Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: X3UlScHVjDWbixrC+7tbMcvEjt44ht9oNcoCzkiaz3s=
Subject key identifier: A7:EE:EF:8D:C6:37:58:B4:B3:62:0B:E9:A0:80:56:85:3B:32:A7:FC
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 0194BD1799C8868ECD1608AAFBD8FD8CE0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 0A30
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: Ag4vdPGKqSYWGm9dLWjLCYFXITs.roa (hash: K8PordojpOIplsR6Jg7NEy3mCM9e/c8OLgPeQ2xQz6M=)
2: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: QMRqbWYsj4xo0iLAOuAc76zdCeHckBGS5OR/6pSTKG8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:99:c8:86:8e:cd:16:08:aa:fb:d8:fd:8c:e0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=a7eeef8dc63758b4b3620be9a08056853b32a7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:20:47:1e:ed:6f:4a:2f:9e:8a:af:fb:d8:74:
21:45:26:a2:b7:61:fd:8e:a6:7e:1a:1b:ba:cc:77:
1b:18:e9:a0:55:d8:44:9d:8e:de:76:96:9a:8a:f5:
d3:2f:66:53:35:57:59:a5:6e:42:74:de:dc:64:ae:
6a:4d:54:76:11:89:cc:2c:54:2f:48:71:a4:3d:98:
bb:90:3c:8c:ac:95:f6:09:35:42:49:00:1b:17:b0:
cb:fb:8a:cf:14:a6:c7:3c:56:ec:03:b7:88:ea:fc:
05:f7:4a:e0:a2:0a:8d:9e:ee:0d:86:fe:67:0c:51:
7c:95:c0:62:d2:ac:98:2e:e3:6c:73:90:c9:cf:0b:
6b:68:42:b8:30:a3:8f:c4:bc:97:c3:7e:f4:b7:89:
d6:e1:a3:fa:e6:51:77:a5:cc:41:df:b8:37:89:4b:
b7:59:3c:27:69:bd:7c:c5:10:68:42:c6:35:b1:fc:
4e:51:83:d9:94:5d:db:bb:7f:d2:b6:d4:af:ad:a5:
f8:f4:d2:3e:c2:bc:44:d0:f5:58:66:34:5e:60:ed:
81:9d:ce:da:ff:b8:25:71:03:6b:04:30:63:c1:c8:
44:63:5f:ae:0b:58:e9:41:48:35:ef:e8:f3:9f:19:
24:86:38:fb:72:9f:6f:76:63:80:62:3f:68:5f:90:
c1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EE:EF:8D:C6:37:58:B4:B3:62:0B:E9:A0:80:56:85:3B:32:A7:FC
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6f:6d:f3:14:fd:16:dd:eb:a1:b3:d6:6c:4e:13:4f:a2:ea:
93:98:91:6b:98:3d:68:af:09:c5:28:3e:08:ba:d2:24:19:5f:
e2:6f:91:9b:a1:fd:70:81:60:96:93:0a:9c:45:b4:a3:a5:b2:
e0:c8:41:ea:e5:b0:6b:df:46:c0:b2:8a:3c:e0:f2:1c:16:0e:
db:3b:80:14:f7:41:e0:a1:39:78:45:c6:54:85:b8:1a:27:1d:
20:ee:11:72:9f:ae:34:65:51:9f:4d:22:fb:46:fa:ec:62:8f:
1d:a1:bd:76:fd:db:b6:f8:fd:9f:69:15:e1:1e:05:b8:90:29:
36:87:9f:f5:01:85:83:a0:87:a0:b7:2c:99:a9:ec:2d:82:37:
8c:8c:a5:6c:1d:09:ff:d2:cf:0c:84:fe:d9:eb:e4:a2:09:8a:
d6:d2:cd:03:6f:5d:2b:d5:3f:c0:dc:a1:2a:ff:34:e5:75:fb:
17:6f:52:0f:1f:c2:ba:cd:cc:0c:12:4f:1b:71:55:6c:1f:dc:
46:97:46:47:95:32:17:ad:10:7c:bd:e7:9e:b7:80:ec:8a:5a:
e5:23:52:4d:80:20:c7:34:f7:e0:e8:2f:de:26:52:ab:6f:06:
b6:71:0c:80:28:24:b0:5e:34:48:58:bb:32:3e:d5:aa:3d:99:
da:be:dd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:51 2025 by rpki-client