Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json)
Hash identifier: XicO/jBHAZT2FJv1ppfVO4nfKjCTD5buPsxnUhmE+c8=
Subject key identifier: 2D:64:0C:26:76:54:A3:D9:02:19:D3:8F:6B:18:9C:90:1A:76:F6:EB
Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Certificate serial: 0194BCA9AC58BC398A6B4CC21FCAC57CACFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
Manifest number: FD
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: sy/2ki46WmM/fvcmzXahAdk7BFrDrv7MzEykeJ/JpPQ=)
2: iTxg6a45pQs6yguLKNzKJpXtu1I.roa (hash: IbbuNrBXDC3r/NQaAU8s873gXp019KR8EegJpijUcwo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ac:58:bc:39:8a:6b:4c:c2:1f:ca:c5:7c:ac:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=2d640c267654a3d90219d38f6b189c901a76f6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:fa:d5:25:04:3a:ce:0f:3c:1b:db:c7:36:
03:91:41:76:97:85:34:68:92:7c:ab:29:27:c5:38:
32:c5:4a:6e:c3:26:3e:8d:36:25:21:ef:75:72:61:
2d:80:7b:c1:a1:19:ae:38:c8:80:6e:07:e9:02:8d:
78:55:2e:54:30:44:89:7c:81:d2:83:af:56:33:7a:
70:65:fb:bf:e5:b7:07:9d:c0:1a:b3:03:82:9f:01:
fc:e8:fa:8f:b6:bb:87:a4:b0:5e:b1:bc:36:8e:e0:
b8:49:ee:bc:45:3f:75:22:d2:d2:75:a0:66:97:50:
7a:1f:80:38:bc:2c:65:fd:00:75:04:89:45:b9:1c:
cf:46:b6:68:f2:30:e6:90:be:76:f2:41:7f:3a:11:
99:f4:8c:32:6c:5a:f3:e9:0b:35:f4:fb:cf:e5:29:
3c:0f:e2:5b:21:72:9a:29:f9:64:18:04:5d:32:64:
0d:c8:f0:99:1b:bc:7b:64:69:c0:31:72:5e:2a:ee:
c5:04:94:57:bd:4b:12:02:d8:ae:de:a9:43:5e:a8:
5e:85:ce:fd:f2:31:fb:e6:a6:a4:aa:ab:97:d6:9f:
24:de:f9:37:06:0d:87:21:cd:cc:4b:72:1f:a0:31:
db:60:25:71:09:da:dd:70:f7:83:15:43:52:b2:d6:
98:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:64:0C:26:76:54:A3:D9:02:19:D3:8F:6B:18:9C:90:1A:76:F6:EB
X509v3 Authority Key Identifier:
keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:90:5b:72:65:aa:13:83:56:ca:ee:ea:13:a0:cc:cf:60:11:
ee:73:a3:54:39:56:f8:78:20:25:3c:08:c2:78:ad:d7:e1:0d:
67:6e:10:d1:b1:37:fa:74:2a:ae:b2:c8:e0:09:5c:03:cc:cb:
ec:bd:92:b0:1c:21:f6:e3:17:c2:6e:ad:f2:89:7a:bb:4e:7e:
85:c1:b4:4a:ec:e2:bb:f5:40:65:0e:b1:30:06:22:a5:67:2d:
41:50:9e:e7:d5:a9:28:b6:1c:84:a3:0f:ff:d7:ce:10:14:f4:
6a:6b:e3:18:15:84:f1:6e:05:90:b2:93:19:b1:02:21:a0:7b:
96:6c:43:3b:e2:f5:b7:52:45:f5:42:49:11:1c:a5:7f:2c:11:
bb:17:13:5d:31:06:10:90:d4:4f:0f:ee:2a:31:e9:64:8e:84:
dd:1f:b0:2f:05:d9:ad:1c:7a:1e:f4:eb:f5:63:11:0a:61:09:
50:ae:72:50:ec:8a:a5:17:ac:33:a3:42:70:67:a6:3c:3c:4e:
9e:7f:50:1e:4c:5b:20:64:e4:4a:39:c2:cd:d4:88:83:03:b1:
91:4e:30:6c:fb:2c:ab:e6:f3:b5:7b:f3:ee:f3:3c:4b:26:e3:
69:5b:e8:c0:12:17:f7:1b:0e:81:2a:4d:4c:a0:d6:8c:dd:75:
17:61:96:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:51 2025 by rpki-client