Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json)
Hash identifier: v0JJTQxUpTLJyeEWKs0PSVSQ3gFHw0v6FVGQbsr280Q=
Subject key identifier: 59:EF:ED:1F:B6:D0:44:3C:3F:F8:33:3E:FD:E6:7A:17:39:E3:74:9D
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial: 0194BCA990530EEDBCA47820DE9BA1FDACEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: o-nYlXPYTvbWycHnP4jG4hys78s.roa (hash: +9u5uc7wAwLvJQwWxklCfmQHya0NysgfSBmasNGP6Yk=)
2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: WolJGCkxjAPk1TmvXe1LRvEyq/t10O+nv0+dczccsxM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:90:53:0e:ed:bc:a4:78:20:de:9b:a1:fd:ac:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=59efed1fb6d0443c3ff8333efde67a1739e3749d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:3a:02:fd:bc:b3:0e:7b:e1:35:5b:ed:b5:
ae:e2:b7:27:b2:d5:5a:41:88:b8:a3:a8:f4:16:03:
1c:83:47:e9:48:91:31:9f:48:b6:f4:86:8a:26:a9:
72:3b:bd:e7:e8:fc:d2:73:a3:e8:63:46:44:fa:cc:
df:82:55:07:2c:91:01:86:6d:c4:37:86:48:08:e7:
d5:e6:c0:45:e0:59:a0:0f:83:9a:01:69:c1:60:54:
ca:22:3e:1c:85:07:09:80:45:23:cd:80:b9:90:dd:
66:05:24:69:8b:a9:eb:1f:09:d6:63:14:ab:ea:2c:
0f:be:01:73:b2:c3:27:79:79:63:cc:fe:97:ab:8c:
38:c9:74:d1:fb:d6:b2:be:a1:58:b6:2d:6d:e8:3c:
83:f4:4c:1e:27:e4:31:e1:75:66:38:e8:7b:d0:ba:
90:76:eb:90:3f:c8:ba:36:fc:dd:c4:b7:93:26:5a:
8f:cb:89:ba:e8:96:30:82:fd:51:04:25:c1:33:d1:
31:7d:74:38:3a:a4:d8:3d:a1:70:48:52:44:8d:0d:
36:a8:4b:da:6a:48:4f:63:5b:b7:e3:c1:07:a3:eb:
5e:48:e9:d6:db:95:89:12:0f:67:20:31:d7:1e:99:
8f:da:d7:b5:d9:91:d4:d8:00:9b:a1:df:40:ad:99:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EF:ED:1F:B6:D0:44:3C:3F:F8:33:3E:FD:E6:7A:17:39:E3:74:9D
X509v3 Authority Key Identifier:
keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ed:7b:5f:42:7f:d8:45:33:96:dd:cb:5a:d9:da:62:5a:91:
30:f0:be:fb:1e:f9:57:6c:47:73:43:71:3f:d7:b5:58:b0:7f:
b4:4b:30:c0:9f:c7:ac:1b:d2:74:c7:7b:36:20:85:9d:4d:96:
cd:04:3b:18:d1:7d:20:0c:ff:72:2f:d6:3d:91:c0:78:17:b0:
e5:07:77:78:91:24:69:9d:19:3c:3a:62:f5:4c:8c:6d:e7:0a:
1f:9a:02:06:61:08:a2:5a:4c:c5:37:97:35:9b:de:21:4e:f3:
da:b0:ff:15:31:6a:1c:75:f0:8e:29:93:44:bf:a9:dc:ae:ae:
09:a4:bd:c1:db:79:38:2b:7a:3d:ba:8f:92:fb:a5:4d:11:18:
cf:62:28:0d:7a:5d:f3:31:1a:e4:cb:a6:14:7b:72:98:4e:1c:
e9:02:2e:d5:77:a6:d2:dd:d4:91:a5:b2:44:08:3f:ec:96:18:
48:19:77:0f:d6:a2:0d:c7:b9:c9:a0:ee:df:2c:eb:40:12:85:
02:e2:d3:61:56:55:0a:f5:15:2a:5d:4f:3a:73:0f:1f:5a:77:
1a:18:53:80:1b:d3:fb:56:b6:63:09:08:7d:af:2a:fa:0b:f6:
46:7e:90:c1:24:70:36:17:67:36:85:72:ec:f3:16:2d:0d:49:
fd:b2:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:15 2025 by rpki-client