Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
File: p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft (raw, json)
Hash identifier: pOBqAaJqxBkXYOHHMqs1zrFD42LR5EFGTlNRKJKFMuE=
Subject key identifier: 4C:69:5F:81:6E:14:5A:24:24:E6:13:D6:BD:CD:6E:CE:A8:4B:9D:08
Authority key identifier: A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
Certificate issuer: /CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
Certificate serial: 0194BBCEDE5650963ADC48A94F8EA11214AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: 1-iNy3jh1NFZXcxAiKeiVx48NW6M.roa (hash: exM+KStZhJxdlJqEmPR+3n9NcBPaEAtgOuwOgKWeJq0=)
2: p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl (hash: BBHXbG2VUVME9xGJE78Z0uoubWGq+gz9MnZsV21zwqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:de:56:50:96:3a:dc:48:a9:4f:8e:a1:12:14:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=4c695f816e145a2424e613d6bdcd6ecea84b9d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:b5:48:49:8b:7a:ac:26:65:0d:84:7e:9f:
54:37:84:40:5b:79:91:15:9b:68:75:f5:e4:ca:38:
48:83:73:c5:ee:2a:6e:6f:fa:cf:86:0a:44:3e:46:
f0:bd:0f:23:95:86:9c:80:35:c7:a4:a6:6d:7c:00:
29:94:98:68:09:14:a8:c6:7a:bd:12:cc:4e:50:a0:
23:9f:95:8d:fe:2f:61:f6:b9:b8:9d:e2:31:80:b0:
8a:9e:43:cf:10:10:6d:07:70:ab:5a:e7:b4:f7:20:
92:b2:40:d9:2c:29:0e:aa:89:41:f8:f8:01:5c:40:
e0:b7:1a:3f:de:6a:ae:79:53:a2:ef:df:80:0e:c9:
bb:b5:f9:a1:b1:79:99:aa:3a:c1:0b:0d:69:01:00:
d3:f6:38:73:18:6e:f5:12:bb:1e:69:c7:a8:74:b9:
3a:ee:70:11:16:ca:d2:78:89:4c:1e:3c:f7:41:08:
90:27:b5:2e:9f:7c:9f:6c:ef:fa:1f:4c:ef:6d:ca:
54:b5:e6:9a:87:87:1f:3c:2e:57:19:95:37:ce:21:
e4:70:b8:8a:e3:30:12:ac:91:39:51:f0:cd:e0:38:
38:08:2c:7e:a9:9d:56:82:f1:11:54:95:65:8d:be:
88:5e:62:ec:ef:9c:7a:ae:e9:84:74:bf:bc:81:91:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:69:5F:81:6E:14:5A:24:24:E6:13:D6:BD:CD:6E:CE:A8:4B:9D:08
X509v3 Authority Key Identifier:
keyid:A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4f:f0:6e:6f:5c:d3:51:6c:52:52:6d:8f:35:e6:13:ed:68:
63:0b:ae:43:97:80:a7:02:6a:47:22:b4:d4:3f:7a:fa:e3:01:
b0:38:80:41:a8:aa:b3:43:dc:51:76:ef:dc:57:45:98:34:28:
6c:39:7f:03:67:78:b1:7f:d6:63:61:32:20:bf:fe:fe:ad:67:
41:02:87:c2:a0:d0:4e:1d:83:16:38:3e:d1:63:aa:b9:c8:24:
c9:20:f9:d2:8c:69:75:2b:be:7f:ee:94:4f:44:30:d6:85:3e:
7d:d9:9e:25:98:c1:c2:55:d5:ad:96:75:f0:f2:50:81:66:9a:
da:34:c1:0f:15:83:ba:48:9a:0d:8d:43:7b:aa:09:93:f4:65:
5d:1e:60:7b:1d:e2:33:23:a9:ce:46:45:49:a4:f5:47:ff:1d:
95:b8:46:8e:c7:bd:6c:bd:f1:42:04:4e:14:eb:91:d8:cd:03:
3b:09:69:5b:c4:b1:bb:57:3c:4f:58:ba:7c:39:06:84:6c:5b:
da:42:83:79:ef:7e:15:b9:76:84:6a:94:cd:99:85:66:25:7a:
e4:58:c7:d5:99:b5:4e:7b:e2:e3:6e:86:32:f8:b0:87:c5:e2:
7b:d1:e8:af:88:84:a0:e1:f3:48:bf:c2:83:6f:9c:28:be:9f:
14:e7:05:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:11 2025 by rpki-client