Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: LlS+STt8Vfj5XlNbNs9VKfybfSLR1N4uxMPigAHUjgE=
Subject key identifier: 0E:33:4E:59:36:A9:AF:5D:E6:98:40:21:44:98:37:31:4B:C8:64:C8
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 0194BBCE374B4DA95E4A604C2E713DB7C2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 0D69
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: DGbM08ZTsAqYw2-cwkwYARO53tE.roa (hash: vRmKPjIDxHKM6g2DoHk9sDKKAGwsNzCt7i6bkh/HxXk=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: 85T0b0t8GgTo7b++T+XVqO1ADTA5eB2/3p0PJ0lVpMI=)
3: rXPM57-D6wTVhLckZD7CZVwkBW8.roa (hash: fUjK4fhETtHvQdYsLgWmfiWiFboo/MkwlvPD3alJWYc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:37:4b:4d:a9:5e:4a:60:4c:2e:71:3d:b7:c2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=0e334e5936a9af5de6984021449837314bc864c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:cc:73:5d:2e:c5:89:b1:dc:2a:4d:7d:cf:
b3:86:8b:52:8f:41:5a:71:5c:31:53:3c:a1:4e:32:
42:39:9d:5f:9b:6c:ff:3c:a5:aa:35:a2:27:63:e3:
13:f3:cf:dc:2e:54:36:38:78:bf:f9:c9:a2:74:d3:
5d:70:c2:48:f5:ab:09:e1:2c:e0:25:7d:69:67:71:
74:8c:ed:aa:15:5a:04:49:fa:67:ab:b0:b9:d8:d5:
0c:28:0c:22:46:4e:c9:75:08:18:0e:31:15:2e:0e:
9a:76:22:40:67:39:41:10:d0:35:d7:7f:2e:c2:0a:
35:3b:79:69:cc:75:c8:e4:f9:79:c6:55:5e:fe:e1:
11:16:48:7f:71:34:13:c8:6e:5d:ce:42:9a:b2:25:
c6:ba:05:05:a7:85:79:7d:cb:9c:10:1c:ba:70:f6:
4c:28:5f:c9:e0:26:83:86:b4:5e:6a:23:c8:65:6d:
6b:0e:30:9c:75:1d:07:20:20:6f:05:ee:e8:6a:ba:
ae:ad:c0:8a:bb:b3:df:ef:fa:74:98:f4:4b:5a:ae:
d5:ac:08:c1:2c:30:4a:75:47:e5:e3:43:80:87:b5:
20:37:10:08:5a:22:06:ed:4b:fc:a8:9a:6b:a3:3f:
f4:23:98:61:5f:83:ce:5a:f2:aa:cb:6c:95:39:72:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:33:4E:59:36:A9:AF:5D:E6:98:40:21:44:98:37:31:4B:C8:64:C8
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5e:48:b6:32:fb:5a:34:dd:2b:5e:d7:f7:a8:c0:6d:07:17:
fa:81:28:d3:32:30:cf:73:16:af:90:f3:79:31:13:cf:8c:72:
4a:d0:be:c7:84:c3:0e:e1:59:b0:9a:99:c6:90:91:71:b2:9b:
da:b8:bb:be:de:35:62:95:a4:b1:65:cf:ce:e2:88:17:d0:d7:
12:7e:d1:15:6d:0d:78:c0:ff:50:ca:0d:21:2a:57:2e:73:cb:
16:65:82:84:e1:ea:59:8c:cf:3d:a7:5b:c1:77:5f:14:02:05:
eb:54:5c:3f:c9:58:91:1c:75:81:a1:fe:4c:7b:13:58:99:05:
b2:79:53:80:66:f8:8c:98:75:c6:89:14:f9:18:2e:22:ac:54:
72:a2:58:d4:c0:62:f4:37:26:47:75:c2:b3:ae:98:49:d8:b4:
58:0c:e2:f4:91:1a:1b:ca:34:a7:34:ce:57:eb:4b:bc:00:53:
f0:ee:e2:9e:af:45:c3:e2:82:84:74:41:8c:da:29:cf:70:51:
3a:3b:11:9c:3c:bc:0b:4b:c5:29:be:e4:e1:f1:75:91:80:84:
45:06:56:31:ef:d4:13:8e:60:46:d7:7e:5d:52:08:f1:55:77:
c8:39:62:3e:0b:23:d9:1d:f8:0f:97:2d:a3:40:52:9b:47:90:
04:d6:a8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:05 2025 by rpki-client