Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
File: paHquv4t5wOCJ6hZOnrFzDkvN04.mft (raw, json)
Hash identifier: jYj/nfH5rlFr/A820yB/93nXU/FeufXIA0N4WkymUzQ=
Subject key identifier: C2:CC:B1:8C:B5:6E:11:BB:AE:D7:AA:B6:1C:33:47:1F:77:EA:D2:EE
Authority key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
Certificate issuer: /CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Certificate serial: 0194BC72B47F53FB038C11E9BDCCCA0F3CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
Manifest number: 10CC
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: paHquv4t5wOCJ6hZOnrFzDkvN04.crl (hash: nPCuUWYYnGSKp7Au7TDG5YCWa6g5mUPWmQpCxGcmfUk=)
2: wW2KE3gY8QjEsnXJFmwHDL7WH6g.roa (hash: rYujNDXyFY6K7NmLNp1LWeOiCz0Qh+l0K7mCOQxVp3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b4:7f:53:fb:03:8c:11:e9:bd:cc:ca:0f:3c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=c2ccb18cb56e11bbaed7aab61c33471f77ead2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:da:7d:9a:05:4a:d8:e7:47:d3:49:8b:54:
f5:86:f3:74:17:6e:16:33:3f:62:0a:f9:66:14:c7:
da:a0:1b:87:f9:ca:68:6d:3e:4c:37:fc:09:5e:37:
7e:1e:42:e2:0b:bb:9a:fd:0f:34:8d:7b:30:c7:0d:
33:1f:45:fd:4e:9e:5c:cf:73:d9:72:d8:92:33:0b:
db:86:de:9b:03:45:29:e3:f5:d1:6c:49:12:5b:5e:
25:29:72:36:8f:b0:b6:65:fd:14:c1:aa:43:df:56:
18:2a:be:68:23:0d:db:8a:7c:c0:f3:44:71:69:33:
31:f3:f2:1a:26:78:c8:85:57:ba:d0:15:4f:ea:46:
0e:20:e6:d5:56:35:2e:74:8d:cb:4a:9b:56:c1:8e:
b9:c1:ca:4c:d8:d1:fe:85:3f:ff:c3:ae:1c:75:a7:
40:0e:64:87:e1:d3:f6:09:e9:0e:1f:4e:06:cc:5e:
d8:cf:bb:9a:50:30:c8:04:68:20:e5:5c:21:15:eb:
ce:73:21:08:d5:af:0a:5e:2f:ed:b8:b0:9c:96:d7:
41:56:be:02:44:b6:1b:1b:2b:01:ad:2c:c4:59:3d:
62:28:27:bd:f0:07:97:b6:e0:15:79:50:a6:71:4f:
83:2e:10:aa:ba:32:d4:8f:a5:2f:7b:4b:26:f1:12:
03:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CC:B1:8C:B5:6E:11:BB:AE:D7:AA:B6:1C:33:47:1F:77:EA:D2:EE
X509v3 Authority Key Identifier:
keyid:A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:98:c2:27:87:2c:c1:22:e5:4c:6a:89:ac:22:98:cb:f1:47:
f2:48:be:39:04:94:8d:fd:06:cc:09:07:1c:5c:9a:9f:0e:40:
99:98:7e:2c:2c:71:a5:e8:29:c1:91:ba:1c:31:5e:e8:6f:92:
8d:88:43:25:c7:71:45:6e:24:66:1c:54:0e:82:98:a3:d5:6f:
4f:1d:a5:7d:e8:fd:a3:70:31:c1:16:e5:21:e8:5a:a0:b9:64:
a5:60:b3:83:71:3a:f9:a7:73:12:35:73:1a:12:35:d0:33:99:
2c:54:8d:1c:a8:be:51:07:b3:14:d4:87:c1:7d:b6:c2:17:48:
00:58:c5:9d:1b:41:06:1a:fe:03:d5:6c:d5:9e:33:11:50:e6:
fb:a6:ad:8c:01:41:1e:fa:82:d5:06:7d:0f:4f:ad:5e:ec:94:
d4:ef:d5:74:72:5c:ed:15:8a:71:2b:9e:77:b0:73:16:a2:2e:
dc:ea:16:30:06:c1:1b:be:40:63:89:27:56:25:ae:14:9c:16:
61:e9:b4:6f:59:09:fa:99:1e:3e:64:a0:f9:6e:f3:46:17:94:
5e:a9:0d:d7:96:9a:b4:d0:8d:4c:41:7c:78:45:92:2d:93:95:
f2:68:b8:31:c3:67:95:74:e1:18:ad:2d:3d:ea:32:8e:7a:11:
7f:19:4f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:48 2025 by rpki-client