Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/34dab0-985f-4376-99ce-2616ce59f021/1/P53wKqq4OkGIYf1FnY9egVOjKW8.mft
File: P53wKqq4OkGIYf1FnY9egVOjKW8.mft (raw, json)
Hash identifier: aZcF6ap5+X3A4cRtOcpGh/XV6UJNlZm64aAbKihoXUU=
Subject key identifier: 0D:35:CA:02:DA:3B:FD:7C:B5:FF:B1:0F:80:AE:97:C1:B7:CD:9F:77
Authority key identifier: 3F:9D:F0:2A:AA:B8:3A:41:88:61:FD:45:9D:8F:5E:81:53:A3:29:6F
Certificate issuer: /CN=3f9df02aaab83a418861fd459d8f5e8153a3296f
Certificate serial: 018F188FAD6DBB59AFB631480486CDCD5B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P53wKqq4OkGIYf1FnY9egVOjKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/34dab0-985f-4376-99ce-2616ce59f021/1/P53wKqq4OkGIYf1FnY9egVOjKW8.mft
Manifest number: 04AF
Signing time: Fri 26 Apr 2024 04:00:20 +0000
Manifest this update: Fri 26 Apr 2024 04:00:20 +0000
Manifest next update: Sat 27 Apr 2024 04:00:20 +0000
Files and hashes: 1: P53wKqq4OkGIYf1FnY9egVOjKW8.crl (hash: 1e+fEo0+R8TQZf1H4yhvi8HMSGFF4wOylrJnIZNlHjs=)
2: jGvMJBlderh0ncRki7ERzzvv0Zk.roa (hash: 1m4zdRbBS539XuY3IMgCHUcWXBQXJDU5mTrmqd3WQsU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:18:8f:ad:6d:bb:59:af:b6:31:48:04:86:cd:cd:5b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f9df02aaab83a418861fd459d8f5e8153a3296f
Validity
Not Before: Apr 26 04:00:20 2024 GMT
Not After : Apr 27 04:00:20 2024 GMT
Subject: CN=0d35ca02da3bfd7cb5ffb10f80ae97c1b7cd9f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:23:7b:66:a0:4d:3d:66:71:bf:fc:c8:0e:59:
af:78:42:30:59:0f:a7:38:b1:60:82:f8:ad:38:01:
89:12:70:a6:f9:08:93:40:e3:a7:f6:a2:ca:f5:82:
b0:ca:c3:3b:3e:31:70:a5:e9:00:3e:15:c5:6d:6b:
6a:17:97:08:2b:88:07:5c:a3:04:67:58:a7:5a:d5:
90:a1:a1:d9:c3:ce:ad:17:12:16:68:2c:5a:47:f7:
cd:1e:30:d3:2c:9c:fc:7a:0d:57:29:23:46:b3:ea:
24:fe:a6:2d:a8:4e:3c:ec:96:69:e5:f0:97:5e:b6:
99:42:e3:a0:67:71:71:43:a6:71:80:fb:ec:87:e9:
d7:16:60:b9:4c:3f:44:b2:96:12:c9:f8:14:8d:2d:
3e:1f:a6:98:8c:e5:3a:80:ce:50:ba:bc:f7:a1:48:
56:ae:cc:fe:80:6b:f1:3a:de:3f:63:94:c1:80:05:
5a:29:c4:8c:ee:e6:6a:86:e0:4e:3b:a1:a9:c4:d8:
94:e0:60:13:c4:ab:00:40:45:38:a3:96:f3:53:0c:
a7:b3:8c:f8:97:76:f3:ca:7a:ec:20:73:3a:ab:b0:
91:fe:5c:c9:be:d9:78:19:97:9b:d2:f4:97:b8:83:
e1:cb:17:37:d1:20:87:a6:a7:d0:36:33:9e:0e:67:
92:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:35:CA:02:DA:3B:FD:7C:B5:FF:B1:0F:80:AE:97:C1:B7:CD:9F:77
X509v3 Authority Key Identifier:
keyid:3F:9D:F0:2A:AA:B8:3A:41:88:61:FD:45:9D:8F:5E:81:53:A3:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P53wKqq4OkGIYf1FnY9egVOjKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/34dab0-985f-4376-99ce-2616ce59f021/1/P53wKqq4OkGIYf1FnY9egVOjKW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/34dab0-985f-4376-99ce-2616ce59f021/1/P53wKqq4OkGIYf1FnY9egVOjKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4b:1c:25:1a:63:7d:91:a6:2b:cb:68:2e:3c:8b:34:2c:a3:
58:d6:c1:df:68:8f:d7:d9:18:c9:03:25:cb:3a:61:e9:fc:09:
87:9e:4c:7f:d1:8d:62:c2:50:8d:4e:7e:0d:c0:49:77:4f:14:
b6:6d:f1:e7:fb:ca:4e:02:26:7f:2a:95:46:f3:e6:f0:82:8f:
67:7d:61:b3:ac:f9:33:b9:8a:85:d8:ad:c8:44:a4:7a:7f:84:
51:a3:93:66:69:59:e4:f2:c6:5e:b4:eb:4e:2f:76:d6:6a:f4:
49:df:99:31:41:cf:c6:2c:d6:2d:85:e9:57:fa:63:5b:f2:dd:
2a:a4:0f:30:89:70:c3:06:62:9e:be:b9:3f:fd:5c:1d:bf:8f:
6e:47:08:d7:0d:c4:4c:e8:0c:78:47:63:57:9c:d3:2f:64:33:
5b:31:ff:ac:6e:53:b3:4b:ae:53:97:e6:6e:96:8c:40:30:2a:
61:48:71:7f:64:54:8e:0d:a9:8f:9f:ad:55:68:89:8f:51:fd:
3a:64:91:73:72:3f:50:c4:ac:86:15:b2:e6:e1:b3:4d:f8:45:
27:ff:78:db:d9:2c:aa:45:f8:ab:bd:d9:fa:60:98:6c:15:94:
e7:e4:15:f3:6c:11:2a:3a:cb:64:83:db:9a:19:20:d9:2b:61:
e9:7e:48:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:28:37 2025 by rpki-client