Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
File: pPhDYAPTdgICa2VTF1XKj80xvtI.mft (raw, json)
Hash identifier: X5tzLomBB0hBANM74D8PqYiZZzCYqTfz00G/pA8Ydsk=
Subject key identifier: 5C:70:42:BD:B1:A2:61:A1:9A:6C:8C:FA:52:CF:FD:A6:FA:50:D6:09
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial: 0194BC72EABBD7E1A9D5D332348A19A9E7A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
Manifest number: 1442
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: HMGH1OixlUbIZln6UuRHK_JoRTM.roa (hash: hIobepQhJMDuyYwWr9rOBNqOIvasbF7MFvvQPTjZKdk=)
2: PQ45AYuoXrKgjYd4a2nYqs6hfn8.roa (hash: 7Md1PLbDzWkJqH/gps7rzdw/URXMoRhj3yufH4c5pmc=)
3: TJDxzTrNcm_JUBQq51eVKAGUb3M.roa (hash: I32RNrgNmMCqgGuFyM+cqOZg4sA0odAi7Q0t2K4n3Vo=)
4: pPhDYAPTdgICa2VTF1XKj80xvtI.crl (hash: zL7i3OyrGuzKOAMdRguWk10TE0MnKA6os7nEqfPnJNY=)
5: pjx3rNTZc8zgxWfuwXBOXgS3sqk.roa (hash: WRGBj9YhrJQ6r6myfQ5P/R+NIt879XmbiNbiLcGeJP4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ea:bb:d7:e1:a9:d5:d3:32:34:8a:19:a9:e7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=5c7042bdb1a261a19a6c8cfa52cffda6fa50d609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:71:73:b5:53:5e:79:bb:77:d4:ea:d9:ff:
95:0a:36:17:ea:06:ad:40:b1:60:8b:b6:97:15:97:
a7:80:92:94:03:7a:ac:01:75:5e:85:80:9b:d2:fa:
bf:99:a6:6d:76:f2:ca:37:52:79:88:ef:d8:c8:99:
91:cf:b9:10:95:53:c9:3e:b0:d6:b4:73:00:b5:6c:
16:48:db:46:ea:20:0b:a1:94:32:ea:79:0a:5c:f4:
28:9a:4d:36:27:07:49:87:ba:4a:20:fa:1b:f9:65:
ec:55:34:0c:b9:af:26:33:37:d3:93:27:70:c8:36:
c1:6a:30:21:83:eb:fd:92:3f:df:46:6d:8b:11:d0:
e9:4a:27:47:d6:17:f2:f4:9d:1a:7e:d7:a4:0e:c6:
ae:ce:3e:18:48:28:a2:c9:6e:98:7d:da:a0:4a:94:
4f:03:5e:00:6f:79:22:31:33:d1:9a:e1:aa:fd:7e:
8a:05:2b:1e:ec:5a:3a:b4:d1:93:70:56:7b:23:37:
ab:35:bb:86:77:c4:cc:db:bf:cc:7e:a5:dc:5b:50:
68:2e:c2:7c:46:13:d8:f9:fc:3a:5e:2a:17:ba:6e:
eb:93:89:de:14:b4:17:83:29:13:5a:e1:4f:c1:7c:
3d:5d:91:f2:ce:c1:b5:55:c5:3b:b7:5a:e8:28:04:
2d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:70:42:BD:B1:A2:61:A1:9A:6C:8C:FA:52:CF:FD:A6:FA:50:D6:09
X509v3 Authority Key Identifier:
keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b9:86:d2:db:09:4b:65:be:47:43:ee:48:15:bd:1d:a9:94:
f5:18:7e:2a:3b:1d:8e:41:ee:2a:bc:fb:0b:e0:d3:92:ef:c3:
a4:6d:57:2b:49:fa:74:6f:f9:50:73:06:8c:f6:58:b2:e7:c5:
d8:f1:29:01:2e:ab:30:8e:c0:60:44:49:52:b0:1d:2a:4a:dc:
19:2a:11:fe:50:33:96:8a:de:cc:18:6b:83:bd:35:29:69:2e:
d7:22:98:e7:61:4d:99:15:df:9e:92:9a:f2:1e:c4:a2:04:02:
4a:d5:cc:61:0a:3b:ff:76:39:f9:a5:fe:b4:71:2b:4e:53:1f:
58:47:6b:e0:49:53:f4:d4:61:d9:c6:31:59:82:26:15:33:2f:
f0:0f:38:5a:2b:d1:6b:1c:60:04:e1:ea:a9:af:ff:b2:f7:08:
d2:6d:58:25:cd:73:64:71:01:0f:00:cd:ab:15:51:70:eb:68:
a0:b6:73:a9:11:f7:07:2c:33:b8:14:4d:fa:2c:3c:ee:f0:a3:
2b:e8:ee:1a:7e:ed:96:5e:87:ad:37:f9:f6:c1:80:4d:9d:f0:
d7:bf:85:2a:6f:5c:4f:03:7b:02:9f:c0:b6:17:b9:56:44:01:
61:76:66:f0:fa:2f:dc:b2:2f:42:88:04:0d:90:12:ae:c5:3e:
d3:8f:f4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:47:09 2025 by rpki-client