Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/34dab0-985f-4376-99ce-2616ce59f021/1/P53wKqq4OkGIYf1FnY9egVOjKW8.mft
File: P53wKqq4OkGIYf1FnY9egVOjKW8.mft (raw, json)
Hash identifier: UOwoA7dc0U0jjUAQpnC6q0cRHzMh1KINMLb9WQ4WN5M=
Subject key identifier: 91:79:E8:16:E5:99:19:B7:B4:6C:EA:E9:DF:33:8F:4C:FA:22:74:3A
Authority key identifier: 3F:9D:F0:2A:AA:B8:3A:41:88:61:FD:45:9D:8F:5E:81:53:A3:29:6F
Certificate issuer: /CN=3f9df02aaab83a418861fd459d8f5e8153a3296f
Certificate serial: 018F16A173EA72A077A0CE7CAEDD4E4DD7B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P53wKqq4OkGIYf1FnY9egVOjKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/34dab0-985f-4376-99ce-2616ce59f021/1/P53wKqq4OkGIYf1FnY9egVOjKW8.mft
Manifest number: 04AE
Signing time: Thu 25 Apr 2024 19:00:30 +0000
Manifest this update: Thu 25 Apr 2024 19:00:30 +0000
Manifest next update: Fri 26 Apr 2024 19:00:30 +0000
Files and hashes: 1: P53wKqq4OkGIYf1FnY9egVOjKW8.crl (hash: PVEbbEvCWlVS+fdKkT5KnD5pINR1xa95KMHyx3vn4Gg=)
2: jGvMJBlderh0ncRki7ERzzvv0Zk.roa (hash: 1m4zdRbBS539XuY3IMgCHUcWXBQXJDU5mTrmqd3WQsU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:16:a1:73:ea:72:a0:77:a0:ce:7c:ae:dd:4e:4d:d7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f9df02aaab83a418861fd459d8f5e8153a3296f
Validity
Not Before: Apr 25 19:00:30 2024 GMT
Not After : Apr 26 19:00:30 2024 GMT
Subject: CN=9179e816e59919b7b46ceae9df338f4cfa22743a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:cf:ff:cf:39:94:0e:3d:6f:d3:53:6e:9f:
98:4d:d5:b9:9e:e7:d4:ea:bb:65:19:5d:35:7d:f2:
af:6a:2e:32:38:c7:7e:51:b6:fc:bf:35:4c:28:53:
64:59:6e:d4:77:40:b0:7d:7b:9f:49:a1:6b:35:1b:
47:dd:46:8b:1c:0f:89:cf:16:50:74:6e:f2:11:40:
b7:3b:3e:34:95:93:85:4d:4b:1c:c7:eb:9b:a3:01:
f4:99:c9:40:9a:9d:91:80:52:6d:48:74:14:10:44:
45:4c:07:8c:9c:a1:f7:a2:82:58:a7:84:38:d7:2c:
c9:3c:d9:2a:a9:b7:fd:46:14:98:04:4c:9b:27:30:
45:34:76:9c:65:df:09:47:85:0b:63:cf:38:e7:f5:
a8:31:89:95:7b:32:e0:72:9b:46:20:5e:2c:b1:d3:
8f:17:70:9b:ea:3b:41:84:a3:18:d3:31:45:c1:b6:
f5:b4:71:a6:25:8f:87:2a:e1:e7:7e:2a:a5:dd:b6:
6d:6f:50:98:41:b8:86:af:0e:65:1a:d8:11:c8:b4:
5a:d6:de:77:30:fc:c5:c7:de:ea:9e:6b:59:22:a1:
48:4d:c3:1e:10:1b:e3:b9:9d:cc:52:61:77:14:8d:
15:e8:e3:d7:24:d1:9d:8c:f5:f1:57:1e:3f:e6:47:
31:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:79:E8:16:E5:99:19:B7:B4:6C:EA:E9:DF:33:8F:4C:FA:22:74:3A
X509v3 Authority Key Identifier:
keyid:3F:9D:F0:2A:AA:B8:3A:41:88:61:FD:45:9D:8F:5E:81:53:A3:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P53wKqq4OkGIYf1FnY9egVOjKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/34dab0-985f-4376-99ce-2616ce59f021/1/P53wKqq4OkGIYf1FnY9egVOjKW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/34dab0-985f-4376-99ce-2616ce59f021/1/P53wKqq4OkGIYf1FnY9egVOjKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7e:9d:5e:99:bf:53:ac:18:64:22:33:ab:d8:2b:95:45:a4:
0e:1c:66:14:d8:8b:d6:f9:0a:0f:09:52:c0:95:3a:b8:93:23:
18:48:b3:a4:cb:c5:6b:f9:d5:0e:6b:a7:da:d2:b0:79:c3:0b:
1c:2d:4a:78:4f:21:55:64:51:72:89:83:0f:1f:8e:d4:dd:c8:
48:ed:e1:fd:5f:bf:fc:41:de:6c:1e:cb:cc:b9:4b:9b:76:87:
1d:20:6a:2d:d0:b7:b3:d1:d0:19:84:d8:fb:09:3f:51:7b:d3:
8b:6f:50:a7:09:6a:c6:c4:2d:83:29:2b:e7:70:3c:3a:f7:2c:
8b:c9:02:38:5e:bb:48:e8:4f:d3:90:c6:6b:51:36:6d:69:ac:
46:8d:a5:b2:30:8d:5a:6b:0c:11:f0:94:03:63:ac:95:ee:07:
63:d1:d4:1a:6a:81:50:57:44:ac:a1:3b:c9:c4:06:5b:24:d8:
bd:9f:c0:9b:4f:86:2a:e7:c2:b6:13:83:41:3f:77:98:24:99:
f8:f8:4b:33:eb:7a:cb:8f:12:50:a4:b1:f6:f0:c9:d9:e8:53:
1f:3f:88:2d:2d:e5:fc:7a:64:bc:00:39:b1:20:a7:b1:22:a0:
e8:ce:5b:b4:f7:3e:58:9e:27:19:ce:1c:c3:ee:28:ff:e9:64:
f0:fa:ff:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:25:00 2025 by rpki-client