Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
File: PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft (raw, json)
Hash identifier: b6bEqeO4go+YtPK05qyrERFP7F6UPQDNmtqF8BS7p0g=
Subject key identifier: 2A:F0:95:8D:25:3B:B9:8E:40:EA:73:A2:43:04:27:C3:64:EF:E6:FA
Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
Certificate issuer: /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Certificate serial: 0194BCA9F738BD2455665C5F0661847FE262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
Manifest number: 0BC4
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl (hash: BM6cjrt5UWVfygFMADexbNJ19VtYh3t1u7N2UyW8yLo=)
2: soI28UokBEmUA5YZ7-2YS-kO60w.roa (hash: x5boSWZM+Eb4DeBF9MHFVGtkPRePQy7kYVWQIl5DODM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f7:38:bd:24:55:66:5c:5f:06:61:84:7f:e2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=2af0958d253bb98e40ea73a2430427c364efe6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c9:35:6a:0e:26:3f:34:97:ed:6e:69:86:e2:
fe:7c:70:3f:63:c8:04:5c:62:a3:a5:9d:2a:92:eb:
0c:df:f0:5e:59:9b:72:38:41:0d:ce:09:a1:aa:19:
a2:e0:a9:20:c3:d0:d0:2a:04:a9:2f:f8:cf:1a:7a:
32:38:28:4d:90:e0:f4:3b:be:55:cb:a8:81:93:46:
cd:9d:31:90:a4:4d:8a:17:db:ce:37:37:fc:36:76:
f8:21:65:3f:eb:f6:c8:40:fd:92:b2:80:eb:54:5b:
64:b6:94:60:0b:00:ab:ac:f0:69:9f:6a:26:3c:61:
ec:c8:67:0a:34:9a:c1:85:de:43:17:6a:ff:e9:b8:
f0:29:67:89:4e:f4:e7:89:72:57:18:71:41:c0:2e:
c5:e5:08:7c:d0:81:14:e6:bd:80:0b:ce:55:de:c9:
aa:9a:e4:59:07:c6:9f:88:8c:29:01:52:c1:a2:1f:
7b:94:05:d0:21:80:ca:9e:ab:54:9c:26:68:88:e3:
8b:3f:1c:ee:ab:71:8f:b1:c1:df:4b:4f:3e:a7:83:
35:30:85:75:86:59:2b:11:79:61:ac:8f:71:82:94:
9b:05:85:9a:22:9b:49:65:c6:e6:3d:3c:8f:fb:f8:
c7:74:ef:89:bf:93:9a:2b:57:7b:1b:ec:2c:cb:e4:
1e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F0:95:8D:25:3B:B9:8E:40:EA:73:A2:43:04:27:C3:64:EF:E6:FA
X509v3 Authority Key Identifier:
keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a3:f0:ba:da:2d:f8:46:13:22:5c:20:76:3c:b7:15:45:6c:
92:64:e2:1a:0a:09:6b:cc:11:29:40:b7:55:78:00:06:2f:8b:
ad:2f:39:79:3f:3d:9d:98:b4:f0:af:db:6a:a9:cd:09:f0:9a:
ca:a3:a0:d6:fe:80:d0:bc:ba:b0:a4:0a:4b:26:8e:29:b8:39:
ce:c2:08:f8:36:9a:27:cc:ef:7f:03:40:f2:e7:b8:5e:83:25:
3c:7a:6e:a4:23:d7:b3:30:24:80:a7:b4:ef:72:d7:28:b9:d7:
71:dc:6b:9e:69:9e:5e:13:b6:62:83:79:76:d8:c2:eb:09:1a:
73:3f:bf:24:79:66:fe:7a:c8:f1:4f:1c:2d:26:d7:c6:52:c0:
7e:75:8f:06:a7:02:d2:93:ec:b9:90:c4:e6:ca:eb:fe:cd:ad:
ce:9e:6e:95:39:04:aa:14:7d:e2:eb:2a:82:d4:37:d6:90:0c:
31:26:b6:cd:d2:ec:51:5b:78:de:e5:6d:91:bd:b3:ce:2b:23:
56:e0:93:0e:2f:74:05:31:7c:d4:d4:99:17:56:4f:cd:4f:f3:
ff:81:fd:b0:98:eb:30:fe:18:c4:8e:74:75:c6:7f:8d:06:c3:
a6:e7:38:02:5a:4c:86:95:dd:2a:ef:a8:7e:78:9e:60:50:62:
9a:65:67:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:09 2025 by rpki-client