Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
File: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json)
Hash identifier: Eu0gZYvdMidl6F/0Z+9sZ9MOn+4SqoCNKurJ0GXermU=
Subject key identifier: 4A:E3:6D:9F:14:54:4C:5D:40:71:CD:E5:19:FE:F7:25:7A:30:82:C5
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Certificate issuer: /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial: 0194BC3C8D2F8B8F5590BA70EC469110175B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: GSYjq6iczyoVzYDlz3HGUFSrIQ4.roa (hash: XbCa3j6XTEyeRnElswqHZbpKZmfxYHeYOgSyLa4zvQM=)
2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: 1dqgBDTqTRpG/naZP4xoS4f1ic2PWWztEjEefUqxo1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8d:2f:8b:8f:55:90:ba:70:ec:46:91:10:17:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=4ae36d9f14544c5d4071cde519fef7257a3082c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f3:8d:cb:5d:e7:12:9c:27:8d:7b:6e:93:5e:
88:d2:ed:76:cb:af:4f:ef:35:84:9d:33:ba:70:8e:
84:62:c5:39:b5:77:85:2f:81:7f:24:4e:08:69:1f:
58:13:02:03:63:76:51:c3:f5:c7:af:22:56:28:52:
44:cc:d6:d0:f6:bb:48:1c:52:6b:d4:e8:86:74:9c:
93:f0:6e:cd:24:cd:5f:8c:86:b9:93:47:6a:f0:74:
83:8e:1e:70:62:dd:8c:3a:27:6a:b3:2a:6e:a5:c1:
cf:83:39:3c:13:26:45:8f:81:dd:28:18:22:6e:49:
8b:dc:e7:ba:ac:79:8c:e1:33:44:9b:44:20:2f:38:
3b:9b:e4:7d:08:1e:11:3f:39:e3:05:3c:13:a1:58:
e6:e2:4e:77:29:86:57:10:d5:0f:c9:17:0f:b2:dd:
b6:73:5a:60:44:8a:cd:27:db:81:af:80:1c:e4:96:
66:e7:43:b9:2d:2b:ef:d0:69:33:f4:cd:80:44:e2:
4e:b8:08:13:0a:68:cc:98:8c:a4:d8:2b:e2:14:43:
a9:7e:d0:d1:26:2f:38:43:77:8e:4d:2d:5a:57:3a:
5b:6a:1e:28:09:63:a2:53:f0:06:2f:d7:c3:7d:ef:
1e:21:ba:cb:88:78:fc:85:fc:87:b5:a7:e5:6a:ce:
e2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E3:6D:9F:14:54:4C:5D:40:71:CD:E5:19:FE:F7:25:7A:30:82:C5
X509v3 Authority Key Identifier:
keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:50:69:e0:17:90:5b:f6:72:97:6a:68:0c:b8:54:a0:31:fa:
37:20:49:dd:0f:86:84:15:27:5c:f9:69:0a:fb:3e:b3:67:80:
2b:10:d4:b9:12:10:7f:a6:c5:7c:4a:2e:3d:b6:13:b0:05:4a:
4d:6a:35:aa:8e:a8:62:8b:d6:2e:3b:ac:26:8c:ff:96:a9:3d:
0b:64:dc:d6:60:ab:7b:ca:77:7f:73:ec:ec:f8:71:b5:df:ee:
e8:17:78:6c:d4:47:83:c5:53:84:ab:b1:6a:11:3c:71:17:f5:
a8:85:4e:b7:c1:f9:f6:57:c2:e6:4d:a0:19:c0:e8:70:3d:ae:
b3:cf:d5:4f:71:a4:c3:92:69:43:ae:7d:a7:71:9f:83:71:e3:
3d:3e:a6:9f:2b:66:17:a8:d8:0d:7e:70:71:5f:5a:1c:fa:72:
6e:27:77:4a:c1:45:fa:01:0c:69:30:3f:e3:0b:c3:9b:1e:e1:
03:78:2f:0f:b0:fb:cf:a6:b5:9c:60:38:e6:9e:be:80:69:28:
6a:c7:0c:17:40:8f:64:23:ba:b3:30:52:14:f9:97:33:ee:dc:
62:4c:06:ed:c9:71:fa:df:ac:eb:fa:12:58:af:d1:d9:b8:4c:
0b:0c:d2:8c:81:37:b0:17:2e:56:4c:dd:84:68:4e:86:27:4d:
e8:cd:5c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:37:53 2025 by rpki-client