Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
File: pat5hX5owCBczi8RpTh6avofiJU.mft (raw, json)
Hash identifier: IipYnuacogfQ13NEhXqqxGHuPXQfz80WW+hswfP0wkU=
Subject key identifier: EA:9D:44:D8:82:B9:66:87:39:C8:7E:F6:2E:1D:D9:E6:61:F0:7F:E1
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 0194BD4E5F9C18014E72110C66E67DEF80B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: RJc6jzAyS3uWboc6tEy0sbhbczk.roa (hash: Tl0N+n4FID6GW+L+lL7UDQWc6s/Qw80QVfgROFxq4Tw=)
2: lGQ5oAC4DvbrVczVYtetvVMraGI.roa (hash: RPF4xGL/jJtG/0h2vD9Z4Pt0zkSh8uypUluux6hYGEQ=)
3: pat5hX5owCBczi8RpTh6avofiJU.crl (hash: gDiAEhuyyp29OFMwgKBCN6mt/prJcn0xNajPMkpsVXc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5f:9c:18:01:4e:72:11:0c:66:e6:7d:ef:80:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=ea9d44d882b9668739c87ef62e1dd9e661f07fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:73:c6:12:4c:ea:3c:88:12:f5:4c:d8:e2:
3c:a8:7f:ce:d2:0e:8e:2a:fa:85:f3:a6:73:72:9a:
8d:4a:53:9e:e2:7d:10:b2:19:55:91:79:c3:b3:ac:
f8:31:f4:93:81:c7:42:96:da:24:03:ca:6d:db:e7:
b7:d5:64:37:29:de:3d:61:55:ae:1f:e4:e4:ea:23:
9b:d5:43:73:e9:aa:e4:b5:11:ad:56:fe:c1:16:02:
e5:f6:9c:a7:d5:fd:f8:c6:38:94:91:29:d0:f4:b8:
37:85:48:af:38:71:ca:69:b0:a8:52:7b:af:16:59:
e2:ba:e8:c1:20:a2:67:98:91:e6:b1:e7:7a:2a:9e:
df:39:b8:da:c8:7c:ce:e1:59:8b:4a:8b:44:71:e6:
c8:35:a0:3c:15:31:83:93:f7:18:6c:78:ee:6f:d4:
54:0f:cc:6d:ef:c1:0e:d6:10:09:02:fd:4c:92:36:
bd:e8:6e:d2:70:e6:d9:49:be:20:d7:34:24:ed:8b:
a0:24:37:1f:86:45:77:db:05:f2:c5:ac:07:cd:ea:
55:94:9f:8a:33:ae:8c:26:2c:55:89:42:75:38:26:
8a:66:fd:8e:78:1b:be:2b:85:06:b6:79:90:23:b1:
c1:0d:ae:7e:af:e6:bd:82:65:bd:15:5d:1c:9d:49:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9D:44:D8:82:B9:66:87:39:C8:7E:F6:2E:1D:D9:E6:61:F0:7F:E1
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:d1:50:74:7b:8f:cf:0e:47:b1:b8:72:ce:fd:c1:b1:d9:ca:
17:7d:2d:58:fc:3a:fe:07:04:9e:24:9e:0d:f8:77:a9:81:91:
4f:a8:97:d9:bf:22:c6:7a:21:4c:a6:d8:fb:6f:7d:81:35:a1:
57:d6:72:5f:41:35:f9:e6:34:ef:e9:6f:5a:bb:93:34:85:10:
3f:ee:b5:04:c0:e7:92:ee:e2:9b:b9:f5:47:a6:31:3e:54:7a:
9e:68:bc:06:3b:b2:57:1b:f7:1c:e2:88:c5:0b:22:c1:63:e1:
3a:e5:3a:cd:cb:d8:c0:15:24:80:67:dd:a7:3c:39:c2:85:2f:
ed:d8:da:5e:f7:74:33:0f:0c:65:67:8a:52:72:d0:f5:86:94:
a2:53:26:74:3d:bc:30:2f:ea:40:7b:29:51:15:cd:d8:7c:69:
b3:5c:6c:6c:f1:08:1f:d4:c2:48:3a:db:ea:0f:ce:0f:86:48:
15:c2:9d:b6:43:a1:b7:02:fa:06:c8:43:ba:22:82:18:3e:d0:
9c:68:a0:4e:fc:48:9d:94:18:16:f0:dd:45:1d:a6:9c:80:90:
ba:8d:0d:9c:a2:50:cb:4c:1f:52:4b:b5:84:cf:24:95:94:68:
c6:5f:30:4d:aa:d9:12:43:31:f0:3f:e2:92:cb:27:db:da:f2:
79:1f:55:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:23 2025 by rpki-client