Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier: P5d8WsmOaaDKhYHAM/NLmLFGs5rLFCCgIJpOAZFTmsk=
Subject key identifier: 6F:33:8B:42:88:D3:58:E1:B6:23:66:E4:68:79:24:9D:84:08:5B:38
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 0194BD177219F880F5830E830DC9A21E3985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: O1ywiFiLkq1fR5di5oR2ZQ0O0VU.roa (hash: SE/6ae9nVewYClVlXFv1//+tibHGjvE3o8ZX8Ja08V4=)
2: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: jidnbBVVBqRHPAzY1lJj4gipv22Ae3LJc7lealW0/Bo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:72:19:f8:80:f5:83:0e:83:0d:c9:a2:1e:39:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=6f338b4288d358e1b62366e46879249d84085b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3c:73:41:a1:1f:3e:10:0b:6e:8b:e0:80:54:
0e:96:49:1c:87:41:c5:fe:29:b9:13:89:32:54:d6:
fa:e6:98:c8:1f:68:21:d9:8c:b9:d4:22:13:a8:67:
d8:a5:aa:e2:39:71:29:d6:af:47:da:1f:b4:82:73:
5d:3e:12:72:4e:ae:79:2d:11:60:3e:d6:c4:15:a2:
b2:7b:2f:da:5b:b6:53:62:36:74:17:dc:2a:25:54:
95:42:3c:33:ef:f8:5d:a3:a8:0b:5d:e0:91:a1:22:
c6:89:c5:d2:28:28:a4:58:e2:3c:0f:29:55:bc:66:
9f:06:94:7a:ad:f6:0a:6a:35:fa:a7:9b:d6:b9:b0:
de:40:eb:21:09:5a:cc:b6:e9:61:6a:a9:c5:7e:bb:
c4:1b:e1:d6:4a:d2:5f:59:8c:af:ab:7a:7a:0a:c8:
97:fe:cb:f1:37:85:55:59:41:17:22:04:5a:73:ef:
ea:72:21:46:50:e6:4d:60:88:69:46:b0:ea:ba:73:
f2:63:b0:79:53:60:c3:b0:24:d7:1c:52:18:14:20:
b5:fe:74:c3:b2:5f:e2:ca:f3:20:a7:6b:31:c2:c2:
db:7f:d9:08:8a:11:65:34:87:b1:a2:e1:e1:a4:f9:
6d:54:c6:a0:5b:13:70:34:17:e7:ba:28:ee:f5:e3:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:33:8B:42:88:D3:58:E1:B6:23:66:E4:68:79:24:9D:84:08:5B:38
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e9:54:d5:75:24:c3:74:05:d7:88:5c:21:ab:ea:4e:b6:d5:
6d:79:cc:e6:d9:a8:e9:e8:61:e6:0f:e8:33:09:6d:e7:f5:3e:
fc:f1:3c:f9:99:dd:01:f9:5b:d2:ab:bf:5e:82:e6:ff:23:4e:
b5:53:69:75:73:b1:79:82:3d:b6:b0:0f:f9:bb:7d:14:52:e6:
51:51:99:18:98:0a:f2:0a:05:da:70:5a:36:a4:3a:ca:97:40:
19:b8:8c:c4:89:63:18:25:b6:8c:fe:b4:a8:5e:07:a9:03:bb:
22:54:fd:ae:5b:36:84:fb:d6:42:a3:16:68:6c:ce:75:77:88:
5f:b6:98:e5:04:ef:b4:1f:cd:fa:46:0b:74:16:09:b3:8b:4f:
1f:fd:32:92:3a:dc:46:80:34:93:53:cf:39:c1:b6:44:5c:67:
96:61:a0:8e:e3:a0:50:87:0a:9e:33:c8:34:48:0a:83:de:fa:
cc:01:ac:30:01:8f:2a:a8:59:e9:a9:cb:d5:6a:7f:d3:57:fe:
1e:47:14:d5:06:58:67:4d:7c:0f:20:df:2a:45:f8:67:dc:6d:
3f:c5:0e:68:39:63:48:4a:ab:5e:2a:a6:24:2a:0f:5f:a9:5c:
45:aa:b2:68:b6:e0:e4:d5:5e:44:6a:42:ff:4e:88:9a:76:82:
62:cd:ff:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:29 2025 by rpki-client