
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier: BbM7RUYv66oiDUmbDQnQ6zznmL/FqsVLACfhQSK1hts=
Subject key identifier: 13:37:49:53:58:67:84:6F:FE:7C:CA:7D:8A:C5:D3:3B:C3:93:DA:8E
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial: 0194BCE08A95AE80831A325957BBAF7EF2C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: 561vyQubUBVe_MLgzSiqqYxU6_Y.roa (hash: 6HivC1fxPXMlCdAVu0fVBq06y4Hg53XB3H7/WZM7Ul4=)
2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: dfJU00EtPzpY1h5DJZ+lfbJDGjh9T73l9iGsDxHJA2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8a:95:ae:80:83:1a:32:59:57:bb:af:7e:f2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=133749535867846ffe7cca7d8ac5d33bc393da8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:21:ef:fd:47:36:0d:55:87:de:ae:55:90:13:
b9:de:20:5b:62:72:64:2b:12:85:40:ce:94:41:79:
df:af:e0:09:ec:24:5d:af:22:36:d1:6a:21:9f:a9:
36:ab:6f:31:0c:06:85:be:2e:e3:43:09:97:7b:84:
63:a7:13:ce:57:73:4a:af:19:1e:86:18:1e:e1:9d:
c3:65:d4:26:27:6c:25:d5:bf:4b:7a:17:05:f2:be:
cd:6d:4c:c6:d7:c5:15:20:db:be:1b:a4:7d:d1:c6:
54:73:12:8d:79:04:50:d8:eb:7c:e0:e9:db:e2:75:
3a:76:28:81:e6:3a:5f:93:0a:89:fe:64:a8:3b:44:
e0:29:83:7c:3f:e2:e5:65:76:aa:ab:57:6a:85:ba:
a6:01:a4:ee:18:f4:1e:d4:10:15:9b:10:1e:69:40:
4e:ac:55:5c:8a:a9:2b:53:c4:1a:57:a2:7c:09:4f:
da:24:67:89:14:d4:5d:31:d0:fc:c5:67:5a:db:40:
3d:40:16:cd:c2:74:f1:63:72:17:e4:dd:d0:8e:24:
a4:b5:ea:2c:35:d6:85:82:2e:ad:5d:14:9c:3a:13:
ab:ce:33:a2:5d:8f:ac:92:d3:76:7f:3b:d4:4f:6b:
1d:11:95:64:96:2c:d2:05:52:07:da:af:cb:58:10:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:37:49:53:58:67:84:6F:FE:7C:CA:7D:8A:C5:D3:3B:C3:93:DA:8E
X509v3 Authority Key Identifier:
keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a2:17:f2:3e:72:6a:25:cb:bd:4a:f5:c2:f7:e0:24:e5:32:
1d:9a:f1:5c:18:d3:54:c2:dd:89:03:01:5b:86:19:7d:2c:b2:
b7:02:8f:f5:16:ef:65:fd:63:16:9c:2d:3e:df:c2:4d:d8:34:
48:60:23:03:cc:f4:f4:31:57:d6:ac:04:0b:80:34:11:e4:14:
3e:a0:4d:07:14:43:6f:e1:59:3a:ac:df:51:96:6d:e7:3c:7c:
a8:39:61:98:85:7f:79:30:39:1d:c8:75:b9:d0:34:26:39:4c:
f1:5b:4c:c3:9f:ed:1c:d4:02:63:a6:b0:4e:70:36:54:b0:12:
55:c9:de:0d:6a:96:51:d4:3c:05:9b:4c:ec:24:1b:d2:89:39:
b7:26:ad:61:e3:84:d8:27:f4:af:1e:1a:c2:d1:93:51:57:b6:
d9:40:07:70:0b:a5:1e:89:d0:45:5b:cc:49:71:3d:c9:d4:85:
c2:34:a2:01:1d:76:88:6c:a5:6a:c7:dd:c7:f5:6f:ed:0a:f7:
16:14:d5:7b:2f:46:a4:69:bb:5d:b1:d0:77:dc:c3:0b:59:08:
72:24:8b:f4:7a:99:2a:80:26:65:68:d0:36:c3:d6:c2:94:2e:
0c:99:71:7c:15:a5:05:0d:75:75:90:51:fc:50:c1:65:59:6d:
fa:24:be:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:49 2025 by rpki-client