Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
File: PksGq_B-6qwRslmgj-Fx1mvSgw0.mft (raw, json)
Hash identifier: GZSS32mw5FmN4kCYES7mdcmpcwqvz3ZWZ3kaS2nWBws=
Subject key identifier: D3:99:06:BE:CF:15:DB:2C:53:BC:4D:82:6E:2E:EF:D9:CA:3D:2E:25
Authority key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
Certificate issuer: /CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Certificate serial: 0194BC04D86151C7365A13FAFA840842D5B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
Manifest number: 03BF
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: 75tUj24Sz1np7niKzvR12f9WWo0.roa (hash: 37+oOch5GIb73IinVFHvfdIOejO/FeSmIhgqOGWbqGU=)
2: PksGq_B-6qwRslmgj-Fx1mvSgw0.crl (hash: oRn4f0pmsrQzA+tj9l1r6x9B3mUQJVNTLrUsdtNtHHc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d8:61:51:c7:36:5a:13:fa:fa:84:08:42:d5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=d39906becf15db2c53bc4d826e2eefd9ca3d2e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:64:8a:86:6b:ee:a5:73:4d:1b:a3:36:df:
f8:26:15:7d:de:7d:ce:3f:ef:06:33:fb:10:85:ef:
49:5a:ea:e9:5f:2f:40:0c:20:e8:e6:3a:1d:76:e0:
c2:1e:fe:26:d0:04:0d:a9:90:68:ab:ba:17:42:6b:
74:38:7e:ed:14:75:a7:b7:a1:cd:e0:e0:7d:be:f9:
42:ab:12:0b:42:15:5c:de:22:d1:4c:7d:14:7b:c9:
f2:dc:54:90:4c:3f:6b:6c:16:a1:50:ee:6d:dc:8d:
1e:9c:07:c3:72:8e:a6:17:93:67:ae:3c:be:5b:a3:
9e:73:12:9b:2f:e4:56:8e:ae:b7:ac:dd:92:0f:3a:
14:80:7b:28:b2:f6:5b:c6:5c:40:50:52:af:52:7c:
c1:e2:8a:77:f6:47:26:89:36:88:68:3d:14:0d:f7:
ef:ff:57:d3:37:43:a2:93:0d:8d:7d:ad:b7:b4:a2:
1d:46:bd:a6:28:a7:be:23:69:e4:f0:70:e8:e9:4d:
a9:a0:da:dc:c6:b1:2b:93:83:b8:cb:d8:df:1a:32:
12:84:58:1a:04:d4:cf:22:23:01:d1:8d:d6:b2:25:
18:15:54:e6:c0:de:14:01:1f:09:91:a2:cf:5b:c8:
fc:7f:c6:d9:73:8f:c7:05:ca:8f:61:25:ba:db:d1:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:99:06:BE:CF:15:DB:2C:53:BC:4D:82:6E:2E:EF:D9:CA:3D:2E:25
X509v3 Authority Key Identifier:
keyid:3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6a:b5:94:69:92:8e:97:6c:6c:62:4e:80:a1:6d:b7:b6:c6:
40:48:75:41:cd:d8:49:e1:1b:1f:db:db:de:9c:b9:0b:fb:af:
97:a6:49:14:3f:80:f7:b1:61:fe:fd:40:7e:52:84:95:7c:dc:
ac:21:42:34:6f:ad:aa:6b:f6:2e:18:e6:3f:30:6f:01:bf:7a:
ac:b4:9e:84:f9:11:35:e4:43:c2:d4:2b:2d:e1:e8:01:35:57:
6e:49:d1:ff:3b:28:eb:c6:4f:6b:00:bf:e1:f5:47:29:63:5a:
f2:1d:1c:34:41:9d:ab:16:99:dc:c1:ba:68:4c:7c:56:b6:3e:
8a:d1:01:87:7f:9a:f8:5d:dc:ec:55:60:e7:82:5c:da:58:15:
b9:14:d9:08:fb:af:85:1e:0e:1b:d1:28:00:b5:40:81:d8:cb:
bc:e8:84:64:9e:df:80:58:4b:45:25:e8:f3:ed:cf:a7:9e:79:
dd:d6:65:7a:fa:6f:5f:36:bf:d9:99:8d:aa:39:39:53:0d:eb:
64:7f:7b:60:93:4a:d7:8f:9b:ef:bc:71:32:39:81:49:b4:94:
0d:48:71:cb:6a:a4:38:75:d5:db:20:0c:a3:f0:a9:36:c9:26:
f1:54:55:4d:84:b6:3d:6e:c9:bc:17:53:77:32:ca:29:c7:2d:
66:7e:f3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:46 2025 by rpki-client