Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
File: Pkgvs8n5r0cOTki23zgtPVAVRmE.mft (raw, json)
Hash identifier: w3gDPx3nG8UMb/pWquWk1mwqdARi0lzD2sddV0Ncgq8=
Subject key identifier: 84:F8:4A:2B:5B:3F:26:62:7F:BF:B2:4A:37:34:F5:0E:ED:AE:26:5F
Authority key identifier: 3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
Certificate issuer: /CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Certificate serial: 0194BC3C120ABE0540F9F475BF3FA47404B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: 6RcCkdQFGWy_nPVJ5PYr33uzOXU.roa (hash: PZ+A9ZlEQ7K41uD9VPzIENtQyrmgXc6Bk58rmZ1Z+IQ=)
2: Pkgvs8n5r0cOTki23zgtPVAVRmE.crl (hash: 444KBFdn4CtG2is+e53duCq44m64Wh7+WIan5SPh/kg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:12:0a:be:05:40:f9:f4:75:bf:3f:a4:74:04:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=84f84a2b5b3f26627fbfb24a3734f50eedae265f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:77:66:ba:25:59:b3:c6:cb:fb:05:5f:eb:
99:e1:a8:e9:2d:ce:80:04:bc:47:f8:f9:1a:eb:84:
e7:0a:ea:7d:e7:c7:4b:77:ac:95:64:7d:f1:f8:2d:
b8:f5:cc:3a:dd:76:89:9a:2f:74:90:ae:5c:84:6f:
d8:4c:6d:1f:d3:f7:00:cc:85:f5:0b:8d:38:d9:a5:
5d:9f:a4:c9:5d:b0:52:e3:7b:46:b5:53:42:3b:11:
e7:c2:d0:86:8a:af:94:44:68:fc:41:c6:b7:fe:93:
7d:73:29:ab:56:3f:6c:9a:fa:03:cf:1d:35:ec:93:
f8:a4:b8:c3:14:7a:d9:91:79:c8:34:3e:d5:65:0f:
d4:6f:b9:fa:d2:11:e9:d4:bf:d7:75:b6:2c:0e:c2:
a6:44:c9:6d:2f:38:ba:ae:00:d1:57:ca:05:91:2c:
88:a0:63:63:29:e8:5a:77:5f:99:fb:82:52:3d:e1:
f8:8b:09:cd:ad:31:9c:0a:50:ab:2b:2c:8f:bb:f9:
da:70:99:47:db:bf:63:43:97:d2:61:d8:64:5a:8a:
2d:d9:7e:76:81:8e:87:6c:29:91:63:cc:fa:6b:dd:
bb:fb:13:92:de:85:0f:64:e7:90:5c:1f:7f:bf:1f:
51:29:31:76:e1:3f:0e:64:c4:df:44:f2:86:df:c4:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F8:4A:2B:5B:3F:26:62:7F:BF:B2:4A:37:34:F5:0E:ED:AE:26:5F
X509v3 Authority Key Identifier:
keyid:3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:03:41:ad:8e:4f:5b:41:ea:74:0a:37:d0:7d:d5:ec:c9:fa:
b2:c6:5d:c8:ec:f4:7c:e7:f9:57:4f:d6:aa:c1:a9:75:04:e0:
f8:1a:fb:da:08:3d:56:44:41:7a:cf:9b:08:73:77:b9:00:3d:
c5:d5:2e:b1:6e:14:65:c4:bd:6f:46:5d:44:1e:9c:0b:95:ea:
03:d2:9b:07:0a:cd:d1:d9:2d:a6:08:7b:60:b2:37:a4:cf:0b:
bc:58:c3:f4:d0:e3:f7:36:97:28:de:bc:f3:e9:a1:45:76:aa:
b1:c0:d8:87:8a:44:0e:b9:90:4f:45:e2:89:a8:f6:09:36:6d:
be:94:96:da:41:2b:f0:05:b3:06:45:fe:a4:27:69:5b:ce:95:
bb:d4:1f:2e:7c:69:8a:a9:4c:1e:64:17:0a:81:00:d2:95:8c:
93:3a:67:3f:22:a9:4b:bf:3e:7b:77:cf:4d:13:70:a9:ce:b1:
a4:9d:1f:fc:4e:c1:3a:39:4d:03:3e:17:e8:51:40:48:0b:7c:
62:fe:f8:b4:94:bb:04:b2:31:40:f9:6d:ac:03:01:97:6c:61:
40:9f:dd:41:f6:4b:77:52:d3:d4:88:d4:90:3d:00:7c:8c:6c:
b4:78:09:14:70:36:3b:3f:56:07:67:03:7a:9d:71:da:bb:3e:
eb:d2:21:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:00:36 2025 by rpki-client