Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
File: pnkWCgRJ6LUPwByF3PzlSyxim1E.mft (raw, json)
Hash identifier: M7vm943jf0dWWxtKnkLxy7mAO5ysIErWajnIMugGlWI=
Subject key identifier: 48:85:8F:88:A5:11:14:42:DB:95:70:3F:3B:C0:90:C9:39:47:1B:85
Authority key identifier: A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
Certificate issuer: /CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Certificate serial: 0194BD4EAA29B73147E4DEB81A343A0B3D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
Manifest number: 0E30
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: 6zgBCVzd-5kdX0sgGe0YDglrk04.roa (hash: mpYaeNHnIzoaHZnsNjSuZCAnd5S6WeK+VhnJsngc1QQ=)
2: pnkWCgRJ6LUPwByF3PzlSyxim1E.crl (hash: RK05T6iH2j2Qy3y/Z93gw15Y/Sxbo1U38D60ochdqEk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:aa:29:b7:31:47:e4:de:b8:1a:34:3a:0b:3d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=48858f88a5111442db95703f3bc090c939471b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:50:e3:3a:3d:33:af:6b:48:02:cf:73:14:d3:
63:aa:2f:82:44:32:1e:82:38:cf:97:bf:70:b1:ad:
64:7e:c5:d2:fc:7a:e7:4b:eb:04:5d:2d:90:40:64:
95:5a:c0:7b:97:19:84:9c:eb:1e:7b:a1:a8:29:7d:
a8:1d:9a:9a:18:38:d0:5c:4f:a9:db:e0:94:ff:76:
85:2a:90:c3:c9:bc:3c:96:4f:52:78:7c:e0:5d:74:
23:7e:3d:4a:4a:98:30:30:9c:95:3f:9f:8d:ca:12:
f4:ad:1f:9b:3b:4e:de:86:05:23:24:15:76:3d:29:
e6:4c:3c:2d:f7:1e:61:f4:79:bf:04:41:23:77:91:
c4:62:a1:d9:80:95:15:42:ef:94:5e:3d:b6:f7:a3:
ca:a3:42:92:0f:c3:90:a1:d9:a7:eb:23:8d:74:fc:
27:d8:df:77:c8:e9:d5:66:23:bd:a5:c5:23:ec:cc:
3e:2f:c8:d4:ec:20:b1:34:ed:b5:9c:f1:0f:b6:38:
56:ef:a3:9e:22:82:2b:2a:99:7c:77:6c:fa:89:30:
3b:a0:88:1b:a2:e6:e7:e0:1f:32:6c:e9:6a:9d:dd:
f3:04:c5:f3:3c:b1:ad:2e:fe:10:3e:fe:5c:15:bd:
7a:b5:4b:4c:ed:13:a4:b6:02:11:f9:e9:af:85:96:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:85:8F:88:A5:11:14:42:DB:95:70:3F:3B:C0:90:C9:39:47:1B:85
X509v3 Authority Key Identifier:
keyid:A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5d:1d:f1:86:23:75:80:bd:55:96:f0:55:e7:ca:5e:d2:5e:
c6:ba:39:1b:1f:fa:ed:64:e8:3b:cf:58:cf:e8:a1:b0:23:cf:
dd:6d:47:94:1c:bd:d8:6e:fd:4d:68:30:ae:36:54:56:50:db:
ed:49:3a:4e:96:d2:4f:37:3c:5e:b6:af:a3:7b:15:01:b4:e2:
5d:53:07:30:56:d5:b4:79:52:45:3c:fa:34:04:ee:b8:2d:77:
61:17:31:3b:23:02:b5:24:a6:b3:db:31:c5:a1:1a:f3:95:30:
2c:97:3b:32:9d:cd:3c:8b:95:f9:36:75:80:77:03:bb:68:f2:
86:ae:6d:04:dc:92:cf:e4:b5:1a:93:47:49:41:76:32:6f:86:
93:b5:84:bb:cc:6f:6d:7d:b8:48:96:1e:ed:56:5a:1d:5f:66:
8f:cd:bb:e7:a2:f3:d5:6e:68:77:a7:8d:e7:98:64:d1:61:8f:
c9:75:5b:5d:d8:d9:4c:f8:b4:8b:d9:f9:a1:05:78:50:ff:08:
af:43:92:b6:39:af:1b:d1:86:08:56:22:35:11:86:1e:c9:3f:
46:f2:21:06:ab:37:ae:ad:c1:b7:61:36:17:03:e0:f7:29:8a:
55:46:88:ce:01:92:7e:a3:04:6a:42:87:34:0e:85:72:6c:a0:
ca:80:ff:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:38 2025 by rpki-client