Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
File: PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft (raw, json)
Hash identifier: txHkfw0bapFSDVripqkS1WJAcKm+5YOYUTX+e5FOwlk=
Subject key identifier: 54:5F:B1:26:F0:7C:F5:3F:35:B9:16:25:C4:64:2F:89:56:51:D6:B9
Authority key identifier: 3D:4F:B9:16:56:DD:ED:5A:0A:FA:F0:71:0D:26:A8:DF:63:6E:E0:78
Certificate issuer: /CN=3d4fb91656dded5a0afaf0710d26a8df636ee078
Certificate serial: 0194BCE08595C4E5E538596A47303E6A6ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
Manifest number: 0316
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl (hash: P/5TM2ERmVwcDwGPcDPOfe5SdNVhD/eaaXrj9bRX9Jk=)
2: eSMweySQayVjw4TxrRct4yupfzc.roa (hash: vIdUHA4BTNYVBukw2W8J/Pb08xt6VrAwfBVQVhqYWeQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:85:95:c4:e5:e5:38:59:6a:47:30:3e:6a:6e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4fb91656dded5a0afaf0710d26a8df636ee078
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=545fb126f07cf53f35b91625c4642f895651d6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:05:9e:22:48:9f:b8:b5:cf:97:8f:d8:a7:
af:aa:43:bd:a4:2c:aa:b2:99:2a:36:f7:c5:b1:b3:
3c:8b:ed:ce:8f:96:ee:b8:71:79:41:98:ec:27:b7:
a3:fe:52:f2:85:83:e6:ca:09:ef:62:98:0e:54:73:
8f:e2:9c:23:79:40:4b:d5:8b:1d:20:5a:e1:fc:c3:
b0:68:ce:f1:eb:58:dc:30:e2:1e:b0:ba:63:ea:c8:
e7:d6:db:b7:ce:40:0e:17:89:88:12:5e:17:ef:e2:
2b:f7:05:65:3f:39:ed:cf:c2:0c:8b:8b:23:cf:84:
37:ad:9d:4c:26:9b:1e:c8:b3:23:2e:17:f9:80:ea:
ff:de:49:93:2e:8a:77:81:e8:cd:a9:1d:18:fa:fb:
2d:0c:cf:d3:c1:99:83:bd:60:1d:d2:a7:eb:f2:b2:
17:d4:53:c7:b7:87:49:13:6d:6b:48:cf:70:aa:59:
73:23:b4:54:e5:bd:32:04:23:73:be:d0:65:36:12:
d7:27:20:df:c0:bb:80:b9:4c:06:b5:4c:18:0c:2e:
10:70:4b:be:c0:31:f9:6e:ce:94:41:77:1d:5a:3d:
49:fc:af:17:7a:04:9e:e7:90:c5:64:23:3f:08:66:
30:37:80:55:47:b4:a0:60:1b:3f:54:2d:28:70:52:
d0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5F:B1:26:F0:7C:F5:3F:35:B9:16:25:C4:64:2F:89:56:51:D6:B9
X509v3 Authority Key Identifier:
keyid:3D:4F:B9:16:56:DD:ED:5A:0A:FA:F0:71:0D:26:A8:DF:63:6E:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:78:b7:9f:cd:08:be:41:b4:44:08:35:7f:1b:f8:c3:05:16:
97:90:57:88:29:b3:e1:dc:d6:f6:00:d8:9d:33:b3:ce:d3:67:
61:47:71:4a:0a:e2:87:58:a8:90:6d:e8:d3:ca:94:c4:8e:13:
a4:9f:35:23:42:c9:58:89:1e:61:19:ca:d0:b1:82:96:e9:00:
04:3a:b2:e3:56:e0:43:9b:67:de:e2:fe:25:49:54:b6:72:dc:
e0:0f:1b:40:21:58:17:b4:50:be:09:7a:d9:61:53:8b:4a:36:
6d:8a:81:50:ae:49:b2:7b:f4:ad:48:73:db:8b:b2:ee:d9:f9:
a4:7a:ba:c2:2a:e2:21:ef:c6:e3:49:27:20:e7:9c:4b:e3:02:
9b:5e:10:61:a1:b9:a4:97:28:cc:5b:c9:6d:6b:20:97:0e:19:
0c:a4:4b:6d:2b:83:d3:c4:21:65:f5:bd:14:4c:13:5b:a4:1c:
46:d5:78:a5:6d:ce:85:db:4a:09:e1:2e:92:bc:3a:3c:77:45:
90:50:c2:3a:44:6a:be:ef:fc:59:0d:64:f7:f8:fd:2b:04:0c:
b9:04:2b:05:b8:af:81:99:9f:9e:73:13:cc:58:46:01:0e:05:
b8:3c:1c:f3:fc:65:c0:a7:32:17:54:78:50:46:b2:39:40:7b:
72:e0:80:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:45:49 2025 by rpki-client