Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
File: PryeUbqrPD5qtpn8tEPwB_VGw_s.mft (raw, json)
Hash identifier: a70bii6QkNMM1bx8iKZ5VXk01GRjHIeGLw/JGNDoIrQ=
Subject key identifier: 08:AB:F5:C0:2D:23:DD:3A:82:33:93:A1:68:C7:84:53:98:F3:E7:0F
Authority key identifier: 3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
Certificate issuer: /CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Certificate serial: 0194BD17F26144606FD16537867A9470BFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: PryeUbqrPD5qtpn8tEPwB_VGw_s.crl (hash: 3CPxeAqeggskZ5b+UGFxtmspzIrSubHU4df8+5ftvvk=)
2: dNeuYEAQmOoidPn9sPTHpBf3kwM.roa (hash: XKk9IUkG18VeN9nDomy3arFXLgPu8Jw+AjyCy/j87MA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f2:61:44:60:6f:d1:65:37:86:7a:94:70:bf:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=08abf5c02d23dd3a823393a168c7845398f3e70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:45:03:4e:f5:4d:3c:03:0a:70:8f:d5:d8:
43:c1:9e:1a:47:fb:f3:47:e8:d0:1d:7f:53:c1:66:
44:d0:54:c5:95:0d:fa:67:21:9c:df:1e:7f:f5:61:
98:26:7f:c5:d7:dc:07:d6:44:7a:b5:ac:1f:c9:dc:
7c:27:5a:05:ef:5c:ac:08:e0:cd:7a:5d:03:01:75:
a7:13:60:3e:e8:37:fd:e2:cc:70:b5:ec:c0:9f:95:
3d:2e:4c:cc:29:26:cf:44:cb:a3:fc:77:01:ae:e8:
5d:6a:71:fe:79:43:af:c8:b7:5b:ed:0c:be:c5:3a:
d6:cc:79:68:67:ac:7d:2d:71:1a:5a:67:c7:e5:3f:
3c:af:d1:df:4c:4d:24:84:09:60:e9:a7:d5:d5:dc:
9a:06:2b:e6:91:f2:6d:12:d1:bd:5c:84:4d:e4:bc:
1e:bf:4a:f4:22:81:0c:d8:a7:99:0c:b7:ad:55:e1:
1e:55:0b:43:25:b8:67:8f:e6:34:ac:8f:2f:42:23:
c2:07:3a:96:2a:d3:0f:94:e1:2e:09:5d:43:c7:b2:
62:fe:a0:e6:a9:75:d8:45:f9:43:68:94:60:db:94:
83:7f:83:8f:47:33:b4:e2:1d:0d:11:8c:d1:26:71:
4f:36:2b:2d:1f:89:ab:d8:c5:d0:6e:b6:3c:21:3c:
ff:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AB:F5:C0:2D:23:DD:3A:82:33:93:A1:68:C7:84:53:98:F3:E7:0F
X509v3 Authority Key Identifier:
keyid:3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:10:41:e4:b3:f8:47:51:51:5b:0c:dc:2c:34:b7:ed:72:7d:
6a:27:00:68:29:73:6d:6c:ec:76:57:9f:0f:3c:12:7f:9f:ed:
70:d0:68:ec:c1:28:f1:f4:f6:2a:fc:86:b9:f4:61:58:7e:06:
39:33:5f:ca:0b:25:e1:85:5e:3f:63:e5:ac:eb:a4:f5:64:bb:
3c:54:58:c5:ec:1c:68:e6:a7:7b:80:b1:49:04:fa:77:0b:e4:
d2:56:46:8d:bc:b0:d9:9c:20:13:9b:9f:d1:22:38:9d:16:c5:
7d:b5:d3:2f:dd:bd:4d:25:5a:f2:fb:d2:fe:0a:e7:80:9a:85:
e3:e8:92:3b:5b:8d:ac:c1:91:ac:65:54:03:ff:b5:f9:d1:22:
6e:fe:1e:79:44:62:45:d1:91:b1:db:8b:0d:b1:9f:a4:7d:5c:
29:53:a5:cb:5c:a0:49:94:1f:47:03:dd:67:c2:ff:59:7e:96:
84:81:5d:33:8a:a5:98:4c:0f:bf:d4:f7:82:7e:1d:16:78:7f:
54:dc:e5:82:5a:57:14:47:a4:cc:66:b1:e4:36:ba:bc:30:70:
a3:b0:59:09:fb:84:36:e9:9e:c3:e7:7a:f1:0f:e7:75:09:17:
d1:83:e9:d8:02:67:45:54:af:9d:4d:70:de:07:d4:8c:0f:df:
7d:b6:a8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:28:15 2025 by rpki-client