Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
File: pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json)
Hash identifier: 0HnnxMs+3Ne3LobkoFU7Hzbv1Zq0sNjK5A/k5ANg6iM=
Subject key identifier: 8B:B5:AD:5F:C0:8F:08:29:FA:E5:95:B8:11:68:9C:27:DF:CF:E2:12
Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
Certificate issuer: /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Certificate serial: 0194BD4EA2D14F0FEA2CF3BE25E307477727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
Manifest number: 0F54
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: f3RSa/1BOn1/Uhf9sgexqMllaJOQenZM54cIr6lOuCo=)
2: wmP5bMOGyarS60pVYUn3YSNOkzU.roa (hash: dH7mhtw2CqlUgKyAjfzIndFqDCSJYD0W6bKpYCAp4x8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a2:d1:4f:0f:ea:2c:f3:be:25:e3:07:47:77:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=8bb5ad5fc08f0829fae595b811689c27dfcfe212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:0a:7e:af:ff:ca:27:1d:7a:59:73:b3:99:
25:7b:d2:11:bb:bb:38:57:e8:5c:02:83:3c:73:c1:
e0:7f:4a:54:81:6d:7d:fd:f4:3a:aa:74:b3:df:c8:
0f:b1:63:db:d2:d3:7f:35:dd:32:d5:1a:12:30:f6:
67:4e:f4:f0:e9:d8:47:f2:d2:23:da:fc:e4:a1:81:
c9:f6:11:d6:be:54:1d:3a:73:e9:40:5c:71:45:b5:
d6:a0:0c:5c:92:06:31:da:2e:43:80:9d:11:7f:6a:
74:ec:3e:d1:2b:94:20:81:b9:c2:f3:4e:1b:2e:d8:
0b:9b:90:42:d4:26:b3:11:80:7f:2a:73:5b:c0:57:
47:2e:e7:1c:3f:1a:94:0e:91:be:c7:08:2a:d1:fc:
d8:7f:ab:e0:b1:40:9e:51:32:9b:73:8d:fb:82:e0:
1a:02:37:7c:b1:4a:aa:6c:32:0f:7f:d9:e8:94:99:
9b:01:3f:ed:f5:9b:1c:3a:35:e5:91:55:0d:00:e1:
e9:a7:59:bb:96:57:55:4f:0e:1a:f5:ba:89:25:3e:
55:52:fa:ef:f7:65:9d:46:f3:e6:b8:53:b7:8f:e9:
0d:22:ff:cc:ff:b4:84:5e:e0:fd:a0:2c:67:b6:81:
59:a3:53:24:0b:99:a1:95:e3:15:8f:f6:ca:76:6b:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B5:AD:5F:C0:8F:08:29:FA:E5:95:B8:11:68:9C:27:DF:CF:E2:12
X509v3 Authority Key Identifier:
keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:61:9b:89:92:9b:c7:8e:85:7d:f1:07:dd:53:5d:c9:91:e3:
58:6d:3b:60:24:3c:19:53:70:c2:34:5d:d9:43:3a:21:23:ea:
1d:2f:85:34:60:24:25:cf:d6:e7:78:44:4d:5d:d7:e3:b1:ee:
8c:90:86:74:4e:6f:2c:89:44:4f:1d:e7:45:ad:7c:b7:5d:57:
a7:27:d7:a3:54:7f:83:22:65:ff:e3:1d:c5:1b:b7:e4:7a:0b:
33:69:8c:a3:e8:6f:0c:87:fd:09:26:b6:16:40:bc:50:b6:64:
af:3a:11:58:13:63:f1:f9:4a:c8:b6:0b:6d:77:8e:94:fd:5a:
f8:0f:5c:24:b7:0b:83:69:98:73:00:42:2e:1b:76:e8:22:6b:
96:7c:86:7c:d6:05:a6:59:25:a7:e7:19:b5:32:cc:b0:ac:ea:
9d:3e:88:bf:ed:48:4f:70:88:37:dc:bd:0f:26:4b:35:a8:75:
4f:0b:f7:b4:88:57:d3:fd:4a:21:16:54:58:8e:41:97:dc:b1:
2a:52:0c:e6:af:9c:a7:37:12:7a:e2:9b:f0:8e:40:0b:1a:52:
55:dd:6e:f1:38:9b:f3:75:c5:9c:11:d9:0d:69:d3:0b:58:a6:
4d:8f:97:41:4a:25:7a:a9:00:fb:15:6b:6f:fa:09:d8:f8:82:
85:1f:7c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:41:44 2025 by rpki-client