Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
File: pKB83NCVA-z-Pml8wyZphRga6Co.mft (raw, json)
Hash identifier: jDJx0sOxL4fRQnvBvu0QNYLALobAxopsI9cmMuq9Zdc=
Subject key identifier: 06:31:B2:4D:9B:5F:36:9C:DA:24:06:19:A0:67:1B:B8:D4:ED:6D:D8
Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
Certificate issuer: /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Certificate serial: 0194BCE0EA67941EC301607E5DBFA56529FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
Manifest number: 10CC
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: Hp2ljcULzg53pBCXbKt3KAlFkVw.roa (hash: qsDz5TZedLiWJnxlNWk1Ko36qqmg6+ybGLmJSNA11KU=)
2: pKB83NCVA-z-Pml8wyZphRga6Co.crl (hash: kmrT0HqrkhJZfLeqKaRnzpou4mlZ+iVQ4z2r5kGM/5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ea:67:94:1e:c3:01:60:7e:5d:bf:a5:65:29:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=0631b24d9b5f369cda240619a0671bb8d4ed6dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:44:87:52:b1:26:d6:46:3a:64:ef:52:91:27:
99:96:10:3e:8b:d7:5a:d0:b7:12:6c:01:d9:be:60:
a1:97:e1:ca:e9:37:32:07:07:fc:f3:2a:79:77:c5:
55:6d:e8:64:dd:e1:f9:c0:d2:64:7c:a4:c5:16:f2:
b9:3e:69:6e:1f:93:b5:77:c5:b7:b0:89:16:ac:e6:
8e:76:bf:b8:01:98:46:4d:b7:0a:2d:ec:54:d5:58:
f1:df:9e:6e:4b:db:9c:96:bf:9a:88:67:02:6d:a6:
ae:db:3e:96:ae:ee:15:06:f6:1c:a9:cd:f3:ed:56:
35:40:9e:7f:1b:87:57:c0:a1:d2:a4:83:fc:0e:ff:
47:4b:18:39:2a:00:91:13:b0:f1:31:23:24:dd:a9:
61:78:ee:c0:c8:58:d4:eb:e6:a9:a6:44:58:1a:ae:
74:a5:0b:68:d4:8d:ed:17:3a:14:d3:4d:68:25:8b:
d1:a4:e3:6e:8a:0e:e9:96:5b:e6:f5:bb:72:d9:ee:
d1:ca:7f:47:b4:83:7e:c7:fc:40:91:b3:3d:7b:65:
67:69:44:d8:1d:a7:78:2e:95:59:a9:09:99:12:c0:
64:f4:f3:bc:8e:c5:6a:87:f6:22:5c:d8:d4:63:76:
5f:f5:3b:cf:84:73:9a:d5:d8:be:db:7e:cb:37:36:
ea:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:31:B2:4D:9B:5F:36:9C:DA:24:06:19:A0:67:1B:B8:D4:ED:6D:D8
X509v3 Authority Key Identifier:
keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2b:64:9b:e9:91:0b:d9:3f:b6:9b:3d:cf:a1:79:90:12:cc:
ef:b9:ac:b5:a1:2c:aa:1f:56:0e:ee:47:23:24:ac:47:08:86:
03:5a:83:d2:08:ce:3f:9c:91:c5:b4:17:e3:32:9e:f0:8d:1c:
b3:9d:40:41:8c:f1:32:19:44:f8:ce:a2:06:9b:96:28:27:af:
4e:16:01:55:de:6a:87:f2:f4:61:1e:71:6f:4b:dc:b5:a7:5e:
12:3c:19:35:95:69:46:e2:9e:98:2b:bb:cf:ff:72:ac:7b:6a:
9f:0d:86:37:45:ca:34:c4:2b:57:3c:e3:58:73:9a:34:f1:7f:
d4:6e:87:e1:0d:44:64:43:0e:95:d9:f6:53:91:fc:a7:5b:e0:
cf:39:53:4a:f6:20:9f:a4:1b:80:70:2e:2c:83:64:ab:d5:c0:
da:90:e4:14:19:13:e4:bb:92:08:f2:54:cb:11:5f:c6:4a:c2:
41:47:e0:43:da:a4:98:93:aa:6a:61:71:ec:64:15:78:42:8e:
7c:ce:13:ab:97:4a:d9:27:31:88:1d:32:ac:7c:47:82:03:e2:
bc:62:24:f2:d9:ba:c5:f6:5e:db:5e:89:e4:09:99:5c:24:d4:
b5:f4:01:9b:9d:d5:b9:d4:33:c9:0d:3b:cb:c6:d2:b9:49:c7:
25:30:62:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:45 2025 by rpki-client