Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: ZsomNvsuoKRm5COFrqJjHDKzWaWx5MiVx5nwCUJQA34=
Subject key identifier: BE:B2:FF:67:8A:A1:CF:88:85:89:D1:48:DB:28:31:F6:EB:4D:96:96
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 0195DFD947604D606F9FCC23634164CD5648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 14C5
Signing time: Sat 29 Mar 2025 03:01:53 +0000
Manifest this update: Sat 29 Mar 2025 03:01:53 +0000
Manifest next update: Sun 30 Mar 2025 03:01:53 +0000
Files and hashes: 1: 2dLH0vNFJnWg2lZelybNLzc06cc.roa (hash: r/Z+8xB7CHc6LECAv+vBuRY+QqUaeEKJ5DtFzihx2Zs=)
2: HtYH7IfWThQC0FjsfIOLJnPcCb0.roa (hash: JQOoHMUiGQozF5WEbUjnDZo1IaMc3weZxMTmvWza6pA=)
3: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: EdrvzORkDDoYS7Hvdy/ayJYMEMnLLPAXZxi3Yof3jGc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:47:60:4d:60:6f:9f:cc:23:63:41:64:cd:56:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Mar 29 03:01:53 2025 GMT
Not After : Mar 30 03:01:53 2025 GMT
Subject: CN=beb2ff678aa1cf888589d148db2831f6eb4d9696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:d3:ba:32:a8:a2:ae:6f:6f:b9:eb:96:b9:
d3:e5:9d:d2:9a:5e:88:ea:9b:ba:21:5d:d4:36:55:
a0:ae:be:2c:c8:4a:59:c5:75:64:d2:c3:73:66:0e:
64:9f:08:7d:73:bb:10:6c:7a:b1:b5:f3:d7:6d:47:
46:b4:9d:9c:c8:7b:54:6a:d7:ef:d2:77:66:a1:f6:
de:f3:05:0f:96:81:fd:2d:8a:e9:c3:4e:81:85:84:
5c:29:a2:e2:b5:be:99:bb:ce:50:1e:9c:82:1d:85:
4d:27:a7:ca:d0:c6:48:a6:67:ab:fc:6c:b1:d1:f6:
a1:8b:50:f5:ab:f9:13:ac:d5:79:8d:76:94:fa:50:
fb:e1:a1:ef:11:56:c9:be:76:53:66:a3:b5:32:34:
f8:21:fc:27:e2:a3:7c:cb:c7:f6:8a:ce:e0:91:7c:
ba:5b:cf:2f:e1:9e:ee:83:06:0e:6f:20:1c:56:78:
7f:d1:67:6b:bf:e3:f0:37:41:16:5c:f3:89:30:0d:
fd:f2:e9:b0:d0:96:3c:2e:e2:a3:97:3a:bf:69:c4:
d0:55:ce:87:a9:c6:7d:17:27:09:15:d1:1c:9e:3e:
20:b0:a1:b4:bb:70:15:76:9a:1c:46:27:04:d5:27:
7c:8b:f4:db:56:df:06:8a:3d:99:98:4d:0f:0c:64:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B2:FF:67:8A:A1:CF:88:85:89:D1:48:DB:28:31:F6:EB:4D:96:96
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5d:c6:d7:91:0d:23:f5:21:00:0f:ad:2d:24:46:e7:f7:67:
91:2a:ad:c8:3f:95:89:dd:8d:74:0d:02:e3:b4:56:3c:f9:3f:
53:65:fe:8f:f5:e7:6e:ed:e4:ef:e2:8d:e9:42:94:9a:56:4d:
c6:c6:5f:73:dd:ff:7c:b7:9b:78:9a:b4:5d:72:39:28:e8:cf:
c4:2c:5a:5a:c3:3b:85:9d:44:58:a2:8e:a1:6f:6f:bf:fb:f5:
6e:34:8a:3b:0f:21:01:b9:5f:96:74:e7:f4:3d:e9:d1:4e:b5:
4a:bd:7c:10:9b:5c:4f:e0:c6:13:62:3c:af:06:89:fd:57:26:
79:f6:d1:63:e1:b8:19:20:f3:e4:36:01:7b:8a:c6:02:5e:56:
3f:b3:08:39:2c:43:19:95:85:a1:48:fe:90:2c:8d:01:0c:ed:
c7:7d:ce:af:cc:bd:e7:59:b2:0e:0d:7c:eb:51:6a:4c:15:59:
de:df:5f:8f:8b:97:15:c4:37:20:b8:e9:cd:ee:ff:4c:11:23:
15:27:d2:fd:4d:62:1e:63:b8:e0:8d:35:01:47:27:6c:cf:95:
1b:c9:7e:55:f6:97:05:0f:15:9d:5e:03:10:2a:f9:2e:9c:92:
8b:4f:7d:41:7a:9c:7b:b5:f3:35:58:c9:36:e6:0b:0c:08:55:
c3:1d:dd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:59:54 2025 by rpki-client