Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier: 5prg0LIMNPlGK5RCFq63X0FvGZxBDMzUqDRevmfKr2g=
Subject key identifier: 06:A7:71:81:1D:94:B7:D4:C9:1B:52:44:9D:FB:15:FF:A4:73:06:E1
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 0194BCA98886605AD4E8BF61BDF8BCEC47F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number: 05CF
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: j8JMc/GoIpax5eNC9w9AgGJBZUpPYdG6beVSh4npOLM=)
2: cIvicQwvTTI6J8NGKDerxCkfUpQ.roa (hash: KRBjaA428X4oNlaq/pV1Uncb9bEVRkbIjJIh/xlTHjg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:88:86:60:5a:d4:e8:bf:61:bd:f8:bc:ec:47:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=06a771811d94b7d4c91b52449dfb15ffa47306e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a1:a4:5f:55:b3:a4:95:93:25:3e:16:3e:2e:
23:0d:f2:b9:d7:26:74:43:ff:27:9f:48:d0:51:38:
4f:6a:1f:43:f3:10:8f:db:f1:3a:aa:29:80:83:35:
0f:42:ff:d6:12:53:fb:c9:6d:b2:be:87:29:2f:db:
ee:05:60:8c:4f:5f:ce:47:7d:71:90:63:7a:18:2a:
55:2e:94:1f:63:04:cb:88:00:96:8a:24:62:2a:87:
e7:b4:a6:a1:fe:c7:cf:8f:6b:bf:0d:88:66:93:e9:
6c:b4:ee:aa:8c:7e:d5:48:b3:84:71:a7:eb:7d:25:
65:b6:c8:7c:84:52:2a:f0:ef:bd:06:e1:7e:52:7d:
f9:ce:bb:da:9a:02:ed:25:56:a4:90:69:e7:88:33:
7e:eb:9f:b7:04:7f:41:95:10:2a:c8:65:1c:7a:94:
66:77:26:58:d6:79:db:3b:52:5e:b6:ef:74:be:b1:
78:ba:64:fe:b7:75:de:de:07:5c:b6:cc:77:0e:c9:
70:57:c3:6f:79:3c:48:1b:91:f7:a2:54:4c:6c:0b:
b3:35:e1:4d:f8:4d:c7:77:d0:de:b1:ca:a5:3f:c2:
ea:9b:70:b1:a5:c5:b0:3d:2c:54:c7:26:d2:28:8a:
91:08:d4:a6:47:90:6d:a8:5d:58:d7:53:30:35:92:
57:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A7:71:81:1D:94:B7:D4:C9:1B:52:44:9D:FB:15:FF:A4:73:06:E1
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:30:f8:50:f9:99:9f:f8:28:d0:eb:5b:3e:fa:c5:6a:57:c3:
73:14:b0:6f:86:91:ca:1b:3b:dd:23:3e:e2:dd:04:27:89:d1:
a2:c2:37:7c:f7:54:11:20:33:69:47:b4:6f:51:6b:62:8e:b5:
ec:34:93:4b:a0:ba:75:50:3a:a0:46:6d:8a:90:09:72:08:31:
e2:3c:0a:0a:f0:06:95:8f:af:da:ef:3c:ba:5b:04:20:7b:b3:
83:69:1a:16:a8:d3:df:1d:ec:32:79:96:82:22:0d:98:bb:b9:
41:90:c6:bc:42:49:8e:f9:9f:49:ee:a6:5c:a4:35:98:e1:48:
d3:ad:58:1c:5b:69:ba:6d:73:ab:b3:3c:d0:5e:3f:f5:95:44:
a9:5e:d5:1b:3e:2a:93:61:0a:30:c5:a8:3a:c4:94:d7:49:52:
c8:6b:59:ec:b1:60:c3:e5:b5:ce:40:a0:2f:ad:bc:52:92:dc:
11:14:11:17:a2:04:96:4c:68:dd:8d:22:ec:65:9f:b1:d0:e1:
6f:e2:a2:9e:6e:7e:96:38:8d:79:ea:2c:42:62:e2:f8:b0:2e:
f5:6a:9f:f1:11:ae:be:b5:18:1d:00:9a:f3:74:24:7b:f7:ab:
8a:f1:b3:16:78:71:c6:9a:d6:40:72:4a:ef:ef:0e:94:3e:14:
0e:ba:70:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:28:01 2025 by rpki-client