Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
File: Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft (raw, json)
Hash identifier: Fr8SDLJkRnMyBdUc6yG+Ur04vUuSmE4dqBVkDLP4yMw=
Subject key identifier: 84:A3:95:F9:04:F1:52:AB:4F:05:87:85:B6:45:61:E3:55:3A:39:6A
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Certificate issuer: /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial: 0194BC051DF9F12420A7DA02148481D20D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: 3oSlrT_DUhFvQJ6zfs8CrZzLtN0.roa (hash: kD23fxg6HJol+5c+jQle3o8CP0BhvDm3gW0I2oTpUsE=)
2: 9ZGSbvVWGJA03vrSyQUEVarRr-4.roa (hash: cPvp9kLsR1g5wI6QgkJQ/4iEUD2cM7N5TL8rSHXBr1c=)
3: Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl (hash: rmp3DbQrCuUDjxAElNuezezQR3i3XLLMSyuHOOZhApQ=)
4: k6_D03YidxIC349EjXRq0tAB-Qo.roa (hash: EeEY/m7OL+tVaal0Hy7U3tDs+glAoHmKchjSxGhakus=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1d:f9:f1:24:20:a7:da:02:14:84:81:d2:0d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=84a395f904f152ab4f058785b64561e3553a396a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:4a:bb:79:cc:9a:14:a9:29:d0:2a:b7:cb:
57:2c:49:df:c5:54:e0:6d:7b:7f:07:2d:66:94:72:
75:ee:a8:4a:42:7e:7b:b1:1f:e9:ef:27:6c:e0:77:
95:3c:d4:68:cb:ec:02:1a:50:69:f3:32:86:02:c4:
1d:48:60:4d:99:18:0b:0f:8f:d0:8f:20:92:b6:55:
df:10:d6:e5:97:8c:51:28:6d:2b:14:65:31:87:48:
07:6b:27:61:65:52:2d:29:39:5c:f3:ad:57:ec:54:
a3:6c:58:3f:83:2f:4d:73:8b:cd:91:bb:7c:9e:3b:
56:f0:f9:5a:8e:e7:0c:5c:b1:3b:74:6b:72:a8:1b:
d1:b6:62:e1:5d:b4:1b:45:9f:30:e5:0b:37:78:ce:
8b:21:d6:38:4e:92:7c:a5:d4:9b:f0:99:9e:54:6d:
4d:17:3a:bb:6f:45:0c:36:4e:b6:2e:64:bf:2d:55:
ce:14:f0:53:63:16:c5:7d:fa:fd:9b:e1:58:e2:3e:
a0:95:46:47:2f:10:e8:03:85:46:90:d7:3f:0f:6c:
d8:c6:9e:30:ba:af:67:9a:5e:fc:86:19:5c:8c:c1:
be:cb:bb:1d:b1:08:81:a2:33:df:fb:9d:d3:df:41:
3a:b5:b8:31:35:63:15:25:19:41:af:72:c5:d9:36:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A3:95:F9:04:F1:52:AB:4F:05:87:85:B6:45:61:E3:55:3A:39:6A
X509v3 Authority Key Identifier:
keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:76:ea:01:fd:64:c1:7c:a1:ca:de:8d:bd:c4:47:75:48:98:
14:32:22:fa:e8:c0:b7:ab:33:79:73:db:84:84:3e:b3:38:3c:
39:1f:98:09:89:a1:58:57:49:21:b1:75:52:99:87:26:20:89:
1e:74:cc:39:1b:14:c1:ae:ce:fa:74:e0:70:99:b7:ab:89:68:
b5:b0:e6:f8:82:82:8b:6e:0f:91:b1:20:31:26:97:cb:7a:ff:
c6:62:e5:b0:dd:54:9c:7f:88:23:12:b8:3e:33:4f:b1:85:99:
a0:2b:1c:99:b7:25:ee:22:74:c1:56:3f:b0:83:78:91:7e:4c:
04:6b:4f:d3:eb:e2:56:16:78:ff:88:36:27:90:62:c5:16:5d:
7c:a1:f6:70:41:12:be:b1:f8:60:20:0e:83:aa:de:b2:ee:45:
ca:be:6d:50:af:cf:ee:b7:f0:28:76:f5:d9:95:cc:41:1c:96:
6a:67:e7:01:d9:c0:04:11:bd:9c:ad:f8:7a:ae:ca:3f:41:4f:
b5:4c:1c:64:bc:53:88:dd:2a:27:24:69:8c:dd:1b:4f:ea:ee:
a3:65:fb:85:0c:d1:47:b9:58:27:89:80:e9:8d:b8:95:57:f8:
db:ae:3a:54:14:f6:3d:94:51:dd:be:ee:31:56:77:5e:17:3c:
ee:bf:dc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:54 2025 by rpki-client