Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
File: pgD8lkBCiaxYthBH3fhiGH9asn4.mft (raw, json)
Hash identifier: mHL/4dzHRpcWMb0RHVP+rmpgi82j+yhdrRCV39TfrsE=
Subject key identifier: 0E:C1:EE:E3:A2:55:7F:AC:E8:4E:D4:38:69:0C:63:93:8F:1E:0D:1A
Authority key identifier: A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
Certificate issuer: /CN=a600fc96404289ac58b61047ddf862187f5ab27e
Certificate serial: 0194BC0524167D2CB588E141F4588B9EB32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: BFaJClF3p4qT7dCc22lWmwjl7l0.roa (hash: 8kW6E4fmgwFFVui51mNwFwgDzJW114zoN23nienu6x8=)
2: pgD8lkBCiaxYthBH3fhiGH9asn4.crl (hash: panf3se/s91R/x1XWcQOJFxUvQmK5OYZkcDUK26Dfb8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:24:16:7d:2c:b5:88:e1:41:f4:58:8b:9e:b3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a600fc96404289ac58b61047ddf862187f5ab27e
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=0ec1eee3a2557face84ed438690c63938f1e0d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:df:6c:51:98:91:13:f5:0f:fb:64:1d:21:fa:
e4:9d:70:7d:94:a5:e4:49:14:fc:34:7f:bb:5e:70:
39:84:5a:8e:9e:59:ee:ae:9e:c3:ee:36:ff:2c:eb:
aa:b8:3f:76:ee:d3:f9:dd:dc:cc:d2:4a:52:a2:bf:
b9:bf:6b:93:7f:2a:6e:88:1e:fc:22:f7:87:5c:f6:
8d:59:3a:46:d9:44:b4:10:e1:ff:4e:f7:3f:bb:6f:
2f:c9:a3:f3:30:fb:70:7a:a7:80:d5:7a:c2:4c:81:
32:dd:42:83:0d:5f:90:be:01:01:43:52:33:af:e2:
69:f7:63:54:a7:6e:0a:52:74:49:d9:6e:23:c8:2d:
ac:0d:54:37:ba:0e:19:70:d0:b8:dd:c6:bb:2b:d7:
90:dd:a1:59:02:60:8b:f0:7a:a3:0e:58:85:59:15:
59:ef:fd:a5:1b:86:e5:7b:55:e3:50:c3:d6:1a:ee:
19:39:dc:f4:d4:df:03:31:93:99:56:01:85:b6:83:
38:73:b0:e6:e8:2f:0a:44:de:02:7e:76:34:91:6b:
cc:91:79:3b:b5:61:d3:93:e1:39:70:fc:29:f7:62:
97:04:f3:fd:8b:50:67:2a:8b:ab:5c:69:60:a4:5b:
84:40:9c:ca:2b:91:77:fc:f5:b6:de:ca:df:e5:7d:
3b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C1:EE:E3:A2:55:7F:AC:E8:4E:D4:38:69:0C:63:93:8F:1E:0D:1A
X509v3 Authority Key Identifier:
keyid:A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:11:8f:8a:3a:7a:1d:b4:f1:73:d7:59:8a:ec:02:37:d7:72:
5c:5f:cc:9c:70:b0:f3:e6:d4:b7:75:1e:c6:ed:8a:5d:c8:14:
49:ae:5d:65:4e:91:ce:07:be:b2:a6:bd:24:e1:51:51:2d:45:
89:8d:46:96:fa:4d:da:d6:62:d6:3b:bd:f9:c1:92:c6:01:ed:
c5:b2:5a:2b:c3:1c:e4:c4:58:87:de:5c:90:cf:21:e0:c9:f7:
87:e8:31:a1:a3:7f:13:de:5e:47:d4:77:73:4e:6d:bf:42:50:
6f:6f:53:90:98:61:79:52:d7:a5:42:86:1e:92:c3:f3:1a:4d:
63:4f:d7:c3:13:cb:a8:b9:2e:42:85:04:ac:e6:f8:5d:f3:01:
84:17:ea:8b:6a:b4:56:32:c9:ad:09:93:ff:8f:e7:8c:8f:df:
62:57:a2:66:7c:b6:c7:68:70:94:c4:8a:24:e8:b1:a9:01:27:
c1:be:82:1c:71:c3:76:34:e7:9c:34:3e:af:c0:82:75:e1:e4:
ea:9c:48:d5:1c:e8:dc:8f:42:3a:c9:88:6d:e8:61:04:ee:88:
91:c2:48:e6:5a:e1:be:4d:40:ac:e4:a0:02:e9:38:c6:36:30:
16:cd:49:b2:d5:be:aa:00:22:54:1a:5c:77:92:87:47:0d:e5:
01:28:de:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:10:21 2025 by rpki-client