Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
File: pqBZBOyBdGoKZtIH9dNvjZeIig0.mft (raw, json)
Hash identifier: vZEUcx0WlcDmJ6BUF/xuMnkz0M+ZzjrW6elptgPVJYk=
Subject key identifier: 39:B1:1D:EF:7F:32:28:CE:DE:5C:59:6D:5F:AE:D4:43:CD:B2:20:E1
Authority key identifier: A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D
Certificate issuer: /CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d
Certificate serial: 0194BBCDEF1C5FFEB3A635E3277720DD2BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
Manifest number: 058D
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: pqBZBOyBdGoKZtIH9dNvjZeIig0.crl (hash: QLkORXvaCZ1q09/1UEq8Vu55MATsIahSJBc5ps+k2HU=)
2: wcWtJWZdHtQ3MB-JGGb4XgtvRZY.roa (hash: uBYBylJRjDgsdsAh3Gf2WJ38oblmNaRqlj9rvalMb+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ef:1c:5f:fe:b3:a6:35:e3:27:77:20:dd:2b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=39b11def7f3228cede5c596d5faed443cdb220e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:46:e0:4c:e7:3f:fa:5e:db:4d:a5:48:ae:
d5:1f:ac:17:28:77:1e:4d:69:d7:2d:34:8b:58:3f:
c5:b5:e2:5c:b8:83:a8:27:44:58:b1:a3:03:47:d8:
4b:f4:7a:1b:51:98:66:ee:6f:38:f4:fa:06:61:73:
19:31:33:97:d2:b6:9f:de:f7:54:e8:53:1a:2e:14:
3c:ab:61:60:3d:79:d1:49:46:3d:e8:8a:d5:66:10:
b7:f1:9a:df:0b:20:9d:36:37:08:15:fd:52:1f:de:
f0:65:20:c7:e3:d6:92:ce:07:fc:f7:d7:54:ad:ab:
2b:78:39:9b:1d:82:63:d3:a0:53:13:00:b3:d5:09:
49:12:08:61:8a:f2:05:4f:d6:52:f3:f1:31:94:40:
f9:9b:36:8d:ab:65:f3:e5:4c:51:b1:97:74:62:63:
c7:47:91:91:30:c4:19:d4:62:57:93:7f:80:e1:e0:
82:d3:53:20:4b:5d:73:c1:e9:27:a3:7f:ea:2e:df:
0b:7e:c0:c6:85:88:9b:d7:9e:6b:6d:a0:62:0b:a8:
15:31:31:1e:05:1d:ea:13:de:de:ff:7e:c0:46:bc:
98:f2:89:a5:1f:7a:7f:84:d9:5f:cc:b1:63:94:1e:
f3:03:b3:2c:70:71:1f:e9:b3:69:5f:5e:7b:29:78:
96:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B1:1D:EF:7F:32:28:CE:DE:5C:59:6D:5F:AE:D4:43:CD:B2:20:E1
X509v3 Authority Key Identifier:
keyid:A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d5:5c:f0:4a:f9:c0:b5:52:8b:50:f0:f6:4b:e5:eb:4f:cc:
7e:7b:be:76:d2:78:ab:9d:a2:69:7f:2a:e5:46:3a:93:cf:ff:
7e:8c:65:ff:04:38:12:3f:18:67:38:39:10:c3:6f:0f:45:3c:
91:b8:98:db:69:be:9a:3a:7b:7f:80:70:8a:dd:73:65:9c:4f:
1f:a0:d0:7d:bc:74:89:05:47:75:ce:b1:64:7c:7d:a3:96:ad:
e4:20:5e:ac:f7:57:71:1b:38:45:ee:37:5a:51:3c:b4:5f:bb:
50:8e:74:09:39:6c:c0:d8:ab:16:1e:bc:ec:db:41:e8:07:4f:
ae:79:c8:dd:5b:5c:21:e1:40:74:c0:09:e7:cd:1f:45:66:b6:
46:cc:7b:90:be:76:5b:00:f2:5f:02:30:fd:fc:4e:cf:79:22:
59:ef:20:b5:21:26:79:19:46:7a:f5:0b:a5:60:dc:4a:5a:fc:
1a:11:f9:9c:1f:98:4d:fe:f3:7c:a7:e9:24:9f:5a:bd:07:81:
b7:3e:97:e3:ae:e1:c7:ce:2a:50:73:d9:0a:1d:bd:25:77:c9:
b6:6c:d9:a4:b7:29:16:ee:cb:59:ae:21:da:dc:0f:2c:5d:e0:
63:25:0d:55:7b:94:ee:66:a9:db:50:d3:31:27:19:6e:e1:07:
26:71:3d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:08 2025 by rpki-client