Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json)
Hash identifier: YGvf9xAeJ24HiSNn9XgkOVpZdI8fQAk+8BCp4Gidn00=
Subject key identifier: E9:7A:2D:30:EF:79:EE:DF:75:D3:A2:F1:1F:32:52:00:78:31:82:38
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 0194BC727E5BCDDB326FEEBDED843333E599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: 5e1NxuIhpqcGoJaPew5Kl5__8Lc.roa (hash: SNl+Y4M8n9I3K17PdDkj5othPOFaJvzjGzvPP4WmJSg=)
2: 7ybz4qgk4RPqp8xdPC6X_E4gtbM.roa (hash: ogGugsf7sS6PtDmol4WlYpBYEAXHnn37bVsSaSAg3P8=)
3: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: WtF2zp+LoMrd1zq9TYVb7KKcjq0snh0Q8JGdBZtMceY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7e:5b:cd:db:32:6f:ee:bd:ed:84:33:33:e5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=e97a2d30ef79eedf75d3a2f11f32520078318238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:69:bc:d5:57:e4:b0:8c:8e:25:5e:d4:7b:
10:4d:fa:57:8f:d9:8a:97:b9:81:16:5e:ed:3f:73:
b0:40:78:96:1a:4f:72:e9:c7:16:b2:48:1c:83:3f:
dc:c9:e6:7f:83:a8:33:5b:57:63:8b:65:be:7b:12:
5c:ad:bb:96:eb:43:c7:75:44:33:d9:12:09:58:ea:
bb:60:66:4d:0a:50:2a:44:f2:3d:d6:2f:f0:2e:8c:
56:72:71:0f:72:42:57:ab:fc:e0:03:28:14:a4:b8:
63:a6:1c:4d:8d:c5:58:b4:9e:03:91:e7:c0:6b:bf:
8f:44:17:1c:66:14:5a:eb:4a:22:25:4c:b7:69:7a:
b9:92:99:21:dc:52:65:d4:f3:6a:5c:b9:36:bf:49:
ce:56:eb:9e:c1:1d:49:0b:09:ec:e5:76:da:33:ca:
c3:e8:64:df:9d:14:bc:0e:d2:8b:93:81:99:de:3b:
9b:34:42:ca:a3:7a:92:f3:a5:e9:8e:12:d3:24:82:
62:27:98:5d:47:38:64:ca:32:50:60:4e:a6:4a:f4:
de:d1:2c:7a:e0:75:60:7a:39:8e:c8:22:56:9e:45:
3d:12:73:a8:b4:9b:6f:74:43:1c:c0:3f:c2:f7:64:
81:49:41:b0:1f:1b:81:30:87:16:cc:07:08:66:d1:
de:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7A:2D:30:EF:79:EE:DF:75:D3:A2:F1:1F:32:52:00:78:31:82:38
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4e:16:4e:13:86:ff:87:75:77:06:4c:b3:f6:0d:89:0e:90:
46:85:85:51:07:9f:b6:65:43:02:26:39:18:49:8e:9e:7b:fd:
9a:d4:05:bd:67:54:58:16:d9:3a:e2:3f:5e:ea:3e:87:b3:10:
e1:91:c6:ad:29:6d:fd:cd:19:7e:ec:f9:78:39:95:90:7d:6c:
47:85:60:31:59:ed:a7:7a:aa:43:02:c9:3e:02:fb:7e:87:8b:
2b:0c:ea:bc:e1:8b:83:50:8b:de:5e:c7:61:ac:ea:51:da:32:
53:93:85:9f:e9:78:20:c8:ff:90:cd:44:8a:88:03:4c:b9:8e:
eb:e5:74:d4:a4:8b:25:ba:41:de:8f:04:ca:e0:4a:c3:ee:87:
1f:5e:6f:3d:67:0f:27:7e:84:44:09:62:92:66:b8:15:00:10:
93:32:18:26:42:9d:6b:d3:30:9f:8b:8f:ef:c9:22:76:08:e6:
cb:25:0b:28:4e:6f:2d:f1:c3:91:f2:e1:c9:c0:26:9e:7a:fd:
fb:46:e9:5d:bc:c7:a3:e7:7b:18:18:0f:ec:eb:34:7f:44:ab:
b2:4e:cf:c6:77:f1:a0:6c:d0:24:8c:0b:97:a4:b2:28:68:d6:
ec:9b:9d:43:95:75:1e:5e:8f:52:5b:41:ad:00:a5:6e:0b:af:
b8:d2:d1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:17:42 2025 by rpki-client