Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: zxkXQxvztvnyvmWpft04pLfGF6s2tPViLqsUz3e52rs=
Subject key identifier: A7:29:8C:FE:62:2A:85:05:5D:B3:77:83:5A:12:63:C7:E2:A2:5B:FC
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 0194BCE0750EBC3B4DF88ABE208E96F2698E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 0397
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: klho8WUgczwrgzQsjYAfJpuBZXIvT2A1p5mHv8zdNZU=)
2: PweX4vwdfn9m5okxz1-m9fnVzPg.roa (hash: inDGjN940P413XtKXQDTJWRDwaRCjen3viJxigT7ZkA=)
3: muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa (hash: jKjX1d7d/0G+03C98NXHCEAoyfWh+WswSpMoPmRptVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:75:0e:bc:3b:4d:f8:8a:be:20:8e:96:f2:69:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=a7298cfe622a85055db377835a1263c7e2a25bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:0e:fd:a2:0f:c4:5c:72:cf:85:69:bb:a6:
ba:ec:85:36:1a:62:99:3d:52:a6:0d:c0:f5:00:d9:
48:45:a8:d1:77:86:c4:94:52:6e:32:bf:72:08:5c:
bb:56:ce:2e:52:b0:c8:3d:8a:cc:5c:e4:75:72:30:
15:2f:7b:e3:77:b6:76:fa:15:4c:3d:b8:c0:fb:30:
b3:b0:a0:7e:18:85:74:94:c1:f0:83:a1:11:63:58:
e8:50:49:9d:ec:39:01:42:92:55:1a:c8:65:f2:38:
fb:35:2f:a0:35:3f:02:71:ba:0e:98:3e:93:bd:e0:
5c:d6:90:0e:dd:d7:a6:b0:dc:f5:4d:97:ad:3e:61:
94:2a:fc:31:22:76:ad:92:5f:cd:16:66:d1:c4:e9:
7a:4a:96:a8:3f:67:ef:63:45:df:e0:e9:c5:d4:8b:
9c:48:27:a5:d4:07:c9:22:43:f6:6f:43:4c:26:6d:
1f:ce:bd:e2:83:da:b5:48:02:2a:98:19:63:2e:9b:
11:f2:c8:ff:df:a8:eb:84:ed:b9:56:27:46:e7:9a:
70:8f:4f:fe:d1:74:18:60:81:8e:32:c9:3a:eb:59:
d7:e4:08:d4:65:d1:d1:5f:ab:49:d8:eb:08:33:8c:
45:de:df:d2:a0:64:f3:c9:79:fd:ea:8f:3b:ab:b0:
0f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:29:8C:FE:62:2A:85:05:5D:B3:77:83:5A:12:63:C7:E2:A2:5B:FC
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:72:84:6b:d8:aa:30:ce:5c:0b:2b:40:9d:d1:d3:8e:7d:27:
f6:0a:92:1c:72:fa:12:07:ff:30:c3:d0:a1:ef:0d:32:e0:8c:
bc:45:3f:6d:35:13:a2:f1:f6:27:a2:75:5e:0d:ce:18:41:1a:
ff:82:06:09:5b:70:b2:e6:b7:fd:eb:8a:f1:3d:4e:59:5e:fd:
56:b7:b1:0c:3e:27:1a:1b:e4:e5:9a:03:02:57:2f:e0:ef:61:
04:58:f3:d2:e0:db:e2:19:c2:3c:bc:6f:bd:17:a4:05:f3:21:
6a:0b:6b:8c:a1:1a:f5:65:02:14:fa:a1:88:d7:8b:78:fb:e0:
ab:98:68:4d:be:ef:2d:77:6c:82:d4:87:c9:08:22:41:55:59:
84:c7:1d:92:65:eb:e7:1c:29:f2:be:83:80:cc:86:45:04:a6:
e1:85:08:c6:fd:07:8d:87:3b:b8:4e:ec:05:4f:83:d2:b0:de:
62:c5:38:91:81:97:65:4d:68:03:a3:26:ec:fd:a1:31:68:c9:
08:93:52:bc:50:0f:3b:73:8a:0c:b2:bd:37:1f:dc:f6:91:fa:
64:a9:00:07:6a:3f:58:72:05:62:65:0e:7e:3d:7d:5c:60:91:
a5:b7:d5:7e:5c:0c:26:60:38:ba:fa:a9:f1:fa:fd:55:f3:12:
25:d7:27:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:30 2025 by rpki-client