Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
File: PRRSju_C35P_tOdPobZQO3btls4.mft (raw, json)
Hash identifier: 6a1lHZu8Lh4bzQJXn7YnrWZCjym0O/rmGykqp/rgw98=
Subject key identifier: 80:54:50:CA:E7:CE:BC:01:1A:A9:4F:87:8E:AE:21:81:98:29:27:4D
Authority key identifier: 3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
Certificate issuer: /CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Certificate serial: 0194BD4E9DC8ABA6B299F9611A85ED4DCC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: 1-6KFFu76PFsOuJn8gJBndgCFOdU.roa (hash: 6vvOH7Ca5iY7AgmvELf2eSvGZtIS2tf6NCvrsrbSjcE=)
2: PRRSju_C35P_tOdPobZQO3btls4.crl (hash: Z/3/5C/W+sR+r+6jZgs4+nMGPjlS4yTbsmLQeIjz+nE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9d:c8:ab:a6:b2:99:f9:61:1a:85:ed:4d:cc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=805450cae7cebc011aa94f878eae21819829274d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:40:b5:98:53:c8:1c:71:df:97:c7:70:f1:5b:
ef:04:8d:51:34:d2:ce:01:41:f9:c7:7b:ba:6f:ea:
25:57:5a:09:d9:31:57:14:b5:48:67:5a:1e:65:3a:
97:11:5c:be:53:92:cf:da:08:06:88:74:17:b2:cd:
95:62:5a:b5:02:51:e2:b9:61:9f:9d:1f:d4:67:c0:
1c:d9:50:77:58:8c:13:93:4f:72:8e:cd:4c:c0:2c:
ad:45:95:ec:94:19:b5:25:b4:fa:f2:88:a2:97:15:
56:5b:1e:18:a6:78:bd:d6:e4:36:f4:46:ab:21:91:
da:3c:ca:f7:a9:9f:83:3d:3e:02:d3:69:4e:fb:73:
a0:20:35:48:2e:eb:09:6e:84:ab:0a:b4:92:2c:95:
da:be:92:8b:2f:af:4e:98:cd:62:32:60:f3:75:94:
b5:9b:41:6d:5e:c6:17:c0:5a:fd:95:c1:28:aa:46:
71:dd:0d:87:7b:e9:6c:77:57:7c:19:de:ae:5f:c9:
e6:c9:30:29:00:65:89:04:a2:1f:e7:c2:77:f9:57:
22:79:1f:ee:7c:46:20:f4:39:4d:e0:57:37:25:b5:
58:49:61:45:78:28:cb:9b:03:c5:e3:15:b9:e8:7d:
f7:10:ef:1f:0c:77:d9:61:fd:e9:4f:9b:50:83:35:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:54:50:CA:E7:CE:BC:01:1A:A9:4F:87:8E:AE:21:81:98:29:27:4D
X509v3 Authority Key Identifier:
keyid:3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e5:6a:f0:a6:9f:c0:7b:c0:6b:d4:93:51:19:4f:a7:5e:35:
6b:f2:2e:a5:d2:a0:06:14:db:e2:51:24:d9:a0:4d:35:a7:bd:
2e:b6:17:10:12:ef:17:fc:3c:95:8c:7a:ca:37:4c:53:06:08:
f9:ac:64:66:a6:2e:2a:7c:46:4f:66:ac:ca:22:5d:68:b5:bf:
b2:75:bb:8f:d7:15:db:ff:d1:eb:31:03:bf:7d:e3:9b:21:46:
49:f7:71:80:fd:4d:04:42:82:91:44:1c:8f:d3:18:1c:4c:eb:
76:8b:8d:3f:28:ca:fb:e0:11:2c:9f:39:c9:45:9f:de:ec:78:
3c:df:d0:27:07:5d:a7:f2:ea:66:ac:b6:81:44:41:51:b0:d1:
4f:d6:cb:e9:2c:ff:87:1e:e4:4c:f3:c1:29:40:20:26:88:5c:
dd:a3:c8:66:a6:89:63:88:be:c8:5f:5c:5e:07:ec:c7:3c:88:
d5:d4:c5:97:2b:93:c5:2b:f9:57:79:e5:aa:30:74:d6:61:74:
ce:e9:02:9e:ad:97:9d:44:58:2f:6b:da:c3:98:35:a1:d9:a2:
d1:df:23:ba:3b:1b:af:51:ed:1e:23:e9:bc:dc:fe:94:a5:49:
5b:b0:92:ab:a3:0b:aa:54:78:9a:db:3a:7c:65:10:1d:6d:a1:
8b:7e:32:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:06 2025 by rpki-client