Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier: lefYHzpuqWp6KKDCFryRJjQ8rBZ/U1Aybxdj00Ro4Fs=
Subject key identifier: 1F:18:D0:BC:1A:1C:E2:09:BF:17:B8:85:F6:57:FB:9A:87:CA:94:A8
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial: 0194BD175BB946FE7B22444D0FE1747C5B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number: F6
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: 4ztGIasVEwEbakF0ec-7K0e5IU4.roa (hash: IY2hXYNDBxgugsXRkJWFvDBibE33L3+eqXYnL7k07xY=)
2: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: 8kqZfDSrV+DwtwiqydomaEOIf2mr3Spz/9VxqUIDHLA=)
3: yQmkLUR6MH6h1RvFVHhe4DDu7QY.roa (hash: 7D7oyqrxVnp9P9+upqmUz5U0xALaurO7hGz+98jrtEE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5b:b9:46:fe:7b:22:44:4d:0f:e1:74:7c:5b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=1f18d0bc1a1ce209bf17b885f657fb9a87ca94a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:86:ba:ec:4b:7c:75:53:8a:75:a6:29:02:
f7:a6:40:f5:6e:f4:76:cf:46:c9:fa:5c:1d:88:bc:
db:74:79:86:3e:20:08:fd:5f:52:eb:1b:7f:9a:b9:
d4:c8:a7:1b:fa:f5:fd:56:4d:ae:f1:c3:49:55:37:
09:77:4c:7b:a8:97:4f:b4:b8:a7:dd:63:d3:e6:ce:
45:3a:a8:02:b7:64:72:13:48:69:57:d2:e4:75:52:
42:75:bf:01:0b:7d:90:e7:16:23:a9:6c:f9:ee:dd:
cf:67:2a:d8:14:6e:bb:3d:26:c8:90:5c:1a:0b:aa:
a9:f0:71:6f:25:55:5b:90:8d:16:14:ea:f9:58:e7:
fa:2e:04:7d:8e:b7:f4:bb:3d:50:cd:58:1e:be:29:
6c:c4:97:65:9d:dc:b9:0a:e4:5a:3d:66:f6:e7:99:
b7:c3:5c:de:5f:56:7e:2a:52:09:80:e7:0f:48:a8:
99:e8:3b:94:d7:7c:00:46:f4:41:36:f0:9b:ba:af:
35:bc:2e:25:d8:d7:e0:a4:8e:cb:84:6c:5c:b3:58:
8a:31:37:5e:a2:88:8c:c4:b0:b5:7f:e7:b5:df:0d:
8e:0f:a4:1a:43:9f:cb:1a:c3:02:8d:76:08:8f:d2:
bb:e2:0c:60:d6:23:9f:d1:50:f0:64:6c:e9:01:27:
3e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:18:D0:BC:1A:1C:E2:09:BF:17:B8:85:F6:57:FB:9A:87:CA:94:A8
X509v3 Authority Key Identifier:
keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:61:db:4a:5a:b9:6e:73:8d:b4:2e:32:37:45:ab:98:4c:a3:
b8:76:54:49:a1:25:de:87:49:b6:7a:5b:72:62:11:ac:4e:d4:
9e:6a:66:2c:67:06:70:ee:5f:18:fa:f5:99:0f:a5:e2:fb:29:
4f:80:01:94:53:03:9f:65:b6:10:3e:1a:89:84:24:43:0e:f5:
58:8e:86:32:9f:c6:48:7d:dd:37:51:20:01:0b:29:86:c6:ed:
12:38:6f:4c:49:0f:ee:e9:2d:6b:a4:03:00:dd:fe:bd:c9:92:
f3:66:3f:49:e3:99:4d:93:c5:5e:31:0e:25:29:8d:26:6a:6b:
52:70:d0:c7:0b:77:28:87:57:85:fe:97:bb:1b:e5:57:0b:67:
fa:5c:16:72:5d:9c:c5:f5:4f:6b:91:da:9a:8f:af:ee:ed:f1:
9e:a1:6a:6a:f1:68:db:96:19:34:c9:9b:c4:84:de:8a:a4:d2:
c5:10:fe:33:8e:f0:8f:15:09:2e:db:61:2d:93:2d:08:74:76:
0b:46:64:da:56:9c:a0:0d:d3:1c:69:ac:e5:9b:ac:9d:8f:cf:
53:34:b9:d7:1f:de:63:15:fe:d3:59:9c:63:3f:b2:6a:86:e7:
cc:17:5e:57:0e:24:8d:a0:f2:cd:5d:ee:d7:52:5f:9f:5d:ba:
e0:8e:67:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:49 2025 by rpki-client