Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
File: pQHIn0SCnHLyqVPSorpK4Le1DYo.mft (raw, json)
Hash identifier: b0e3PKgm93NW+u8IRgTBOpA+TsrEohOF8xoyTQE26xY=
Subject key identifier: 27:08:C0:92:1C:35:26:8A:75:12:58:30:EB:C1:55:74:79:B9:5A:DC
Authority key identifier: A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
Certificate issuer: /CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Certificate serial: 0194BC728B14B37CB0A56E5E37CF05704C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: D5U1j0YPEDas8bxMtDOehRJb48U.roa (hash: AkMtfy33YmmtJG2wcdM/0Qvh01UPoaXKoDXm68LNuus=)
2: pQHIn0SCnHLyqVPSorpK4Le1DYo.crl (hash: cpEBeXlQJwsiPCBBuBGaZwzl7kZQjuDZ6US+798i984=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8b:14:b3:7c:b0:a5:6e:5e:37:cf:05:70:4c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=2708c0921c35268a75125830ebc1557479b95adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d6:0b:48:89:98:bf:cc:bd:c3:dd:08:fa:31:
59:a9:53:2e:39:c1:6c:0e:f8:77:0a:18:14:0a:42:
44:6a:66:29:d3:43:2e:a2:80:61:f5:09:0b:08:0a:
ca:b8:64:57:da:95:89:66:bc:40:79:75:84:16:48:
00:5e:0c:f2:e3:9e:be:9d:68:08:2e:ae:98:93:f4:
49:19:0c:19:b2:84:f3:4c:17:4b:f0:97:f7:57:11:
4b:62:5d:1e:d9:a8:6e:2c:be:94:bd:e2:99:08:b3:
fd:db:98:ca:9a:08:53:e8:e2:89:a0:71:ed:ad:86:
07:7a:f1:3a:d1:cc:7d:9d:d8:bd:4c:55:9f:c4:af:
25:83:a8:2c:f7:d2:b9:48:e4:70:f5:cc:8d:72:d9:
a4:b9:ad:02:e2:1e:6e:eb:e8:93:4f:a1:18:4a:12:
c8:45:3b:bd:16:fa:a0:d0:7b:e7:b6:f3:9d:9e:f0:
a5:89:79:3b:e2:17:8b:2a:45:a2:6d:bf:fe:ce:e6:
a1:11:0e:bb:8f:f5:f6:7d:90:6a:10:84:b7:39:29:
48:1d:b4:f3:e9:04:ae:ca:e2:e7:b6:ec:fe:ed:61:
13:a0:44:17:01:a9:9b:f2:45:83:00:1b:38:10:27:
82:4a:d7:26:d2:24:e0:52:f9:eb:f6:67:f1:21:78:
3c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:08:C0:92:1C:35:26:8A:75:12:58:30:EB:C1:55:74:79:B9:5A:DC
X509v3 Authority Key Identifier:
keyid:A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f5:09:32:65:a7:2c:b0:e5:81:fe:85:75:3c:ff:28:b1:1c:
ec:31:5d:20:b6:da:5d:b5:3e:b5:4a:28:27:6b:67:8c:0a:00:
e5:ea:12:1d:3e:10:bd:37:d0:d9:ba:13:39:45:4e:66:36:2f:
ec:ab:f6:82:ad:41:26:ac:35:8f:96:25:30:c3:eb:16:f1:7b:
ea:67:0b:4e:13:da:81:98:fc:e2:3c:fa:77:14:38:e8:73:8e:
a2:64:43:2f:c6:77:e6:66:2e:1b:43:2a:cd:89:e2:15:d4:e2:
7f:03:ac:5c:5a:93:6d:40:13:b9:92:c3:7b:16:d1:12:be:14:
70:35:4b:27:88:ac:62:4d:5b:90:18:64:5b:07:8c:24:c9:88:
ba:ce:b9:fc:9a:dc:1d:b3:62:0b:be:db:aa:12:ae:32:db:2f:
99:1f:c1:18:ac:5e:97:2a:a7:78:0e:70:80:c9:0c:c9:87:8a:
ef:0e:06:bb:ce:ea:a2:79:49:93:98:a9:6f:dc:cc:85:a4:23:
7a:f6:46:5f:94:b0:49:1f:05:88:e4:ca:55:cf:75:49:07:72:
db:5d:2d:a4:04:b1:26:93:88:c1:6e:9f:45:6a:0d:b8:9b:0a:
1b:29:79:e0:81:ec:59:49:8b:80:20:39:1c:30:d4:0b:cf:47:
1e:fc:4d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:17:01 2025 by rpki-client