Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
File: PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft (raw, json)
Hash identifier: C6tYerIl2hx6PrdsxWiuEVYHBk89LnorwX6GYZIv+Pc=
Subject key identifier: 10:CC:90:95:9B:BC:BA:34:BE:9D:4E:E7:C6:8B:3B:79:86:A9:B9:DE
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Certificate issuer: /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial: 0194BC72A4E4730AC10E0F46250D35387186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
Manifest number: 0A33
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: 2lwI54QF_XqrgUwaQ0Ao7KhahI4.roa (hash: WVAqqT9n+azhlwqdMweU/K18Zjr86DqXuRzwgp6K0fI=)
2: BwhHBq8_nG_K7m_W3G4RHhTida0.roa (hash: NMnRXfbQ1lBRTE5ileh9Mp+IR5izyXDHjaaBnvkh6pY=)
3: Cq9NUQOEoD_cfBfrTo3KNErVqYM.roa (hash: cJB8Mu44T/5XwRYPtGiwBr+NSfIkREd5+89CECE5vZE=)
4: PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl (hash: 8HqRdaBlpjr9uLVz2CxNUq3utqNPuXGW3A+kseNcARo=)
5: RiiNoyZSO1JzA7m0_LayA08gFzY.roa (hash: zcGWo+UpPwSMxlv6jUFwi8ud5sRDKsEHFlMBysCY+IA=)
6: U5jElUfybntVVFc0Xi4mAKLnzHI.roa (hash: NrrDZz6zJmQO8TZPUDaJc/kzyH0lsoTEtvlaEiqCXX8=)
7: sD1R-VoESGB_6LIl4dgntbQKRkE.roa (hash: p8K6PYzpldEXmvB0zwceGziQ94cCnLjIpOhxU2zOu8U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a4:e4:73:0a:c1:0e:0f:46:25:0d:35:38:71:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=10cc90959bbcba34be9d4ee7c68b3b7986a9b9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:e4:5a:27:4f:0a:5d:4f:0e:d9:8d:1f:ef:
f3:9f:f2:80:28:8d:f0:bd:c1:3b:f1:ab:b5:a0:77:
1b:1d:b9:ce:77:2e:39:b1:d3:e0:47:89:f6:6a:ad:
65:f9:0f:0c:01:a6:79:bc:dd:b4:34:99:3d:dd:fc:
25:e6:74:76:fd:7f:92:7c:ce:df:68:ca:33:d9:ec:
70:16:99:6c:7f:63:da:d3:58:13:d3:10:4b:7a:b3:
73:4a:33:bc:c2:7a:d1:66:13:ac:73:2c:f8:37:35:
45:c4:78:ed:dd:a8:0b:16:7f:94:f4:cf:c5:8a:61:
8a:5c:66:71:1b:55:1a:d0:90:b3:97:5a:88:99:92:
87:70:f5:08:c5:ce:d5:b8:b5:ea:d9:20:0d:1a:45:
25:a2:ff:7e:05:1a:72:1d:40:ac:c3:3d:b0:c5:11:
6e:7d:89:b2:27:c6:31:7c:19:18:41:18:91:36:da:
ae:c1:dc:62:89:72:a1:42:95:bd:f5:e6:72:2d:c6:
4b:28:24:ac:6c:80:da:2c:a6:95:6c:c2:f4:e1:62:
b8:9c:7a:3c:d5:43:c3:68:85:95:5e:29:96:20:10:
98:c2:98:43:12:94:aa:68:cb:cd:b7:45:7c:0d:f7:
f5:67:b4:8b:d8:bf:7c:e7:9d:00:81:b6:90:bc:00:
03:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CC:90:95:9B:BC:BA:34:BE:9D:4E:E7:C6:8B:3B:79:86:A9:B9:DE
X509v3 Authority Key Identifier:
keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1d:39:9f:38:aa:bb:94:d1:ff:e5:64:c9:c5:f5:f2:74:b4:
35:5e:94:54:b3:94:cf:0f:3e:af:36:0a:1f:17:f3:5f:dd:05:
2e:0f:08:99:28:0c:e9:1b:7e:4d:36:04:40:2a:08:51:43:ee:
72:a4:ba:7a:45:fc:b5:f4:12:ba:67:c8:3c:9b:0b:66:e0:85:
9c:6f:d8:c5:52:0e:23:59:be:13:8b:ec:c4:55:e4:18:58:e7:
70:8a:01:16:c7:d6:f9:8c:38:d5:95:f1:92:42:fd:cd:2f:84:
c3:13:4f:c8:ad:4e:96:55:fd:37:fa:52:f1:4d:6f:43:79:d4:
e6:f7:3f:e5:c5:60:6d:4a:3a:d2:a8:4f:05:b3:35:ed:62:6b:
bc:2c:ab:16:ad:7c:ed:42:6f:3a:da:f3:27:0b:d8:e1:fa:f2:
97:01:67:1e:b9:54:d2:9d:ac:75:1b:3a:7c:d9:17:7a:7d:3a:
62:ce:cf:70:d5:31:fd:0e:f7:d7:7e:d1:db:55:c1:3d:ae:87:
0c:0e:46:d6:a4:2b:85:f7:98:6a:e5:7c:04:d6:f6:6e:f4:1a:
d6:6d:ce:80:db:d8:32:9c:9f:4f:4e:6b:a9:30:fe:d5:eb:5a:
6e:b3:02:18:aa:38:4d:55:68:bd:89:5f:1f:c1:ba:47:f1:aa:
bd:61:4b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:03:36 2025 by rpki-client