Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
File: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft (raw, json)
Hash identifier: DMI6S3krOfbw6Yao30QwjvcEePf34pGSld89ugr5nDE=
Subject key identifier: 17:36:C6:95:56:4C:84:14:96:A5:6A:F8:F4:AA:BF:04:32:66:D6:15
Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Certificate serial: 0194BC3C5ACA05131AA3F52B4CFB5745080B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: B29MvHY6zeEvGzG4mIu0G_C1t3k.roa (hash: 2w6PM7Xh404gJeZoq9hPqo7jK8P7Uk4U1TIQbaY+1sM=)
2: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl (hash: aEoVhs+MVhvhF5qzLi4iiLNioq/+L0S5+p3i7Yj5a/k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5a:ca:05:13:1a:a3:f5:2b:4c:fb:57:45:08:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=1736c695564c841496a56af8f4aabf043266d615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:a1:40:bb:8c:ec:42:23:e9:77:e2:f5:dd:
31:65:1a:bd:3d:f4:19:b2:20:64:2c:84:ea:31:64:
f9:0c:2e:29:e8:d4:b8:d9:4e:fb:1c:56:15:70:20:
ae:70:26:62:6f:1b:3b:e0:ee:34:aa:ea:38:99:3d:
31:8d:76:18:84:31:35:a9:34:25:c9:f2:49:4e:9e:
cd:80:4c:61:b7:07:f3:77:ad:29:01:eb:96:02:a2:
2a:69:eb:12:72:b6:bf:da:e8:1a:cc:60:40:06:68:
20:81:88:fb:92:fb:cf:8a:0f:dc:c4:ee:dd:25:30:
2d:3d:f2:92:e7:7e:08:f1:63:30:68:3f:bb:d5:5f:
1c:c5:66:28:02:e3:a0:af:a0:c8:b9:aa:29:23:d8:
a5:66:0c:52:1a:e5:78:06:12:91:df:55:41:f5:61:
7e:70:44:f6:70:b4:d0:00:69:64:e6:78:00:0f:9c:
05:4f:dc:a3:9d:ce:0c:cd:29:99:f1:00:6e:9a:69:
d2:1c:a3:ae:09:28:2f:75:a7:1b:12:a2:8e:6b:3d:
10:30:97:fa:76:bb:11:9b:34:36:36:36:5e:20:f8:
5f:66:48:ee:3b:d7:33:b6:ff:8b:9c:be:e8:51:89:
26:e3:e7:c8:19:c9:44:77:01:92:e9:27:6f:79:1f:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:36:C6:95:56:4C:84:14:96:A5:6A:F8:F4:AA:BF:04:32:66:D6:15
X509v3 Authority Key Identifier:
keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:43:4d:8e:eb:93:a3:dd:fb:8f:90:e6:41:99:e0:2b:d8:44:
fa:d3:66:fe:72:36:86:54:05:af:6d:33:23:99:88:47:02:77:
82:3b:59:cd:e1:13:61:7e:e7:9b:fb:29:c7:63:3c:70:d5:28:
db:de:93:02:b0:74:df:b3:36:2a:e5:a6:0c:69:72:cb:0d:78:
2e:c0:5a:0d:9b:82:3b:da:4e:6a:ed:54:a4:90:51:b9:06:88:
03:c8:be:5f:96:b6:e7:0c:ba:07:56:c9:04:bd:c3:d4:1a:b9:
d0:ac:f2:b3:d8:63:56:00:01:de:88:42:b2:8e:44:2c:e7:da:
94:0b:2b:27:2d:91:84:c7:3e:65:17:ef:f0:74:42:fe:3e:f7:
cd:69:a6:e6:4b:85:b1:0d:ae:aa:bd:f0:1f:c4:fa:5e:9d:7c:
c9:5d:bb:12:c6:39:92:07:af:2d:88:6f:30:33:49:a0:1d:ad:
99:29:88:6a:2d:d1:97:50:1c:88:5f:85:f6:81:98:9f:41:7c:
cf:29:3a:96:18:b0:67:2c:d2:5a:e8:63:37:2b:8f:90:50:37:
89:30:08:c8:6a:7b:2d:d2:49:0b:d4:de:d9:d9:07:d8:51:2c:
b9:d6:d3:37:9a:84:0e:b2:ea:3c:fe:cc:29:aa:ab:75:dc:39:
2c:14:4b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:24 2025 by rpki-client