Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
File: pCNxKB3-GQctEzndBIKyqvrVQs4.mft (raw, json)
Hash identifier: NZOwB4VGvLGVqNyy/Ed/xf7ATp2Qgy2miQGdjyS+InM=
Subject key identifier: C7:76:6D:46:E6:BC:A3:8F:DF:3F:82:BC:5D:EB:C6:5C:13:29:C5:C2
Authority key identifier: A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE
Certificate issuer: /CN=a42371281dfe19072d1339dd0482b2aafad542ce
Certificate serial: 0194BBCEF3A868E06B4E8E6673267D02F033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
Manifest number: 0704
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: pCNxKB3-GQctEzndBIKyqvrVQs4.crl (hash: A49jd3IQD5DdWG/It9obpJ3f8NftYOnmtMuqmADcnck=)
2: rWk5sIUEQt5GM5tD9jvlVGxlmoc.roa (hash: bdSHmybqlxfqe2LDlmT/vhR2hatifsBsFgj+STLVUXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f3:a8:68:e0:6b:4e:8e:66:73:26:7d:02:f0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42371281dfe19072d1339dd0482b2aafad542ce
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=c7766d46e6bca38fdf3f82bc5debc65c1329c5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:8d:80:8d:38:ee:9c:84:eb:33:c0:7d:cc:
72:b7:0f:ac:03:c9:0c:07:d0:90:80:f9:41:af:52:
a1:08:68:b6:5b:5e:d2:f7:f2:3f:e7:fa:83:a9:ce:
28:02:ac:68:ce:fc:0e:96:74:a2:03:9d:1e:1c:a9:
5e:7f:47:c8:90:11:9d:c3:73:5f:25:c4:7e:cc:e7:
f4:9a:ef:72:ec:5d:71:74:9e:65:39:84:d6:8e:1f:
b0:29:6d:71:6b:30:cb:61:5a:b9:9d:e4:0a:33:dd:
b9:57:88:59:1f:bd:da:68:ea:56:48:b1:bf:ed:2f:
15:54:dc:e1:01:fa:b6:a4:86:63:18:30:21:e0:62:
ac:f5:b0:f8:ae:69:82:58:53:39:91:ef:66:cc:5f:
48:86:8a:09:33:7d:e7:e9:7a:7e:fb:57:bc:8e:fb:
55:49:40:31:64:f1:a0:22:db:fc:d5:79:ce:c9:6a:
57:2c:c4:b3:96:42:c7:2f:a6:ae:88:45:e8:8a:7c:
a0:7c:6a:72:0c:02:cf:c3:3f:4f:40:e7:da:33:04:
82:99:61:73:17:bf:cf:63:40:09:f3:5c:ec:76:b1:
16:0b:91:b1:09:bb:f6:e4:fc:c8:28:9c:b0:88:54:
6d:9e:a3:54:56:19:a9:ee:d6:77:4d:59:4e:d3:e3:
c5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:76:6D:46:E6:BC:A3:8F:DF:3F:82:BC:5D:EB:C6:5C:13:29:C5:C2
X509v3 Authority Key Identifier:
keyid:A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:86:c2:7e:a3:6e:e5:a3:46:92:08:4a:59:2b:f7:ba:d2:76:
26:5e:28:8b:e4:7c:9a:53:b8:8f:93:f3:6f:d8:88:77:15:c1:
a1:13:00:31:da:b8:e3:b7:1c:33:64:1b:e9:77:fa:fe:e2:2e:
40:6f:19:da:57:05:f3:9e:d7:70:58:3b:4b:a1:9f:32:33:55:
03:d0:46:83:99:c8:3d:0d:44:fa:1e:a5:c5:e0:8e:12:f3:44:
af:da:fc:36:ec:30:b7:97:5c:68:ed:2c:01:7e:dd:ce:da:80:
6d:35:0e:7d:e4:90:5f:0f:b3:dd:37:1d:84:d2:c6:cf:d5:d2:
ea:89:c2:b7:3d:84:21:61:71:1f:44:0e:c0:69:3a:c0:1d:ea:
86:e9:fa:c6:20:a9:60:5c:1c:f7:01:0f:2f:70:92:6d:4e:ad:
c3:d2:23:09:77:29:9e:44:da:bc:16:9a:e8:9f:23:e4:05:73:
d0:72:60:95:fe:d8:97:54:54:29:8c:d2:d1:ed:29:2b:61:43:
c7:cb:e5:d2:da:90:d9:cc:79:81:c9:c4:d8:2d:2a:ff:0a:bb:
ea:63:44:f0:34:52:d7:11:4a:51:1e:9a:6a:d6:37:aa:cf:08:
d9:57:fa:91:74:20:4a:d5:62:9b:fe:0e:90:cb:28:1f:fd:71:
7d:dd:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:32 2025 by rpki-client