Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
File: ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json)
Hash identifier: jP4oVXzoLg9CxRnwzjDzZrT/eAS8furC0XWrm+jyork=
Subject key identifier: F1:B6:E4:DD:83:F1:9D:69:BB:EB:3D:3E:96:26:D7:D9:A6:CB:11:3B
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial: 0194BC72D83AB0438391621A8ADFBC442F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: 3qKBlKxyvMC/FbeE/31quupHxLTnCtjOZxsjTdG3Bw0=)
2: z-LF5XIt0VeWFhY7GK5O7xZnBBE.roa (hash: 1pZ4XtZFpZvLcxR/iScQRob6NYsKteymu5FeNxuRtO0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d8:3a:b0:43:83:91:62:1a:8a:df:bc:44:2f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=f1b6e4dd83f19d69bbeb3d3e9626d7d9a6cb113b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:05:49:96:bf:c8:f5:67:b3:eb:7d:36:91:7a:
a3:67:b5:65:a2:ed:cd:97:3f:c6:f6:fe:59:46:68:
41:35:92:37:77:68:ff:0f:89:e9:9e:25:7f:d0:d2:
e4:af:80:dd:4d:ec:98:f8:fa:dd:d8:c2:3e:c5:2e:
fb:4f:4e:e5:48:b8:ec:ae:a0:ff:b8:29:27:89:85:
15:32:66:c5:2c:d2:72:28:f1:06:77:f9:0c:1b:cf:
8b:fa:6f:72:62:db:22:42:33:fc:ab:c9:c2:be:99:
64:47:05:86:80:44:0c:c6:33:71:1d:ff:bb:fc:1c:
1b:5a:31:26:a0:46:85:8e:8a:fd:b3:8f:62:0c:e8:
a1:66:72:b3:79:fc:f3:c5:c3:82:85:a6:58:80:96:
9d:73:a8:a3:70:0a:24:3a:0d:60:7e:36:df:38:57:
0b:f9:38:9b:3f:a3:fb:1a:ff:c8:85:2a:0c:5c:b8:
0f:e1:da:e3:74:e7:7b:6e:ba:e2:cd:bf:9e:77:b4:
67:ad:58:54:a6:63:65:dc:a4:39:19:6c:3c:2d:7e:
26:06:33:46:61:e6:90:be:e2:2d:51:e0:87:ac:3e:
c1:4a:56:c9:de:c8:95:8e:27:15:73:29:4c:8b:88:
63:2d:48:f0:df:7f:00:6c:9a:ed:13:42:ce:39:8e:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B6:E4:DD:83:F1:9D:69:BB:EB:3D:3E:96:26:D7:D9:A6:CB:11:3B
X509v3 Authority Key Identifier:
keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:4c:55:64:59:17:da:ff:d0:08:df:64:c0:36:f0:55:cc:d3:
f2:61:bf:1a:0f:a0:50:ad:c3:d3:28:27:38:8b:76:ba:25:eb:
04:3c:2a:9e:db:51:df:c7:37:80:d6:28:09:5e:2f:c7:23:76:
5d:6b:2e:b0:18:e3:d8:0b:ef:42:de:10:d2:f9:e3:bc:23:f5:
18:fc:99:fe:be:c0:4e:de:17:ea:93:15:3c:20:99:84:86:99:
b2:b1:0e:3c:83:a6:81:a7:9a:1b:b5:90:79:b7:21:7b:95:a6:
7e:bc:2b:a1:1d:8c:db:62:6b:c4:02:57:c7:58:b9:b7:57:8a:
85:11:46:78:35:29:84:3d:d2:40:6e:66:52:bd:06:d6:38:db:
2b:bc:8d:02:5f:ce:de:d5:ec:3b:c3:30:24:08:a0:c2:a2:2f:
58:86:a9:f3:34:c0:01:10:b6:23:c0:11:b7:d3:75:03:a4:6f:
9a:f1:c0:00:35:95:99:5f:ba:7f:ef:10:6f:d1:53:29:fc:1c:
45:39:87:b2:10:92:97:61:bb:bb:a2:c7:18:20:75:2c:6d:92:
38:72:04:d7:15:f2:68:ab:41:1b:a6:d6:21:97:94:50:66:95:
43:0f:c3:74:f7:3b:13:c0:46:02:44:c4:1f:d1:32:8c:47:86:
3d:ec:7f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:02:42 2025 by rpki-client