Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
File: Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft (raw, json)
Hash identifier: qYIc5QWEyhkR2o4fb1beJzzCHoFMwRRDh5CBkGLqBWo=
Subject key identifier: 55:17:39:C5:64:9E:97:7F:61:C1:DD:DF:79:18:F6:D9:E1:EA:DF:81
Authority key identifier: 3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
Certificate issuer: /CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Certificate serial: 0194BBCEAF7720959D616EC15E1BBB6CBB94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
Manifest number: 1051
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl (hash: g2GSyEX6MOpfbi4deWoM454WN8df+q6tBc3ZmrEQ/fE=)
2: TvTxBLGF9a81RGikK2pVw5Qclrk.roa (hash: Swsi8hcudUdP4trO5kArswNQiDBcmbNtUjmXbEXUd0A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:af:77:20:95:9d:61:6e:c1:5e:1b:bb:6c:bb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=551739c5649e977f61c1dddf7918f6d9e1eadf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:0a:b1:63:0a:ee:16:12:8e:36:c3:c0:1c:
23:b2:ad:2a:23:cc:53:6b:92:9e:c6:8c:95:c8:73:
cb:8c:8e:73:04:ac:8e:fd:49:4a:ee:dd:57:78:f3:
1a:42:54:26:56:70:c4:c0:ee:ec:df:fb:c0:3f:ad:
98:2a:8e:50:41:73:3f:8d:dd:1c:c2:78:c0:1f:38:
02:bd:db:7d:0e:ed:f6:36:f3:f7:6d:11:3a:e6:40:
fc:e8:4f:ed:64:02:ac:83:e8:b3:a5:38:e4:29:30:
02:cc:a4:f1:1a:2d:41:5d:fa:b8:db:30:fa:7b:be:
6d:60:66:0c:d3:ee:9b:7a:af:67:c4:4f:f1:10:a1:
eb:a2:db:b7:23:8e:2f:89:a9:f1:e1:40:e9:91:28:
b8:44:5c:4c:b1:5b:c0:32:c2:de:66:c3:ad:25:19:
91:7e:95:a5:6f:c3:08:e9:ea:93:64:f7:2b:90:a7:
bf:0d:43:b6:90:22:0a:a4:96:e2:44:66:49:28:d5:
74:9b:b7:48:f8:0d:39:66:e8:7e:6d:fb:c9:c9:b7:
08:93:aa:39:9f:c1:7d:b1:39:63:ac:a2:0f:87:9c:
b6:4b:82:ac:e3:a1:f4:b4:82:ee:63:7d:3c:65:2b:
8c:e8:32:f4:3c:53:6b:7d:64:b8:43:76:85:a4:4b:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:17:39:C5:64:9E:97:7F:61:C1:DD:DF:79:18:F6:D9:E1:EA:DF:81
X509v3 Authority Key Identifier:
keyid:3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b2:bf:4f:10:42:45:bf:80:01:be:09:92:9b:56:26:e4:98:
a0:4a:ff:01:81:f8:22:e7:59:52:76:c8:c5:f4:1f:f3:b9:2c:
7e:16:08:27:19:b2:fa:48:5a:2a:dc:87:65:b4:90:03:8c:31:
6e:0d:b0:b3:6b:77:b1:a2:31:60:3b:b7:7f:c5:05:c0:82:ac:
f0:c0:a9:93:17:c7:b0:db:a3:cc:3e:3c:6e:c3:51:91:88:d8:
58:fe:60:5f:6a:b9:df:1f:28:9d:c1:28:06:b3:47:5b:6f:df:
87:b1:3d:fb:ab:d5:b4:ff:19:be:32:0e:6b:93:95:42:4f:1f:
98:fc:a9:f4:a8:17:7e:9e:b8:64:0f:db:a6:92:75:9b:42:32:
8d:3f:20:1d:4f:1e:39:83:f0:41:b7:ea:d6:61:30:bd:6c:b0:
2a:25:43:be:e6:f1:8f:bc:0c:1b:1b:37:bd:83:b4:2f:4d:a6:
a3:45:e2:c8:ac:87:ae:1e:84:87:09:2e:07:59:e8:e4:bd:bb:
18:98:b1:93:fb:38:55:1f:31:13:68:de:06:ef:d4:56:b8:44:
ab:cd:51:30:20:c7:d8:a9:1a:ba:e6:c6:dc:0b:33:89:ac:eb:
31:07:3e:af:2e:21:42:30:16:de:10:90:1e:ca:ac:8e:03:a3:
d5:2e:d5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:08 2025 by rpki-client