Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
File: PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft (raw, json)
Hash identifier: DavBmigvbvSaIrLAJY/N4z8avyRjNvRNlIvvEEYnLgs=
Subject key identifier: CD:9B:14:B1:56:09:A9:C0:74:7F:95:01:EC:15:E6:5D:A2:59:88:1E
Authority key identifier: 3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
Certificate issuer: /CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Certificate serial: 0194BC3C47C36778AE845E0AC3C40E2135B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
Manifest number: 0A3A
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl (hash: NOxAex4UrwGt+8RlKnxudz/LrWyCzsa3aflXOq2wWVc=)
2: iQ2__D1SyJzADiNoPhNQeVPB_Yc.roa (hash: lqkyJ6zmIlECmWU1azb1X4DpUQDDVZ+y9VrQ0kNoEpE=)
3: vBoUDZdnERmYJbXNYq35Siai1YU.roa (hash: 6VBUQ8BBwpLAKtD1BbA70mx0/1F/tKHjSv+uHPv+nKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:47:c3:67:78:ae:84:5e:0a:c3:c4:0e:21:35:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=cd9b14b15609a9c0747f9501ec15e65da259881e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:f9:03:a0:f6:d1:74:d4:03:0f:53:63:9b:
2f:ba:6a:62:ea:36:72:b7:a7:8a:49:80:c1:1c:10:
e9:6c:26:25:3e:8a:05:b4:6b:8e:95:d9:a5:a1:ca:
19:31:59:4b:7a:9d:ae:68:ba:e1:16:fa:20:bd:91:
c9:c0:c6:69:ca:a6:f8:cb:22:d4:52:8c:c2:86:5d:
be:05:e6:db:8c:87:21:d0:8e:f0:d4:63:05:fd:e2:
db:64:82:f2:6a:f8:54:d2:0d:50:c5:8f:a6:82:6e:
52:5c:bf:b4:da:f8:79:57:d1:b6:01:c4:2d:a0:9a:
71:72:a9:6b:d4:84:6c:c0:ad:bc:cd:10:8f:2e:05:
0e:fd:e7:a7:d6:93:5a:2e:6b:43:63:d8:e3:4b:4c:
02:b9:2f:74:79:c5:47:4e:00:30:0e:d9:15:67:8f:
21:90:22:c2:e1:32:5a:54:a2:13:22:4c:5d:69:94:
43:85:4b:46:6a:2f:69:82:8b:56:69:6d:47:50:56:
b5:68:f7:ba:47:73:c6:e0:b3:3a:7e:a9:e4:83:c2:
00:47:87:49:a5:9c:bc:ff:bc:ee:78:fe:3e:57:60:
e1:a6:4b:71:c3:d6:7c:f6:62:eb:f7:ca:88:6d:09:
cc:fa:44:7d:2f:90:5c:59:a4:e4:27:a0:bf:e3:f2:
b7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9B:14:B1:56:09:A9:C0:74:7F:95:01:EC:15:E6:5D:A2:59:88:1E
X509v3 Authority Key Identifier:
keyid:3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e9:1a:3a:23:01:0d:99:f5:96:f1:38:77:ad:0c:53:3c:df:
4c:ca:5f:f0:79:25:c3:6e:bb:2f:17:8d:cf:a7:f1:fb:20:69:
02:bf:fd:7a:f9:bd:27:fa:04:26:b6:cf:08:ef:70:05:67:cb:
0b:86:50:3c:15:15:61:71:d8:55:c7:3f:18:17:87:c2:c4:7d:
32:b6:6b:5c:83:ed:bc:32:91:ce:d6:df:52:b9:71:99:a4:83:
ca:43:fa:35:da:5b:84:17:53:5a:ed:d8:0f:05:ea:b4:89:4c:
3c:31:25:46:c2:af:b0:02:07:63:6e:68:66:70:21:d1:79:be:
3e:ef:41:4e:3a:3f:e5:2c:72:d9:52:61:1e:4e:b4:3c:5d:35:
5e:b1:52:ef:a6:3b:6d:07:51:0c:87:15:70:1c:37:f4:b1:25:
c5:d7:7c:07:ec:c1:3e:4d:cf:c7:15:6d:8f:32:c5:4f:4c:07:
b9:2d:a2:7a:f5:ea:e5:b6:0d:13:dd:d4:57:eb:d7:5f:2c:fc:
a0:13:62:0d:9e:a4:90:d0:a6:5a:02:69:b6:12:35:61:ae:4e:
5d:2f:4d:48:9d:f7:1f:15:73:9f:7d:f7:f3:4f:cc:0a:a1:d4:
d5:c2:be:b1:03:cd:41:08:83:1e:0b:16:7f:03:46:18:57:8c:
42:57:e9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:47 2025 by rpki-client