Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
File: PxckOVmdfaUleXiZvyE7jmNVSRQ.mft (raw, json)
Hash identifier: OKj/Ttvskp99mfvAqz/imQIdCw1nkjrpvwk+zvydCGs=
Subject key identifier: 7E:12:6C:8B:ED:C7:97:C2:51:3F:4D:8A:64:D8:78:D8:96:81:79:BD
Authority key identifier: 3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
Certificate issuer: /CN=3f172439599d7da525797899bf213b8e63554914
Certificate serial: 0194BD4EC670BC945A4A5AB293EE60861CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: ET0yOb6N2KPn9sEOeciwveLzfFQ.roa (hash: 5UaUVXzPjnKQ9N0meCwxNszuKgkyrbDITbh3/+eJ6rg=)
2: PxckOVmdfaUleXiZvyE7jmNVSRQ.crl (hash: lvvE7jyGwt9nuAuNBR0O/f/HMLC6hstb3tj7vjgzL70=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c6:70:bc:94:5a:4a:5a:b2:93:ee:60:86:1c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f172439599d7da525797899bf213b8e63554914
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=7e126c8bedc797c2513f4d8a64d878d8968179bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:f2:13:2b:05:2a:19:49:9c:2e:22:d7:cf:
70:5c:a4:d0:9a:e8:9a:a0:1d:98:08:e9:59:b1:c4:
a3:e7:19:c5:3a:8f:b1:a1:54:09:0a:29:56:19:23:
4b:61:b3:97:7e:d3:66:8c:c9:ea:2e:7d:2c:b6:6d:
2b:d5:b7:db:f0:42:05:33:b9:65:eb:b7:3b:30:ab:
ca:18:fc:4f:23:20:dc:99:08:84:60:07:91:76:d7:
9b:a3:cf:de:1b:95:3c:d2:a0:ad:08:f2:fc:29:c0:
1c:0f:eb:50:e8:b9:b0:e0:f5:ec:3d:87:68:46:7e:
8f:6c:6d:56:c7:96:4c:ee:5c:5c:1d:e1:a2:8c:d4:
a4:52:48:5b:46:29:3e:a8:6f:6e:2b:66:2f:75:91:
55:fa:4b:27:b2:df:42:e2:4d:66:dd:da:39:d6:8b:
7f:f9:ff:5f:42:41:ff:3c:b2:83:0f:24:8a:1a:4e:
66:c7:6d:24:2b:1b:1a:bb:c5:0d:02:a2:de:bd:db:
e1:aa:b5:9b:dc:5d:64:6f:ed:3c:ef:58:02:db:13:
ca:dd:93:5a:dd:ff:31:65:70:97:68:64:82:a5:46:
c8:96:fd:21:2f:f1:91:bf:aa:13:fb:cd:eb:d9:42:
fb:90:c5:97:9c:45:41:5c:f8:d8:98:0a:de:da:bb:
47:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:12:6C:8B:ED:C7:97:C2:51:3F:4D:8A:64:D8:78:D8:96:81:79:BD
X509v3 Authority Key Identifier:
keyid:3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d7:0d:e0:dc:68:9e:e8:c7:e8:93:bf:48:70:17:ab:44:a4:
14:16:e6:b0:8e:a5:85:f2:5a:0a:33:62:36:47:12:69:dd:c6:
b3:b5:c9:6b:50:fb:4a:70:3b:40:48:18:f8:e1:7a:da:80:d3:
5d:33:65:46:68:83:63:78:84:0e:21:a7:98:ef:d0:f6:58:da:
df:f7:ca:42:43:f8:0c:e4:0c:06:44:a9:0b:4a:c7:c1:4f:11:
b6:2c:b0:a1:2c:5a:9b:4d:62:4a:e9:36:d9:61:6c:4d:12:55:
15:e7:88:dd:58:09:16:31:ac:19:5d:53:ee:bf:ff:b7:ee:a3:
61:74:50:04:c2:76:10:3d:05:2d:6a:4d:95:06:84:c2:76:58:
d9:35:8a:dd:f0:fb:60:62:31:a9:ba:8a:cf:15:25:cd:8f:12:
c6:9d:63:59:a6:eb:8a:25:21:81:61:23:0a:94:47:b1:3d:04:
9a:ec:b6:55:38:8e:97:f1:23:51:11:08:96:cd:7f:8f:14:4d:
99:5d:b2:f4:4c:55:4e:3b:96:29:be:f8:0d:ff:2a:34:3c:18:
24:a0:f1:72:45:17:b0:38:15:a0:93:05:3a:4e:6e:b4:d8:28:
59:a4:2f:d3:c7:94:78:75:d7:6a:01:f3:dc:f4:51:41:54:64:
7e:cc:ab:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:36 2025 by rpki-client