Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
File: PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft (raw, json)
Hash identifier: DdWesFl8LCW2L+wV2JNjHq7CDk5J7RApFh8feYgOjJI=
Subject key identifier: 52:77:5E:B4:1E:1F:91:B9:AA:9C:DA:1E:17:F0:3D:E4:96:1D:51:D7
Authority key identifier: 3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
Certificate issuer: /CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Certificate serial: 0194BD857D6FD84CCF04A9D9DE2830B58220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
Manifest number: 0DA8
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl (hash: tzReSldvsIRKQBakWfGQMJ3SbxO8uvGNAPZ0bJnQwzo=)
2: lFB-3tPNMg7_ita4wpHXyFs1Wtg.roa (hash: 2vQA+DCbD+mwH0gGh6uSgSbBtdD3lkqqjcblNuRAAAw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7d:6f:d8:4c:cf:04:a9:d9:de:28:30:b5:82:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=52775eb41e1f91b9aa9cda1e17f03de4961d51d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9f:83:be:84:9f:af:ab:90:0e:ee:3d:19:a8:
af:c1:e4:a8:42:a9:03:da:0a:f6:81:ca:27:cb:0b:
b9:78:a9:d6:ac:8b:5b:d3:07:a3:71:46:d1:df:22:
fa:cd:a0:5b:83:38:b9:f9:f8:ec:f6:f7:71:e0:0a:
9c:e6:06:88:72:f3:97:31:44:16:2a:d8:33:bf:d3:
bd:fd:2f:4d:7d:aa:6f:35:01:a2:86:e4:ef:70:1a:
a2:a5:fd:f7:0d:0e:f1:4c:4e:9f:db:8a:d8:f0:d4:
b3:0b:32:4b:7f:ca:ed:60:63:3c:13:6c:cc:14:90:
90:77:50:94:79:28:58:ad:a0:0a:91:f7:b9:e1:4a:
d7:b3:a0:23:35:a9:e0:85:fe:c4:7d:b2:9e:16:04:
f4:2f:49:d8:16:90:9f:e0:ea:46:40:8a:7c:25:d7:
1f:11:0b:c3:25:c8:04:f9:40:e9:27:e2:26:af:9c:
be:c4:2b:d3:7a:c6:35:d4:18:27:af:ee:52:de:02:
d2:ad:ca:f2:74:f1:b7:c3:ca:b6:a6:ed:6b:b4:80:
89:85:ae:c7:e0:1a:79:0e:78:b3:ad:95:7e:7f:f7:
05:e5:fd:8f:5c:9e:24:d9:5f:09:9b:6a:e7:20:9c:
f4:26:9a:f8:2e:9c:a0:a2:dd:56:72:26:77:03:b2:
22:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:77:5E:B4:1E:1F:91:B9:AA:9C:DA:1E:17:F0:3D:E4:96:1D:51:D7
X509v3 Authority Key Identifier:
keyid:3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4c:aa:22:7c:5f:d3:a8:01:18:c7:f0:93:b2:9d:04:b6:8c:
1b:c0:6c:77:ef:6d:80:d1:ac:89:44:28:ba:9d:2a:aa:22:bb:
26:74:d9:5e:8b:1e:d5:1a:4e:c5:12:c5:6f:99:85:4e:2a:d3:
09:8a:57:2f:04:f5:86:ce:ff:80:a9:8d:40:f0:41:0b:54:51:
b8:f7:d0:51:22:89:1c:bc:0c:ab:0d:fa:ac:71:8e:a7:9e:12:
83:58:ec:fb:f8:a0:83:e3:b8:8e:3f:fd:40:56:8d:0c:5c:ed:
c2:80:ab:aa:6f:b7:e5:75:96:0b:1b:0b:94:1e:3a:e4:c7:9c:
17:da:c6:d4:b0:29:20:ab:fa:af:e7:9b:54:fb:a6:e3:d2:5d:
55:f8:fa:0d:fd:93:18:ce:1f:aa:9d:8d:da:9d:ea:1d:1e:10:
41:d9:b8:4c:f8:5b:84:44:11:54:1a:8e:e8:bf:b4:40:b6:4c:
6c:cd:50:2b:40:f2:97:96:11:ee:60:54:a8:e9:4e:f8:86:1c:
2d:1e:21:0d:08:8a:8c:86:53:45:1a:b8:3f:7c:6a:33:98:6c:
1d:e8:07:e4:67:e0:44:4b:43:24:33:59:f7:ec:cf:07:0f:7e:
7b:56:c6:13:cb:c0:35:29:5f:04:a6:ce:b8:0e:79:55:a0:de:
1c:c1:06:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:23 2025 by rpki-client