Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
File: pPP3bj7O8kl-ET6ju664U_YvWP4.mft (raw, json)
Hash identifier: qWUx27Nl4dqxzcj+nxu3qytN5Mgsy8+Q6nUA7qb34lA=
Subject key identifier: 6C:81:36:AD:7B:5A:32:49:CB:C0:42:CE:05:94:F9:AC:BB:8C:EE:40
Authority key identifier: A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
Certificate issuer: /CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Certificate serial: 0195E0467CB3C0028ECA6FFC933A5A179474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
Manifest number: 0B56
Signing time: Sat 29 Mar 2025 05:01:10 +0000
Manifest this update: Sat 29 Mar 2025 05:01:10 +0000
Manifest next update: Sun 30 Mar 2025 05:01:10 +0000
Files and hashes: 1: 66ywR3ba4enexaVdWoqndnOvp4U.roa (hash: Qkz3r6su/bj0dLkhbVaX1i/95TsjjuS65tg9qxOjli4=)
2: pPP3bj7O8kl-ET6ju664U_YvWP4.crl (hash: CcHzbZWAn/aeMd1oKTtweVa3u1m4y9Ko4yoR1zb6X9U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:7c:b3:c0:02:8e:ca:6f:fc:93:3a:5a:17:94:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Validity
Not Before: Mar 29 05:01:10 2025 GMT
Not After : Mar 30 05:01:10 2025 GMT
Subject: CN=6c8136ad7b5a3249cbc042ce0594f9acbb8cee40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ec:1c:9d:a7:a2:f0:c0:0b:0c:22:ed:b7:69:
8d:7b:13:2b:65:10:36:50:92:31:d6:96:66:36:0f:
9d:bf:0d:0b:91:29:f8:bf:00:f5:51:76:c5:3e:81:
a4:c3:9c:07:b3:4e:bf:d1:df:68:ef:33:38:06:03:
52:69:8f:09:5b:71:b2:8a:0d:50:eb:5c:89:b4:45:
82:7b:e6:5a:86:3f:a8:13:2f:2c:79:66:07:fa:4d:
49:46:51:ca:92:16:f1:a5:50:99:1f:04:29:b2:cf:
e7:2d:49:80:65:f5:76:a5:18:a1:aa:2f:5c:da:64:
4a:72:19:f6:01:13:d1:70:88:8e:6f:67:73:df:30:
39:e8:c1:84:da:66:5a:2d:3e:86:d9:6d:76:4b:bd:
86:8a:60:37:fc:52:ae:5d:cd:1e:94:7c:d5:e8:21:
7f:c4:5c:c4:f3:48:a0:28:13:66:f3:ab:a0:fc:2b:
7c:1f:92:a1:fc:e8:e5:ae:8f:76:c5:48:ec:39:0f:
cd:f1:88:d6:9a:49:dc:cd:2c:73:f2:0f:11:31:19:
46:3c:4b:64:eb:b9:cd:43:2e:2c:e9:a6:f0:9c:14:
5a:ad:dc:90:8d:be:e5:01:64:3d:4e:3a:4e:2b:08:
b6:5c:96:9c:12:a8:0e:0e:e8:e8:5f:de:1b:37:7c:
18:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:81:36:AD:7B:5A:32:49:CB:C0:42:CE:05:94:F9:AC:BB:8C:EE:40
X509v3 Authority Key Identifier:
keyid:A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7c:bf:25:a4:f4:08:b4:30:18:03:aa:4d:72:90:ee:9b:a9:
e7:ca:e9:29:bd:be:f0:14:89:f2:06:74:4e:0a:9f:57:f8:cd:
a6:c3:35:fa:bf:37:5a:85:c2:a9:b6:01:ec:08:80:2c:70:b1:
36:0e:d8:a8:84:6f:1c:89:bc:65:b4:76:38:ed:54:7a:ad:39:
e7:ce:b6:1a:a2:f0:89:29:17:28:f8:07:3c:6a:5b:84:c9:61:
9f:d5:9b:1d:41:a8:78:24:e1:cc:73:0b:50:37:71:9e:1c:32:
37:b7:54:52:cd:38:22:f7:eb:49:4e:66:38:c2:98:5c:81:1f:
c4:14:4b:3d:ac:6e:fe:1c:32:4e:72:f0:40:46:51:2d:78:83:
9b:ec:94:36:95:a5:22:61:50:b9:0c:4b:f9:7a:c5:3c:aa:e6:
0d:48:9d:c2:3c:09:62:ed:1d:88:e4:d1:2b:5c:c1:0b:aa:ac:
17:e3:35:55:38:2f:ab:26:bf:87:40:4b:2c:9e:59:2d:6e:c5:
03:08:6a:2d:27:ff:e8:8b:9a:2e:e1:c1:bc:83:08:65:e0:97:
a3:4e:14:fe:88:60:7c:79:26:25:5b:cf:40:ff:a8:5f:03:6f:
e5:6b:7f:28:ad:87:3b:27:4b:8b:81:e0:3f:34:05:95:54:2e:
c4:99:b4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:19:44 2025 by rpki-client