Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft
File: pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft (raw, json)
Hash identifier: FRM3voZkKM2LseffIpjex67I+ifqvHA1XC9PIGuGSdM=
Subject key identifier: 2F:54:8C:03:D9:15:58:97:89:8F:49:53:62:9A:FF:A9:03:56:B4:F0
Authority key identifier: A5:C6:5D:3F:8C:4E:EC:B4:61:14:3B:DA:67:B1:A8:5C:1D:7A:B5:7A
Certificate issuer: /CN=a5c65d3f8c4eecb461143bda67b1a85c1d7ab57a
Certificate serial: 0194BCA9A667C2C42D1D034A1A0B45EFBE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcZdP4xO7LRhFDvaZ7GoXB16tXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft
Manifest number: 0419
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: PE72L1MZ6arIopzUHKdO8yRmL1A.roa (hash: GUSnHYNUfV3OxDkdEg/4B//ADgj/Stnyrivs7UGYYYk=)
2: pcZdP4xO7LRhFDvaZ7GoXB16tXo.crl (hash: h+OH4zArKP/ldc4wOOr6L0Gd9ixYvJdu8d0ANO02J/k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a6:67:c2:c4:2d:1d:03:4a:1a:0b:45:ef:be:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c65d3f8c4eecb461143bda67b1a85c1d7ab57a
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=2f548c03d9155897898f4953629affa90356b4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:e5:6b:f7:63:6d:75:94:28:b5:e2:19:86:
33:be:1b:68:71:97:18:32:a3:ab:b9:76:27:cd:96:
bf:31:66:92:14:f8:41:b4:e3:6a:d2:e4:c7:fa:f6:
fe:b2:01:69:ac:15:8a:76:b3:15:40:53:fa:cf:58:
c9:1a:58:be:59:df:11:9b:bd:9d:cd:3b:e6:f4:e5:
81:e4:14:d7:54:43:8d:f9:09:9e:a0:2f:ae:03:88:
d6:27:dd:35:29:07:c2:1e:2f:2d:d2:aa:fd:6e:44:
91:c1:01:db:7e:f2:01:fa:d6:f5:6d:9a:6d:ed:2f:
da:92:04:34:8e:ed:f7:21:2b:68:be:1e:7b:f8:f2:
66:51:fa:67:f5:f4:c2:5e:33:24:a3:ed:29:8a:5f:
36:79:44:32:54:3f:75:63:de:c3:51:ce:45:41:f7:
c4:78:7b:07:5f:03:fd:25:94:d6:6d:06:19:e9:fd:
6c:45:37:96:ea:f1:be:6e:16:00:41:f3:b9:56:e8:
fd:1e:5a:1d:7d:f8:49:d5:6f:d6:22:89:a3:39:d0:
8e:8d:7b:75:02:46:84:26:70:ee:4d:a2:cd:b0:a2:
6f:f3:2a:89:a3:37:d5:7c:cd:7b:9b:dc:c0:7e:1c:
a5:93:6c:50:98:b5:cd:6a:62:54:67:c6:d9:d2:70:
eb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:54:8C:03:D9:15:58:97:89:8F:49:53:62:9A:FF:A9:03:56:B4:F0
X509v3 Authority Key Identifier:
keyid:A5:C6:5D:3F:8C:4E:EC:B4:61:14:3B:DA:67:B1:A8:5C:1D:7A:B5:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcZdP4xO7LRhFDvaZ7GoXB16tXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6929-ed0f-482d-9bf4-fdd0756065ce/1/pcZdP4xO7LRhFDvaZ7GoXB16tXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:11:4a:58:d4:da:54:02:90:f0:67:35:b5:91:48:2a:41:88:
b0:b9:d5:0e:59:0d:14:a0:59:ca:2e:31:10:e7:60:12:0c:e5:
11:c6:0e:36:44:73:c2:22:2d:fb:0f:47:0b:93:2a:92:b9:d3:
99:2f:be:49:9a:aa:c6:2f:3d:4d:0c:fb:4f:47:37:bf:f4:17:
25:c7:26:40:27:1a:24:79:25:ba:a6:55:08:b9:61:2e:f5:97:
cc:45:9c:c4:fb:be:42:ae:cd:10:dd:30:7e:ee:f3:88:31:c2:
93:7b:5b:58:8d:0c:ba:b8:c3:79:28:4d:4d:d9:a1:11:7a:19:
85:3a:d8:c2:57:a7:9f:43:f3:ac:16:e9:24:5c:59:81:3f:5f:
b7:5c:a2:b5:74:d9:f3:0d:db:2e:06:cb:2c:4f:7a:39:29:ee:
83:5e:c3:75:a8:a7:01:4f:38:d2:06:48:b1:d3:ed:77:ba:7d:
1a:07:f8:df:19:31:2d:f6:69:67:87:ff:55:cc:bd:18:2a:26:
c9:fd:24:d9:42:af:8b:52:29:4c:d2:d7:ef:c1:61:be:50:32:
6f:73:1c:09:74:e3:3b:69:54:dd:80:9a:c9:1d:e5:4d:61:3b:
ce:31:5e:1b:b1:85:0c:73:88:34:d1:fe:29:fb:32:51:0d:da:
38:c4:48:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:37 2025 by rpki-client