Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
File: phqPZno93b1KNSMY2PBgbEbp8GM.mft (raw, json)
Hash identifier: rYTQyaSVVAJhPu2GA/T6iuDilSrxERiY55MtaBuZZzI=
Subject key identifier: 2F:37:02:F6:E8:5D:C5:3B:9D:9A:55:E9:8B:8F:BD:03:A1:D2:06:AE
Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
Certificate issuer: /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Certificate serial: 0194BC0514657FF353B739B4EA1452128E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: 1UVKiNRMJ_HImWl4v8Xm_ov2alc.roa (hash: 5flJUckS677lE7riT489EDvVCL32yj3m5+tviIp0Aik=)
2: ZmD1TA5j_WUZpHewze6nukzZJsg.roa (hash: +71Vr/FTpakGGRIUTsx4iBEKymM4Qh918F7HPx6zt+Y=)
3: phqPZno93b1KNSMY2PBgbEbp8GM.crl (hash: zWUCwZOtvo3/Qsimv/s7r5fVJ3qdJpXDtzmhx2Qg+9U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:14:65:7f:f3:53:b7:39:b4:ea:14:52:12:8e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=2f3702f6e85dc53b9d9a55e98b8fbd03a1d206ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:fd:c9:d6:28:27:70:12:0f:12:11:2a:39:
66:1f:b1:e0:56:ec:0d:b4:04:2a:ea:78:1d:32:0b:
1c:19:b8:1f:7e:1d:32:0e:9d:c8:87:32:d2:76:01:
c9:c0:83:70:7a:b6:6f:7e:28:73:a8:18:a9:9d:46:
5a:8f:a5:26:08:3c:72:9f:54:dc:ae:19:16:b7:11:
3e:8a:65:ed:06:d1:a5:b2:80:e9:03:22:1e:73:99:
ea:38:0f:14:aa:2f:68:93:fa:1a:74:96:11:0a:49:
aa:dc:51:70:94:8e:67:a7:cc:e8:a1:2c:3d:aa:a3:
0e:2b:d4:e6:cb:df:e8:d9:d0:4c:ed:1f:e9:01:97:
30:c9:ae:36:06:9b:4d:c2:4b:d5:ee:6a:18:54:81:
e4:1e:20:f8:39:ed:05:c7:19:cf:50:52:c3:77:c3:
a3:45:2b:88:3d:1f:61:4a:5e:d4:5d:b3:1d:4f:7c:
3a:f0:78:e2:d8:6a:14:4a:2f:05:2f:56:63:4c:92:
13:5e:01:c4:44:e4:37:ab:23:a1:48:86:b1:82:5e:
89:b4:1c:26:d0:b9:56:fb:83:86:64:53:dc:98:cc:
ea:3b:74:07:29:80:9e:73:47:16:99:b2:9c:df:ed:
79:e4:08:ea:a7:ed:f3:a8:c9:b1:90:4c:85:f1:c0:
2d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:37:02:F6:E8:5D:C5:3B:9D:9A:55:E9:8B:8F:BD:03:A1:D2:06:AE
X509v3 Authority Key Identifier:
keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:48:c6:40:92:98:3f:af:ab:ab:ad:11:61:1b:c4:4f:bf:19:
16:43:4d:4d:a9:7c:ee:8f:99:2d:27:97:0d:3b:fc:41:c1:e2:
1f:9c:ca:ff:8e:c0:95:88:e2:3d:23:c9:b9:72:46:ef:f2:2c:
51:16:de:85:ad:a4:ad:32:42:11:af:27:12:3b:f0:96:09:d2:
4b:95:7b:83:5a:02:e7:07:b2:e8:6a:70:30:18:f0:a6:2a:8b:
58:e6:0b:a5:f8:7a:ac:e8:cc:10:db:ca:18:67:d1:45:9b:0f:
fc:2a:21:c6:3c:35:d7:6a:9b:86:18:4c:4d:89:0b:2b:17:38:
19:90:14:f2:c7:52:d8:88:73:45:e4:64:ab:36:33:76:e7:69:
3e:fb:67:75:23:4d:5c:93:e9:bb:58:65:e1:54:70:80:c6:ff:
8c:e6:1c:dc:52:06:9c:80:68:a2:ab:61:91:73:cb:ee:de:20:
65:60:eb:50:ab:5c:6a:2d:75:f6:d2:85:25:e1:88:64:89:5c:
02:35:b6:f7:f1:54:0a:4c:00:0e:88:3b:8d:9b:79:a7:3f:91:
79:50:0e:ad:cb:d0:77:e1:78:2c:60:5a:3b:e5:ae:93:af:f3:
e4:06:64:0f:06:82:6a:05:a0:f9:16:3e:d0:fb:5d:49:bd:41:
82:23:0e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:38 2025 by rpki-client