Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
File: PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json)
Hash identifier: XGL5vbbTW9NJZeGZqyZAbvKvu1vKYkIRgk16xIERPoM=
Subject key identifier: 8F:E7:2D:47:56:1E:42:41:56:71:98:7F:6F:52:73:DD:B2:EC:F9:68
Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Certificate serial: 0194BC729EC07A480A28B4D94B7A599DD55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
Manifest number: 1128
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: ALpz2KuWdLimx1GE9BIGz+tDAttH8cRoe32quKU+GRI=)
2: PkJhyt9pT1uGvNEkXULDRnIoKM8.roa (hash: GnXTwsBZIxIhJPycvbpoXf49+cV9ppIdazG5Z3GlNBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9e:c0:7a:48:0a:28:b4:d9:4b:7a:59:9d:d5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=8fe72d47561e42415671987f6f5273ddb2ecf968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:91:0d:be:c8:ea:9c:8d:ed:df:12:2e:ee:
23:12:6b:7d:04:d1:b7:60:20:0a:c7:6c:41:0b:1d:
43:8b:38:22:71:0f:0f:92:70:26:a9:d8:e7:29:85:
94:5d:aa:70:ba:ff:dd:29:60:84:97:63:e4:60:0e:
28:ac:b9:28:ea:ae:9a:af:3a:ad:d8:0e:d0:9a:9f:
ac:cc:c0:c0:f6:1f:7c:17:5b:c1:6a:3d:b1:d9:cd:
86:46:fe:33:a0:c0:79:33:be:d8:57:04:fa:fa:b2:
d1:c3:f7:da:4f:02:31:b4:9b:ee:16:6a:c1:9a:99:
f7:16:29:78:70:da:b3:e8:60:39:d0:06:95:37:8c:
93:57:f8:2c:a4:06:1f:dc:b9:42:6f:46:39:e8:8d:
b8:2e:ad:1e:60:d6:c7:04:02:91:7c:39:4c:4f:26:
3a:92:bf:13:52:e5:58:12:38:a5:d2:4e:b5:fc:86:
dc:58:b0:24:9a:f1:26:11:ed:7e:b6:9c:82:a9:30:
de:e3:25:df:c2:e4:64:ef:ab:51:67:3a:07:c1:7a:
a6:20:41:b3:54:c5:81:f7:48:56:f3:fa:1d:e0:2a:
45:e7:73:b5:be:f4:42:d5:c4:e4:9f:b4:80:ae:2b:
b9:61:fb:bb:b7:10:d0:4a:ad:e2:c6:4b:c3:15:46:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E7:2D:47:56:1E:42:41:56:71:98:7F:6F:52:73:DD:B2:EC:F9:68
X509v3 Authority Key Identifier:
keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:24:8c:14:22:cb:bb:d0:b1:fa:d7:07:e0:51:19:85:8c:81:
8d:74:bb:c7:b2:be:d6:9a:82:3e:ba:14:e6:16:f5:ee:6c:2c:
57:5b:27:83:2d:61:d0:fe:03:35:aa:5a:a5:6f:b4:76:c8:d9:
36:fb:95:7c:bb:43:5f:ac:67:41:54:29:fe:da:76:b4:7a:d7:
db:ed:aa:b5:1d:35:cc:38:d1:9d:31:52:9b:2c:20:e5:fd:f2:
f1:6e:a2:02:7e:36:14:bc:3b:41:9b:6d:4f:0b:3f:f7:cf:8a:
62:71:ca:b5:25:fa:6a:5a:b4:e8:0a:f1:9c:df:2f:bf:54:e3:
9e:7e:3a:5f:41:6c:66:5b:11:cd:b7:bb:be:5c:85:4b:ec:e2:
e4:88:d7:06:86:5a:74:53:d7:f4:7f:ff:b4:4b:8c:21:c8:74:
07:ed:f3:43:a5:af:1b:9a:be:2e:96:c8:88:74:6a:e7:2e:2f:
e7:c3:da:7f:ec:a6:39:38:fa:75:6e:ac:ea:9a:f5:14:89:1f:
41:78:54:9a:8a:c5:f5:40:3b:d2:12:d2:8c:62:79:9d:43:83:
28:f7:8a:9b:d1:3c:4a:98:71:7b:81:7f:6b:86:a2:c9:e7:3f:
7a:4d:a6:ee:80:fc:22:ff:e5:1b:5e:70:95:9e:0c:f3:5f:d9:
68:44:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:18 2025 by rpki-client