Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json)
Hash identifier: u+8Hg1747fzjX45uDfN+mWmCUHBhH8xg4mvd131+fP4=
Subject key identifier: 21:28:0B:B3:F9:74:A7:B7:70:59:A2:08:69:F1:36:2F:98:17:E1:1E
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 0194BC3C032E76355C4BFFA8B24294CFB88E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
Manifest number: 0853
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: Bk8zYlSKqLYVsGMH3YEvHnLSsEU.roa (hash: LyRPaqVEcdiw5E3uBmgAAh9/7xweVS475crHOVmwvK8=)
2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: Iq6//Z2zDv5zB1VD/G+k1naesw/ywEKbDywO0rTbT2g=)
3: gwj9P8ZuERM-SCTzjIoGfn0Rln0.roa (hash: 9JU5L0oKqu22gCI9ibec6Elcvk/4kJnQuHkzo4ps1r4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:03:2e:76:35:5c:4b:ff:a8:b2:42:94:cf:b8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=21280bb3f974a7b77059a20869f1362f9817e11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:7d:d8:da:cf:02:22:03:9c:bb:fb:a1:1e:
1f:2e:e9:7c:25:55:60:43:a3:13:b5:16:59:49:28:
c2:69:66:19:53:ff:b5:8a:f2:f0:d9:a3:93:0e:98:
be:d5:45:ff:7c:fb:ef:55:1b:4e:8a:7a:14:11:86:
26:d7:b9:cf:b9:67:4f:fe:40:0c:d3:4e:73:0a:66:
c0:7d:ad:58:60:4a:9c:cc:0d:d8:94:d2:d6:fa:02:
18:fc:02:4a:33:39:8b:48:da:b7:eb:e0:21:50:34:
e3:21:df:59:d2:24:8c:8b:40:99:59:f7:e0:9d:31:
52:a6:80:63:b6:1a:fb:bd:ec:13:5f:86:06:23:e7:
b3:5d:87:f2:60:65:3b:d9:83:dc:94:a1:3b:0c:aa:
3c:70:e3:b3:70:c3:a2:2e:50:f8:ad:6c:25:96:27:
55:12:e3:85:7e:a5:2d:e1:3c:78:01:56:ff:68:e9:
73:c4:02:49:d8:95:8b:b0:15:85:82:81:ea:ba:f5:
b7:f4:53:49:6b:88:0e:8a:3d:96:ec:de:fa:89:0f:
80:5e:82:41:21:fc:d9:43:ea:d6:f7:10:83:44:98:
51:ce:53:15:dc:24:c8:50:79:9a:00:e3:a3:c1:74:
28:7c:c8:40:9b:c9:f6:38:7d:f1:40:4e:13:8a:71:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:28:0B:B3:F9:74:A7:B7:70:59:A2:08:69:F1:36:2F:98:17:E1:1E
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d1:98:6e:e8:fb:af:66:a8:43:c4:7d:fd:77:75:da:4e:3d:
54:10:5d:ad:7c:ea:42:bd:36:27:44:ff:48:ca:3a:fc:44:7c:
40:cd:e1:4a:d6:f5:f0:69:b2:e1:33:8f:13:f4:1e:4d:8f:c0:
35:79:0b:19:5f:81:d9:62:e2:cf:bb:29:b5:63:87:51:6a:c0:
1e:ef:0f:82:b5:1d:b9:3e:05:1a:55:ae:50:49:cc:c4:22:a1:
f3:e0:76:ac:24:81:ad:a1:3d:97:94:10:0e:8e:26:6d:71:5f:
12:54:55:c5:cf:5e:26:78:79:9f:ee:a1:ba:8f:9b:8d:3c:d0:
bd:ba:82:91:5a:a5:8c:d1:d4:04:28:59:06:03:d3:df:b0:8d:
00:8c:bc:8c:90:87:f5:33:0f:88:72:47:08:ef:82:eb:99:8b:
5c:45:16:ef:bd:45:6f:36:2e:34:ed:da:61:11:76:1e:0c:82:
b6:72:0c:04:78:10:86:46:72:c4:13:77:f7:6a:70:c2:8b:7c:
57:e2:d3:36:56:e9:49:b4:32:a4:cc:86:72:26:e3:68:ed:3c:
80:ed:10:3f:e5:0b:a8:0f:44:87:30:11:6b:eb:4c:c3:3f:dd:
6f:5e:6a:d4:e0:6a:b2:ff:44:19:d9:cb:d5:b6:1f:e8:48:e3:
2f:90:50:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:54 2025 by rpki-client