:
c1:61:57:b0:24:30:ed:a3:28:96:61:61:c1:9f:cd:
54:33:f0:55:3e:0f:39:e3:04:9f:13:f6:ca:ae:ee:
8b:dc:5d:34:3f:80:41:1f:83:a9:0b:39:ef:ba:25:
13:60:9d:32:ba:5d:04:b0:95:7b:20:71:51:0f:64:
3b:c9:c8:c6:98:6f:2c:19:20:11:57:14:b1:1d:19:
9b:03:c0:21:02:12:12:ce:64:1a:a9:00:fb:a4:74:
60:01:6e:1a:3e:a1:54:36:01:f1:06:97:1e:ba:32:
cf:8b:6e:29:9b:cd:f1:be:27:c2:ec:00:87:9c:17:
af:f5:7e:5e:95:7a:12:cd:09:c4:f3:2a:13:be:70:
11:6e:a9:f7:01:ad:33:d4:53:c0:86:03:d2:ad:31:
18:31:3c:e7:84:18:3d:10:cd:5a:4c:71:92:ce:c3:
66:31:4d:cf:1e:82:cd:9e:b7:f5:c2:b5:66:57:e9:
62:7f:f1:f5:c2:f1:5c:75:64:df:b9:0c:c2:70:d7:
e6:c3:9e:81:da:16:8a:22:c9:07:32:87:a4:2f:fb:
10:46:c4:b5:66:fe:44:3e:88:c5:17:7f:57:dd:37:
76:45:f8:ce:48:e9:bd:8d:0e:21:37:83:22:2a:6e:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:93:A6:9A:B9:83:5D:06:7E:E3:A2:77:82:DE:F9:EB:E8:6D:D1:5F
X509v3 Authority Key Identifier:
keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d5:f1:14:ca:55:19:6f:ff:ab:1a:87:22:a8:b5:8a:f0:0f:
1c:8c:19:f7:c6:69:c8:60:dc:12:93:78:13:e7:22:d9:2c:eb:
f6:c7:85:fa:19:f5:b5:0f:26:dc:12:3d:76:dd:62:ff:38:6b:
f1:6e:ec:92:16:69:07:4c:b6:35:8f:4a:f4:c2:5f:ee:2e:a0:
17:af:d2:c4:63:ea:3b:32:38:ae:be:09:e0:10:20:37:11:64:
f8:ff:13:51:cf:9f:03:8a:5d:80:e7:d2:9c:00:67:13:f8:a5:
95:96:b9:38:33:a2:c7:0d:7e:05:2c:03:38:bb:f5:74:93:c5:
32:d0:25:b6:8d:21:36:62:6a:86:00:be:4c:3c:44:85:66:59:
02:ca:77:af:58:fc:b9:fa:70:1a:6f:19:71:e7:93:61:b6:99:
ce:d4:a5:32:fb:38:24:49:c1:1e:e0:6c:b6:e1:5b:13:f4:1f:
7b:d9:ff:8c:a3:40:35:5e:36:e2:4f:6d:13:c8:33:5b:4b:3f:
26:2a:58:29:2d:0d:8b:ac:01:02:24:f3:95:00:55:f0:e4:1d:
b9:db:64:ff:46:00:29:65:8b:eb:d4:67:b3:36:9c:f8:6d:b6:
7e:6f:91:76:90:fb:1f:13:b8:5b:d0:fe:0e:c7:73:2e:9d:53:
33:66:83:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:25 2025 by rpki-client