Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: 1jgj72BEKRqTM8GQv0/1s//mSSK/GsKBePnny4o42l0=
Subject key identifier: A8:25:90:26:73:A0:8D:6F:30:E5:8B:50:9F:81:34:D9:C3:E4:5A:CE
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 0194BCE06AE3BCAA4A11A78195E6B7F68DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 0B70
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: 1f5RgwFMfZFLnXzidt7Bs5v37/OE4TqZSUhy1YRWEZ8=)
2: Zudt2t67uMUQbMO8N99rmxJB1wQ.roa (hash: SIlAW/DlBSg5+XbRtnFyzPAIYziyY+yFv6/k5lPUFJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6a:e3:bc:aa:4a:11:a7:81:95:e6:b7:f6:8d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=a825902673a08d6f30e58b509f8134d9c3e45ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:33:23:d0:23:4f:8f:5f:ee:f3:8e:ef:6d:fa:
77:51:b6:8b:fb:cf:5d:2e:0f:4c:c5:e9:d3:58:2f:
d8:7e:8c:f9:55:22:61:69:fb:4e:bd:93:84:e3:bf:
36:76:22:04:6a:a7:38:6a:b8:ec:63:19:02:02:f6:
f8:51:7f:94:78:ed:99:86:8b:55:48:c5:2a:14:a3:
2e:e1:5b:fd:16:e9:4a:4c:e3:64:bd:06:f8:6f:1f:
0d:9c:b0:e0:0a:10:f6:3c:45:87:aa:f7:eb:d8:58:
c9:9f:6a:ec:b3:fc:1d:a5:f5:83:2c:ca:ef:73:af:
18:4d:88:e5:82:c8:00:ec:51:bd:5e:d9:3d:96:f3:
29:e1:da:91:3f:ea:e5:70:c7:b5:a6:c4:26:5b:77:
e1:c5:a9:89:30:aa:f8:b5:a1:a9:4e:c9:91:c9:d8:
0c:43:34:ae:d9:b9:ae:6a:36:3f:56:15:8d:fb:1a:
32:63:42:ad:c8:a5:d6:d1:bb:73:d7:08:7d:a0:df:
8c:f8:d3:00:37:f4:ab:2b:9e:b6:fc:27:fa:b7:b6:
ea:4e:4d:f4:37:50:b4:bc:4f:8a:f5:ba:73:e1:50:
d0:4b:d6:8f:f8:3e:95:46:6f:69:4a:d2:2a:6d:a6:
e7:c5:b1:3c:6c:11:bc:11:50:6e:64:96:8d:6f:c0:
c8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:25:90:26:73:A0:8D:6F:30:E5:8B:50:9F:81:34:D9:C3:E4:5A:CE
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2d:89:62:4a:5e:d3:3d:2c:28:3c:b4:ab:83:12:c0:75:f6:
54:70:7b:6d:e6:21:82:1d:55:4e:96:2e:d2:12:69:2f:2b:71:
ee:d1:de:7e:1b:38:15:31:a6:89:3d:01:ec:f8:8a:3f:38:62:
76:d4:59:79:36:42:6a:58:18:ab:a1:02:5f:77:7d:56:6e:e3:
38:56:78:f4:36:dd:97:fe:7f:57:29:7f:0d:5c:15:bc:ea:79:
37:5f:e7:10:29:67:23:73:dc:86:65:72:05:59:25:fd:a2:61:
41:1b:c5:1a:27:b2:c6:c5:4e:d0:98:c3:45:27:72:f2:2f:9d:
03:6a:8d:cc:f5:58:b9:82:d7:67:8d:e9:8f:5b:9e:b6:4d:8b:
56:d8:e1:39:02:ea:8f:e8:e3:53:10:7f:29:50:73:48:e1:53:
bc:b1:c8:5b:63:78:7a:da:ef:69:f0:da:68:e9:60:7a:f0:31:
f9:b3:79:df:3f:d8:14:00:46:50:55:df:c4:19:e5:7f:55:97:
1f:d2:d6:ab:31:67:1d:83:a9:f0:f7:96:eb:8f:fe:21:ba:43:
22:5d:1f:5a:70:08:ee:54:77:5c:68:ee:2d:fe:8d:bd:56:60:
d4:b1:7f:43:01:0e:a3:38:41:40:b1:56:55:bc:66:29:b6:99:
47:70:4c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:13:08 2025 by rpki-client