Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: D5IUrWcKWu5BOl7F4M8Xn870bS1Qhvy+Y9kEzEHdwGk=
Subject key identifier: AC:A5:CD:1C:6F:30:BD:DB:86:B3:0F:F2:79:44:8D:20:DD:7E:DA:EB
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 0194BD4E4987AFF4A55C6DD85D09905BB6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: 41_o2BIwv76TF64VP1DAdfjTxPo.roa (hash: ZsvXvwGlxNqhMT0bqp079C/5ezKY6fiYSiOoxT1NO2o=)
2: 4mRSyOWbS8hQScfHLulGf4Y6ZgQ.roa (hash: o3JSSVtXNFoFrqvnt6XhA+Y0uItKhtMcyPKqriXcd08=)
3: Qw_MgL0jZxAEcUaQV1xqF4PVe2w.roa (hash: K6DZu82eoM3254ECuNlV9U+0ldDohrzL2NCBM61LLzM=)
4: Zl3HHM0URwuJSk9LlxkNHY3QJSA.roa (hash: Ael3rTKnV/t1wOUc5dyvS7YOaqG/u0QZHukcBegGERg=)
5: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: dL91yBalXhsSlOflJxTtQ1xWIKbqpzBEjnB27KVAIBk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:49:87:af:f4:a5:5c:6d:d8:5d:09:90:5b:b6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=aca5cd1c6f30bddb86b30ff279448d20dd7edaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:a4:43:6e:95:47:21:45:03:29:c6:11:d0:
ea:c4:c2:39:fc:78:7b:1e:69:15:2e:04:97:80:ce:
ad:06:87:b3:90:2e:ea:ed:b0:78:db:f1:b2:73:be:
ff:90:7c:7d:58:ef:3f:f7:55:aa:1d:2b:85:dd:ce:
c0:9a:2e:bb:0c:da:a3:5d:76:3e:b9:8e:3e:ff:e0:
25:73:12:99:dc:a1:21:7e:d4:41:0d:14:85:07:a3:
59:bc:1a:a7:48:d5:21:f6:8b:64:86:32:0d:90:74:
3a:45:00:40:34:fa:97:d3:25:c0:a6:9b:49:5f:14:
bb:ce:5c:66:d2:a0:db:72:7e:4b:68:b2:8d:bc:9b:
71:67:94:88:55:fb:74:22:0e:de:6f:61:db:a0:ba:
ab:aa:b5:37:ce:fa:37:a7:28:e9:4b:5a:f3:48:ed:
cd:6e:6d:62:6b:90:5e:30:02:df:cb:51:9e:c8:7a:
1c:8d:3d:a8:e4:58:6e:5b:cf:18:5b:af:ad:be:f0:
6b:e1:8e:9c:6e:86:f3:a7:e7:53:f8:77:c3:11:1f:
f7:a3:db:47:cd:98:5b:c6:e7:c5:eb:ee:8b:50:1e:
76:8f:d3:58:b1:9f:40:81:0e:9c:17:8a:5b:eb:5c:
05:d8:e0:67:be:d0:64:b6:af:ce:ba:d4:d4:bd:66:
f5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A5:CD:1C:6F:30:BD:DB:86:B3:0F:F2:79:44:8D:20:DD:7E:DA:EB
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0d:ae:d1:e2:4c:a8:a2:1f:c5:4e:7b:00:13:03:47:36:31:
38:81:fb:65:13:6b:f9:b5:f6:b8:e8:e4:81:30:b0:23:f3:ef:
84:dd:83:43:34:1a:c6:f8:2d:25:a7:8e:f8:6c:12:8b:ff:98:
72:7d:71:b8:9e:3e:cc:10:dc:a8:9c:d6:ac:a1:50:da:ad:2b:
55:f5:65:e3:a5:20:9b:11:53:74:75:64:dd:5e:59:7e:62:92:
75:b1:b7:2b:39:f4:84:7e:dc:1a:77:07:2f:c3:7b:2e:92:e9:
5a:2c:ba:57:6b:75:b8:1c:1c:e1:6a:4e:fc:31:dc:c3:6f:19:
1c:28:f2:c9:73:f4:c1:cd:a0:c8:91:b7:7b:64:c1:d9:05:77:
8b:9f:a9:9b:ad:28:46:84:d2:88:59:29:da:ef:1f:c9:54:03:
52:d1:b9:e6:85:97:6b:96:4a:c3:7c:3f:aa:46:46:60:63:6e:
e7:c9:4a:ee:cb:92:a7:fe:a5:c8:e2:43:47:26:75:ed:04:7c:
43:21:f4:11:49:9f:96:c9:aa:bf:b1:0d:40:31:3e:cc:3c:8e:
4b:47:6f:23:6d:e5:7c:7a:71:3c:28:9e:28:79:78:8e:29:12:
c9:53:b1:32:a0:6b:a1:88:36:36:1c:1b:e9:04:f3:25:43:c6:
14:2b:e6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:43:26 2025 by rpki-client