Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
File: PgiDSzspc5CcCq9btdNUscDlyj4.mft (raw, json)
Hash identifier: WCd2G90mwLTYT00ZpOtiktSKj3Oyns/gKBgRV0u3zoQ=
Subject key identifier: 0B:01:6A:DE:80:55:AB:13:D0:F8:1D:20:82:54:60:31:03:9F:0F:E8
Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Certificate serial: 0194BD4E6FB9E67905BCBA04636A32D1531D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
Manifest number: 030C
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: MtWTrnrND6EP3cM9Z5OSCIGl4vA.roa (hash: pbxVZVZ80DN49b7VnIcQNiVRM2BUbkPepC2i0a2pNpo=)
2: PgiDSzspc5CcCq9btdNUscDlyj4.crl (hash: BpkskF84ugW2y0uECn6F04T/AhskqbXs1V6Qz8ykWnw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6f:b9:e6:79:05:bc:ba:04:63:6a:32:d1:53:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=0b016ade8055ab13d0f81d2082546031039f0fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4a:31:4e:f9:1d:f0:b7:65:b6:e9:de:a1:ca:
93:38:77:8a:bb:33:9e:79:ae:4f:ad:3a:76:b1:d9:
df:cb:07:ef:17:6d:8c:6c:c0:89:cc:d9:2c:23:ab:
f0:1f:e2:00:d8:0d:3f:ae:87:50:57:36:c2:52:73:
af:f4:96:a7:dd:0b:5f:b8:2b:87:19:5c:17:bb:d4:
47:77:59:e5:0b:1b:06:90:55:f6:8d:4d:f9:6d:ba:
7a:98:67:d8:99:23:6c:37:a6:46:09:55:d2:9d:46:
86:bb:84:e6:fc:e8:0c:ff:e6:c4:5c:f9:65:85:f7:
47:ca:f6:f3:28:54:48:32:c3:1a:f7:cc:e1:7d:71:
c6:81:c3:e9:e3:26:87:1f:52:b4:ef:70:c2:95:b5:
a2:4a:4e:e0:e9:a6:12:19:be:da:41:03:73:0c:77:
76:fe:e8:27:ee:80:74:d7:a2:5e:e3:39:76:41:e5:
99:dc:82:2e:52:8a:9e:89:22:26:02:54:57:0a:72:
2b:3a:e0:e8:c3:b9:be:65:c6:f3:b1:4c:0b:f5:df:
fd:1e:52:c7:58:60:55:38:c8:cd:23:ee:28:98:6f:
cf:5b:ef:45:79:16:06:a5:c9:37:16:32:6d:c5:b9:
ff:86:86:eb:68:df:f2:0e:79:11:85:ea:65:94:66:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:01:6A:DE:80:55:AB:13:D0:F8:1D:20:82:54:60:31:03:9F:0F:E8
X509v3 Authority Key Identifier:
keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e2:9d:84:79:1b:f2:22:7d:9d:ae:8c:2a:cc:6e:a9:6a:40:
94:24:e4:90:8a:d8:39:c4:4d:ca:c1:2c:4f:0c:df:d6:5c:ff:
8e:3e:27:60:dc:bf:ce:10:02:9b:e5:7f:43:b2:6b:4f:14:81:
76:5a:8f:ed:6f:e9:51:fb:43:e3:ed:15:d9:26:1c:1c:9f:90:
1d:78:25:d9:b4:90:a1:f5:9c:d6:6d:ba:cc:5c:9c:12:1e:6c:
88:34:db:d4:20:bd:ab:d3:02:5a:03:93:8a:44:3e:73:98:3c:
6f:a8:60:1f:0e:e0:14:0f:03:bc:d7:8d:4f:63:ec:7a:74:25:
60:2b:28:04:24:da:63:df:5d:fd:2b:63:b0:12:38:aa:e4:6c:
23:c0:93:f0:56:33:cb:3a:fe:12:7d:38:77:59:55:7c:c2:2a:
04:c5:a4:04:fe:81:13:a8:a7:df:58:46:a9:62:f6:20:0a:30:
01:3c:32:d1:e1:9c:85:83:eb:97:8b:f2:97:6c:5c:10:1f:ea:
83:96:ed:ca:58:b8:0c:49:02:17:47:e6:b2:ca:7d:4d:39:0f:
80:14:54:f0:5b:03:da:76:42:57:b6:86:7a:43:0e:8d:e4:55:
5f:e2:5f:b3:5d:f1:cc:7b:bf:00:9e:ca:d5:72:cd:55:75:57:
a6:07:64:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:50 2025 by rpki-client