Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
File: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft (raw, json)
Hash identifier: cn1MZlIZYKcFpGUl0zO42R9rb1c0ETVCxZYNKXT7RRk=
Subject key identifier: 6E:7D:36:F1:23:50:67:AE:BE:65:28:0F:22:AA:2D:30:32:F2:04:E0
Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
Certificate issuer: /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Certificate serial: 0194BD4E8FC76C5F3B150AE83A753CE64107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
Manifest number: 047A
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: 0LPzaTRGADRQ7NYT2u33MSGVUAc.roa (hash: z6+o9T+5otMMS/QAipfJXTyY4jZN2xR3W6lhfsxnRH0=)
2: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl (hash: JFfsrX7pqgoyVGE1DTkgNflZLPQB5hLYCfcrdDyrS8o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8f:c7:6c:5f:3b:15:0a:e8:3a:75:3c:e6:41:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=6e7d36f1235067aebe65280f22aa2d3032f204e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:bd:1d:b7:3f:ae:c6:28:13:e8:6e:e4:56:
42:c0:a0:cf:61:1a:7f:6c:f2:a0:09:45:7d:80:ff:
76:d8:4e:01:fb:04:9c:56:60:37:3a:14:61:93:8b:
e7:36:10:5f:a6:54:bf:23:58:aa:3d:6d:9b:5b:dd:
81:e3:ae:57:5e:03:97:9e:fa:bd:1b:f6:36:2f:cd:
50:d9:d4:eb:dc:41:4a:f9:de:e8:b2:3b:77:92:d9:
c5:ca:b3:b9:b9:3d:c5:66:b4:e2:70:7e:14:ff:b8:
af:9c:ba:ac:76:99:e9:56:3b:00:52:a8:77:45:0e:
23:34:26:05:f3:b5:3c:4a:15:e9:96:f1:ba:c8:f5:
3e:de:fd:e7:20:52:7f:d3:85:c1:b5:58:b1:c4:c0:
9b:cc:c2:f0:3b:2c:b5:39:5f:50:76:20:9f:ed:83:
4f:51:94:c9:b4:fd:c2:9b:e0:96:92:14:0f:16:a8:
cd:46:69:95:55:03:58:80:7b:9d:ba:06:2b:54:c5:
92:d3:d2:79:55:d8:6e:13:10:21:66:c1:61:82:09:
2f:5e:9d:cf:84:56:33:14:27:a7:bb:b8:99:c0:14:
ab:b0:eb:62:54:24:01:88:95:14:62:dd:78:31:cd:
a0:d2:84:2f:ed:5a:b8:8d:f1:49:48:57:44:83:23:
6c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7D:36:F1:23:50:67:AE:BE:65:28:0F:22:AA:2D:30:32:F2:04:E0
X509v3 Authority Key Identifier:
keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:cb:6c:b0:02:53:82:78:54:9e:99:65:f6:1e:00:b6:28:42:
e1:b6:f6:21:ea:ac:f0:89:5a:8c:07:75:af:48:cd:75:99:38:
72:16:58:af:e0:6f:db:1e:e9:7c:df:3e:0a:57:f6:b3:db:6a:
1d:85:38:0a:75:79:f7:4e:88:ef:11:2e:e8:3d:28:6e:cb:1c:
4e:2b:fb:24:52:16:2a:5b:c6:39:67:3d:94:11:82:e3:a6:f4:
b6:67:7e:b3:25:7c:9e:2c:61:65:fc:f7:5d:b6:5b:4d:7f:28:
b9:33:fd:e2:c2:1c:f9:44:5b:f3:29:8f:55:cc:44:e0:20:80:
9b:ca:1e:8e:d1:4d:f4:42:30:b0:29:75:2c:ef:1a:8d:ed:e6:
18:ee:81:05:58:4c:92:d8:d1:c4:b4:4c:7c:40:1d:29:6a:5b:
51:cd:8e:98:bb:a8:03:52:b8:ba:d2:6d:8e:d0:8e:c0:4a:1e:
0f:bd:66:17:00:ad:89:d9:86:05:81:30:57:5b:a0:27:fa:e6:
82:24:26:d3:36:52:c0:88:a0:e4:dd:d9:62:6d:d9:87:41:04:
49:af:cd:e8:64:6c:51:cf:91:3e:a6:7b:d8:a3:63:1a:1f:30:
82:cc:73:96:f7:31:d2:3f:2f:f9:a0:e1:8e:31:95:a9:f6:ed:
66:46:83:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:44 2025 by rpki-client