Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: vs/wupJaCXIe9rd/m2+seRumjzi5j4A14ojm7Dz1oAY=
Subject key identifier: 5B:6E:7C:0C:6B:F2:35:1E:FE:47:2A:54:74:21:AE:C5:A0:3B:39:15
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 0194BC3C895FB84DBFB47C6B4999CAE07355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: 7WOP-_-MOSfX89KKSoy6v0ZdGmI.roa (hash: K5alUaOgD5qLhUU0KdZTL8p6umuUwQibq8QwoQYmgD8=)
2: HCoi5HM2CS9n54Michmh4KOI3ek.roa (hash: jtTZBvxkebDPFdaXtrlo0EAEQkLMF8pkeRtYqCQ7D0I=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: dkdD6XH5XDoRmJG9hpA27DR3HEUnxsj8rwuKA8W8CeA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:89:5f:b8:4d:bf:b4:7c:6b:49:99:ca:e0:73:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=5b6e7c0c6bf2351efe472a547421aec5a03b3915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4c:17:12:3e:b5:57:9b:2e:d6:e1:ab:b3:00:
20:52:bd:0c:ad:00:26:4f:43:41:f4:1f:75:d2:36:
aa:5d:8c:ac:6d:0d:7c:ba:13:19:07:7a:e3:2a:3b:
54:1e:03:38:72:66:22:cf:a4:c6:3e:27:34:c6:5a:
41:d0:3b:ae:5a:24:5f:e5:8b:ff:5a:77:ac:64:58:
c0:96:47:f6:c2:ea:fc:99:1e:fa:5f:7c:74:1a:bb:
c8:87:bb:27:c8:26:7b:4e:ab:61:0b:23:0f:30:85:
27:e0:70:60:7d:b8:d4:39:f3:4e:da:33:9a:89:c4:
0e:c7:b1:22:27:fb:3d:3b:69:56:02:7a:d1:af:b8:
07:2f:2d:6b:5f:ef:6f:e9:6b:99:bb:d6:36:fb:94:
b4:98:24:a1:0d:38:6b:b4:59:60:fc:4d:43:75:33:
2a:f7:1b:76:b0:8a:be:3a:37:8e:e1:ef:35:42:e8:
fb:9f:6b:14:12:22:ee:cf:c0:ba:f7:67:6d:59:64:
73:9f:0f:e1:36:48:49:e2:d8:a4:bd:ae:e9:9c:8a:
9b:05:2d:da:db:63:f0:d2:81:b5:69:43:2b:8c:08:
4f:5b:df:4c:c8:c2:3f:63:8c:87:89:b8:02:93:64:
1a:2f:e8:b8:24:45:fb:97:5c:89:bf:6a:75:06:4b:
48:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6E:7C:0C:6B:F2:35:1E:FE:47:2A:54:74:21:AE:C5:A0:3B:39:15
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4c:24:2d:f3:96:6a:05:d8:0c:a9:06:75:3f:92:19:c3:d1:
6e:e0:99:e5:08:57:11:1f:20:7a:c4:bd:b3:31:e1:ff:7c:62:
3f:7c:5a:af:ba:ae:e1:35:5f:7f:39:fd:9a:34:ba:ea:76:74:
68:c9:f9:81:e7:80:78:b0:5f:20:9c:ae:48:49:fa:b6:c8:e1:
0c:0f:b0:f3:b6:55:d1:4a:ae:7d:1a:39:30:b6:0b:97:7c:bf:
77:ff:2a:99:d3:34:64:1c:39:fb:24:f9:2e:de:7a:6a:56:d5:
0f:39:25:b3:59:be:4c:99:26:af:85:5d:67:cb:a2:e8:12:42:
dd:bd:1e:e3:d5:be:40:b2:d9:0a:3f:d8:f1:ea:07:05:9e:83:
6d:1e:12:66:71:cc:ce:ba:d7:16:37:62:43:95:54:d6:55:74:
49:8f:88:dd:0f:b0:7e:d0:e3:62:d1:05:e1:e6:a3:46:b8:d6:
5e:2a:30:ea:79:0e:c0:63:2f:bb:97:6c:81:27:0d:70:00:c2:
c2:21:c0:8f:39:d0:ee:73:80:25:6c:1a:8c:32:95:f4:64:af:
08:36:fd:8b:ea:30:82:cf:f5:a3:77:8a:d2:04:c2:41:6d:a2:
7e:c4:c5:ec:92:ba:8f:08:bf:85:75:6f:01:0b:1e:87:91:46:
24:e1:0b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:28 2025 by rpki-client