Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
File: pnQBXVCbXU85bqNjNp6ddP-tdZM.mft (raw, json)
Hash identifier: XyWGkmGZh/ARRIJV+V81OWYyg4o/ZurtWQHdd3qVJ/g=
Subject key identifier: D6:1E:38:15:B5:7D:50:D9:11:57:AA:29:FA:9B:5D:1F:32:E3:86:5A
Authority key identifier: A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
Certificate issuer: /CN=a674015d509b5d4f396ea363369e9d74ffad7593
Certificate serial: 0194BC3BBFF09B2AEECDA7180C4F334BB8E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
Manifest number: 12C3
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: pnQBXVCbXU85bqNjNp6ddP-tdZM.crl (hash: OFGIHL1kZ0FC3ZHSSaoSqaJxSH+XPl6ECYMPvAziAzU=)
2: ytlPgasGVjygeToAnL_7qGL6niY.roa (hash: 4pWkNfB/a5sc8sNCH66lYgOc8aQwiUY9Cf8vuGjBpFo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bf:f0:9b:2a:ee:cd:a7:18:0c:4f:33:4b:b8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a674015d509b5d4f396ea363369e9d74ffad7593
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=d61e3815b57d50d91157aa29fa9b5d1f32e3865a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:1f:99:db:e9:ed:67:f1:5d:e3:a9:31:51:
bb:01:1c:58:2e:17:8c:d3:21:ae:bc:6a:b0:7f:5a:
8a:96:a0:dc:68:1d:22:8e:c8:67:7b:53:01:aa:9c:
74:2f:a2:17:d5:ec:89:d1:ec:0d:32:ab:10:90:bd:
4b:72:b0:59:4a:58:00:20:e9:96:58:43:52:13:fa:
91:87:a6:8c:ce:97:e2:ca:36:7f:7e:13:fd:19:1d:
17:99:84:91:9b:a3:cf:71:36:a3:26:da:92:f9:3f:
0d:d8:f2:d7:2b:c7:5a:08:63:e7:6d:20:5b:ff:5c:
7e:51:04:b8:c5:0a:09:c9:cd:05:29:c6:92:85:f9:
a1:fc:68:0e:91:f8:16:46:50:c2:1c:2d:d7:05:3a:
19:53:86:2b:fa:7c:46:74:d5:2f:68:c6:96:10:b4:
44:cd:79:20:a0:ee:6d:99:b9:77:d1:01:c0:49:5b:
73:99:bc:a9:72:35:09:30:4b:92:ac:d4:79:78:18:
c3:fd:93:ca:60:d3:f4:6d:f1:9a:61:3e:bc:20:14:
bd:7e:e3:4b:ce:45:40:52:16:d7:64:f1:e1:58:1e:
55:5d:c5:5d:76:71:9e:ba:15:b1:dc:12:18:a4:1f:
9f:52:09:10:0a:79:76:c0:3c:b3:37:f0:ea:5d:a4:
e0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1E:38:15:B5:7D:50:D9:11:57:AA:29:FA:9B:5D:1F:32:E3:86:5A
X509v3 Authority Key Identifier:
keyid:A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fc:f4:86:1e:3f:c6:18:f0:2a:a4:94:dc:36:b4:5f:77:2c:
dc:9b:92:86:ab:fd:49:8e:3f:d8:90:ef:7c:12:41:cd:31:46:
e5:83:a1:28:98:b9:0e:03:e2:8e:7d:df:ec:6c:b1:21:ec:28:
95:6c:2a:46:e1:00:78:fc:5f:36:fc:9a:47:16:77:ee:2b:90:
95:b1:27:ff:07:39:7a:16:f1:3d:9d:45:21:12:85:af:84:6f:
33:c2:36:f1:8f:d6:de:85:55:a1:e6:99:84:4d:06:f5:52:d8:
db:5c:f3:02:9c:ce:70:ec:4d:f6:96:1a:f5:53:56:86:44:a8:
a7:92:f8:a8:58:d1:58:7b:09:a8:40:e2:56:ef:90:35:c7:7a:
d8:3f:83:11:96:45:77:aa:b2:fe:5c:4b:d6:49:81:55:77:eb:
32:e3:dc:ee:f5:65:f7:e5:39:0f:48:da:c0:86:53:43:10:ea:
3a:5d:06:10:a6:13:b1:cc:ca:fd:8e:75:09:1b:16:cc:d8:79:
f0:b3:30:b0:d9:4d:bb:99:9a:a4:31:df:41:b9:89:55:1c:a2:
0d:0b:83:45:d3:af:30:b9:57:8c:1e:4e:b7:31:6b:9a:ae:05:
7f:39:39:aa:16:76:3f:f9:e1:96:ea:5d:54:8c:c7:c6:ed:c4:
b6:0f:db:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:19 2025 by rpki-client