Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
File: Pme6gge4HBtHJjsf3o95uZWXA30.mft (raw, json)
Hash identifier: AxAfGBpWzXYc9c46nk0TBV03ez2ExyA8gwXSnh9creY=
Subject key identifier: 8E:96:5B:E4:D8:4C:68:EA:78:BB:8A:ED:D8:42:BC:1A:C8:3A:4D:E1
Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
Certificate issuer: /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Certificate serial: 0194BD8570E7AA8EEE0AAAB601CC401ED082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: Pme6gge4HBtHJjsf3o95uZWXA30.crl (hash: gbZH8ubZhCvT+/bDEgeWuuWnxPai75l85KFbLA70jkk=)
2: Sw2yUjR1ZL0ByAYEDmqJ1PKv-34.roa (hash: nd+025SnSLe+QrA8ZI1nLVUbcuTRnShB52imVtkdZsc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:70:e7:aa:8e:ee:0a:aa:b6:01:cc:40:1e:d0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=8e965be4d84c68ea78bb8aedd842bc1ac83a4de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:d7:92:02:d0:50:73:17:d4:a1:5e:6a:f1:
97:11:44:62:02:90:5d:ca:48:39:8d:e8:bd:b5:d3:
5c:81:fd:30:de:63:69:c5:94:d2:37:57:2b:bb:fa:
b3:63:df:fd:c0:cd:21:73:a2:f0:e3:03:04:65:03:
04:30:8a:8d:77:a0:05:af:3b:a4:b5:41:31:9b:99:
46:ed:e0:fc:e2:ec:02:d1:16:1a:92:fb:05:5c:41:
fd:99:32:d0:a3:95:b4:8a:4d:6a:62:6f:30:25:db:
f6:06:43:e9:a9:6a:eb:41:80:a0:97:bd:eb:1b:16:
22:5b:b1:16:d3:b8:7d:47:8e:77:e6:d2:2f:97:27:
95:d4:50:7b:57:73:bc:95:e6:c5:fe:32:0f:b3:1a:
66:b0:24:47:fd:9f:56:90:d5:10:ac:92:76:79:25:
50:37:f4:84:01:be:3f:40:bc:61:72:a3:ca:a9:80:
f9:59:bd:bf:c0:87:ba:16:db:bd:4a:00:97:41:9d:
97:9a:b1:33:d5:d6:e8:6f:4d:41:76:f5:0d:cf:55:
66:07:3b:74:77:2b:70:b7:31:c0:d7:6e:18:96:2d:
ac:f9:c4:ad:e4:6f:14:df:52:d6:be:34:09:fa:65:
26:12:aa:c4:25:54:cc:ec:9b:56:ce:93:7c:36:fd:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:96:5B:E4:D8:4C:68:EA:78:BB:8A:ED:D8:42:BC:1A:C8:3A:4D:E1
X509v3 Authority Key Identifier:
keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:c9:cd:b3:f9:c2:d9:e9:28:5c:e1:3e:a6:91:a1:db:f2:66:
fb:8d:1d:53:e3:ef:e0:17:9e:d6:65:b1:f1:97:00:64:60:3e:
f7:40:2f:5e:92:0b:72:d1:9b:73:cd:5a:30:ac:aa:d6:1c:23:
c6:59:3f:c8:4f:26:c1:f4:71:b6:cb:6a:00:9f:2f:6f:bd:1a:
e0:34:93:49:12:78:05:10:5a:d5:5e:d8:49:8a:f0:de:88:24:
6b:31:46:99:60:47:a6:c9:08:d8:97:26:d2:19:02:49:db:56:
5b:09:76:44:3c:09:49:45:35:00:3c:f3:9b:04:6c:18:82:e2:
ce:10:64:ac:14:86:1a:19:84:b2:b8:38:8a:f7:83:91:dc:8b:
e8:5b:43:29:7d:a9:27:2f:50:a3:87:35:cc:fe:20:a6:75:9a:
36:72:e5:62:4c:94:b7:1a:6e:38:25:aa:cb:81:6e:ca:81:91:
d6:82:0b:2c:be:a3:be:10:9c:0e:e5:5a:15:97:b5:be:18:4f:
c1:29:03:90:7f:00:6a:f0:1f:8f:7c:ac:3b:82:c6:40:9e:fd:
ee:1a:3d:84:68:96:86:49:22:19:de:af:b8:40:bc:5d:72:7d:
c1:b6:8d:4b:0e:52:46:c5:b1:c5:7d:1a:52:0b:58:ab:0c:aa:
63:53:c6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:52:00 2025 by rpki-client