Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
File: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft (raw, json)
Hash identifier: KXdK9j8V0WNJxdxKz8/ynJGyM3cwpEG5mvriG18siIw=
Subject key identifier: DE:6A:84:03:D5:70:D9:83:E7:A5:E5:B5:81:25:0C:E9:F0:D8:B1:37
Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
Certificate issuer: /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Certificate serial: 0194BCAA32E7AC6476B13C8B515BB391AF10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
Manifest number: BE
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: aU9nU6J43VKML7pOttC9ZY6jQ98.roa (hash: FbRy0Mzafv2hiOEuNsxPoMw70K3GoSJZXHuz7LnmQeE=)
2: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl (hash: QCTS0T0nQ4EUH873Ydztb3VbVyDGvwW2mUO+WQUkTuU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:32:e7:ac:64:76:b1:3c:8b:51:5b:b3:91:af:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=de6a8403d570d983e7a5e5b581250ce9f0d8b137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f6:7a:74:65:b0:0f:5c:45:2a:93:66:c9:7f:
a9:5e:4d:b3:84:97:1f:b7:20:24:61:26:5e:5d:67:
02:40:a4:db:94:fc:85:e9:53:3d:0d:1e:d4:5b:6d:
8d:ce:14:fd:41:fc:27:4d:ec:7d:8d:0e:8b:62:45:
5b:70:e8:6b:21:e3:a5:fc:17:b8:fb:ba:6d:f4:a2:
ea:49:06:40:c3:15:93:14:4f:39:d3:0a:b0:81:4d:
ec:69:15:40:b7:01:50:6d:1c:28:db:e6:15:51:9b:
39:94:ab:2c:42:90:88:63:b1:f3:63:f1:71:b9:44:
b9:f1:63:68:98:a8:25:fb:da:02:e3:f9:42:19:8f:
9a:49:21:ea:5b:09:cc:48:59:95:a4:6b:32:ff:6d:
06:a1:c5:ba:8b:98:2b:e6:e8:c0:66:46:fd:4d:bd:
01:40:6f:63:f5:22:d0:0e:a9:5d:94:d9:d8:1c:97:
47:3c:5c:06:d1:ec:d5:bb:6b:01:4e:06:ae:a2:c9:
f6:d4:f0:6a:e7:51:48:af:cb:58:43:04:d9:3d:ca:
0f:77:41:3b:26:17:37:b8:ec:2d:15:52:a9:a7:61:
3e:1b:9a:98:50:c1:42:22:49:b2:70:71:99:6a:b7:
4f:f4:62:63:59:e1:95:62:af:ed:3d:83:84:06:ce:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6A:84:03:D5:70:D9:83:E7:A5:E5:B5:81:25:0C:E9:F0:D8:B1:37
X509v3 Authority Key Identifier:
keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:13:60:3d:7c:80:ab:02:57:86:01:a5:b7:2a:bd:b1:06:97:
e4:97:83:23:93:75:62:3f:bb:0a:79:6a:e4:3c:88:8b:d9:fe:
83:b3:1d:5a:e9:31:63:ad:f4:a3:91:d8:c8:44:6a:90:79:5a:
49:de:39:1c:9d:a1:cd:f4:67:2d:78:f1:81:01:6d:90:dd:4a:
cd:02:74:d1:e3:25:ee:f7:1d:71:f3:93:a8:a8:b4:f6:7a:78:
a6:5b:ea:e7:09:84:4d:30:b2:d6:e5:51:eb:87:e8:9d:94:d4:
ed:d6:97:20:d1:ee:5e:56:f8:89:34:3b:91:7e:71:3b:50:9e:
45:76:25:a3:a3:5c:6f:ed:16:cf:6f:51:c9:84:b5:7f:63:b0:
af:59:b6:28:2b:fa:4c:cd:67:ff:c7:43:bf:92:80:e0:fc:39:
ad:44:b8:6b:1e:90:6a:ef:a9:88:14:96:c6:99:91:4b:8b:5d:
1f:83:8c:e7:a7:01:fb:8b:1c:15:f9:f7:a9:89:f2:c9:e3:78:
7f:e7:c5:3e:c8:52:03:41:a6:a5:75:20:aa:8c:87:49:8f:52:
11:c4:a8:8e:28:96:99:22:ac:66:7f:7f:27:ea:c0:31:81:f6:
d8:a5:f1:ff:b1:21:c8:be:28:b7:10:12:1b:8d:b9:71:f0:9c:
05:5a:b1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:59 2025 by rpki-client