Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: IUo7fpixqL7WJp29LwMO3BGmrBGXzd/NcH9fvRg4dXs=
Subject key identifier: 14:5F:85:53:4D:B2:E8:F5:D8:13:51:61:5E:B1:30:98:EF:CA:05:47
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 0194BD1758BADD4CB1DC5CF0D03C38C6FAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 039D
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: AKpMQvIIqQzXRs3Ululs7jvONDY.roa (hash: BIy70VCzVM+Xa+CdmKbiFZkREDOaRaKjJ7xUey551TY=)
2: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: ca8OaeAUZYSvU11ofhyOWldAM2KDZR3oVfb7B5Ed8Ww=)
3: xwhdiFLdj-4M8l9XUnyeFRJXGwQ.roa (hash: VoSzy1kKxVH6beyOekb646N9QsT3/EG5ENUuXQtb21o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:58:ba:dd:4c:b1:dc:5c:f0:d0:3c:38:c6:fa:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=145f85534db2e8f5d81351615eb13098efca0547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:12:f6:72:72:2b:48:7b:54:eb:e7:c2:e7:ae:
7e:8d:ef:f2:56:d1:83:58:2a:02:7f:f1:b4:f9:97:
f8:6a:42:bb:43:b5:74:1f:e8:62:d8:ab:c0:72:b7:
69:1a:79:11:a3:f4:a8:c0:d5:15:95:bc:f6:27:f4:
3a:3a:80:db:36:77:7c:7c:b2:27:bc:6a:b9:f3:82:
e8:cf:4f:bd:2f:ef:de:16:33:d3:be:0e:41:5d:c3:
ce:15:79:58:e6:ba:2c:b8:7e:e6:09:61:05:3f:3d:
b3:87:66:e3:44:3b:27:4f:cb:76:91:88:df:9c:c5:
a5:a5:1b:52:4c:95:18:79:aa:5f:64:be:24:c7:a4:
73:13:20:b6:2b:12:b9:ce:e8:ab:ec:da:49:0e:1e:
c4:74:bf:88:79:d8:bc:2d:b0:ba:92:55:57:ee:21:
b9:c3:85:e2:79:75:aa:2c:01:6d:07:ef:b7:b9:80:
2a:8e:0d:d9:97:8d:21:81:a0:91:dd:78:d0:cb:3e:
37:03:cb:f1:ca:dc:ac:02:c0:44:19:47:79:42:17:
6c:e0:a2:64:f4:85:e8:d8:02:f8:62:3d:71:a9:c3:
96:bb:5d:38:fb:ba:30:65:2a:fe:cf:c6:2a:ba:32:
1e:e5:c6:f4:35:a5:c4:67:ad:df:49:03:8d:d4:f9:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5F:85:53:4D:B2:E8:F5:D8:13:51:61:5E:B1:30:98:EF:CA:05:47
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d9:e7:d8:7c:bf:e9:d3:99:cb:b8:20:7f:3c:e5:50:a2:cf:
cc:a4:c7:9b:97:e8:a4:a4:bb:76:fa:ea:49:14:62:2b:09:bb:
8b:60:5e:cf:81:bb:b5:b9:86:e5:76:b3:10:c4:61:ae:b4:db:
83:28:4e:6b:72:9a:06:77:a0:2c:51:38:d4:66:97:f9:62:49:
3e:c7:0a:9e:0d:a3:ec:c9:87:e8:a2:ea:3d:8c:07:21:24:1f:
35:47:e6:aa:6f:ac:b0:08:f4:9c:5e:20:53:cd:e1:88:54:5d:
1d:d0:81:ef:84:0a:90:cc:b7:ba:8e:18:7f:0a:03:fe:24:86:
6a:d5:8d:30:f7:58:d4:08:72:ce:26:16:c7:60:10:35:87:a0:
0d:05:a9:da:55:46:e6:58:4e:38:2f:cc:aa:fe:e1:04:d4:86:
8b:68:e2:60:0d:9d:0d:37:5b:a5:e2:d6:29:1c:10:b5:44:b2:
d2:bf:13:37:cd:a7:42:9e:7d:78:e4:5f:ab:ef:8d:1a:7d:6d:
39:01:6a:08:fb:cb:8e:87:8f:52:c7:48:7d:6a:c4:e9:3f:76:
38:da:05:4c:17:59:f5:57:e5:6a:b3:bb:ff:48:4d:73:7b:fc:
fb:ee:6c:f1:a2:75:4e:cd:bc:71:42:09:87:a2:95:6a:35:4b:
46:a6:5a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:11 2025 by rpki-client