Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json)
Hash identifier: YxH/Ktrb68lnDEMH/qt8e6Hx/8YsPBB/tjbNGMl3i1E=
Subject key identifier: 69:F6:B6:EC:3B:D5:20:81:29:B8:5B:71:D7:26:1E:D8:8F:88:74:6F
Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Certificate serial: 0194BD85536FD7EC6D6990A66B3C7D1B8009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
Manifest number: 116F
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: 0OYfvohoTXtpi59LO0J22cI1s3U.roa (hash: s7dK6PK+eP+XDZZ2HKEucZtuMEm89+4+6MLOTTKFjE0=)
2: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: raLna/wXlc+bIAuNKToUDAAVy3Rl1NTzv1ILkG5u8pM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:53:6f:d7:ec:6d:69:90:a6:6b:3c:7d:1b:80:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=69f6b6ec3bd5208129b85b71d7261ed88f88746f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:bc:af:1c:ac:2a:0f:8c:f0:8d:b0:f7:a4:
50:fb:bc:81:b5:58:c2:2f:c0:64:76:52:6a:13:25:
4e:93:58:c8:25:2c:b4:16:6a:7b:4c:40:98:b1:09:
07:01:0a:e9:95:43:15:a4:78:51:73:c9:b4:08:7a:
2d:7b:ee:6c:1a:b3:0b:68:8a:a1:99:49:45:de:34:
2a:ad:eb:26:19:7a:1c:90:df:dd:9b:4b:d6:66:84:
47:c2:c1:ec:fa:e5:69:5b:f3:68:44:e9:5f:d0:30:
69:da:f9:9b:72:3f:33:b4:86:c8:3a:45:a4:49:77:
3d:83:63:95:50:23:e2:76:5f:ca:1c:c1:3a:a7:93:
43:6d:d7:8e:49:7d:5a:6a:f5:e0:5b:16:ce:53:de:
76:ef:43:8b:06:c3:ac:4b:1a:5d:7d:ee:7c:1a:69:
24:bd:52:c0:b3:22:2f:60:d5:ef:b2:2d:ca:49:4e:
8d:60:12:2b:55:fa:97:1c:96:7c:27:ac:7f:b8:bc:
31:7d:c0:e9:56:86:27:3a:9f:f9:43:9f:92:f7:f5:
69:5e:9c:b8:d1:96:37:d1:07:c9:e5:05:88:99:48:
00:d3:a5:f6:58:60:ee:dc:ed:a9:88:86:c6:45:c7:
82:af:78:2e:4c:3b:6f:1b:1e:e8:79:48:c5:fd:b3:
8a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F6:B6:EC:3B:D5:20:81:29:B8:5B:71:D7:26:1E:D8:8F:88:74:6F
X509v3 Authority Key Identifier:
keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:00:a6:7f:a0:95:7d:ea:46:6f:9e:09:e3:58:aa:54:54:b4:
6f:15:d9:e9:18:84:95:1e:9a:49:51:ed:9e:55:7a:e7:89:5b:
78:ec:8c:77:23:33:01:a1:0c:bc:6f:56:c5:85:34:a5:61:64:
1d:66:06:ca:a3:45:32:04:80:fc:83:51:40:9c:87:62:c7:e5:
4c:ba:5e:f6:ee:b4:ef:2a:83:4b:d5:f8:d6:a9:5e:b0:bb:c0:
b5:47:c7:0a:8c:eb:9e:a6:a6:09:59:07:f8:8c:f9:50:9f:6f:
3e:ee:3f:dc:39:06:e4:4d:b5:19:f3:d3:5f:c9:5d:61:36:1c:
7c:a1:2f:e6:db:4d:f6:91:a1:55:b6:a3:bb:14:c5:b3:91:21:
a1:ed:0a:10:ea:6c:6d:29:00:24:88:28:76:0f:99:35:59:f6:
10:d5:5b:da:ed:f6:27:17:cb:be:2d:8b:74:30:b7:fe:9e:6c:
8b:31:9b:fd:02:05:94:7d:af:3b:a1:13:2a:46:45:b9:da:b4:
5d:aa:e3:f4:9e:95:03:a3:ae:0a:3e:a0:29:a6:93:00:88:3b:
8a:16:61:fa:93:96:7b:4c:78:f5:8f:e7:38:6b:e1:dd:6f:4e:
c2:1c:4a:95:8c:15:83:cd:23:3a:de:c3:66:d5:d7:f8:1f:c4:
48:06:c8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:23 2025 by rpki-client