Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
File: pNyKTpFqo_eO94BHrCDQ0PipUPk.mft (raw, json)
Hash identifier: eKVbV66YjOYwdFGRypu9UTKSs51Fx8ELpP9X8kQPcsA=
Subject key identifier: BD:15:FB:A3:A9:0D:D5:49:25:B8:BD:CE:BC:D8:A5:07:F8:BB:2C:03
Authority key identifier: A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
Certificate issuer: /CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Certificate serial: 0194BBCEA169D630A592726B8D5DDDA2AB26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
Manifest number: 0AA5
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: UTvK6gSJU03H7EOW3gSzFazwB7M.roa (hash: fFNxwITyp66ny+cQJs93d3VRTa/z6HUTvmCKvoybY9I=)
2: pNyKTpFqo_eO94BHrCDQ0PipUPk.crl (hash: roILStFDZPNSUAiJXo9MxUJt2aNViD/18o5iFGXuTEM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a1:69:d6:30:a5:92:72:6b:8d:5d:dd:a2:ab:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=bd15fba3a90dd54925b8bdcebcd8a507f8bb2c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:13:96:cd:20:f2:53:f0:c7:dc:ea:00:05:
a8:71:d8:7c:8a:e6:e3:15:ea:3c:34:f6:11:23:fd:
5f:8a:3a:0c:32:57:bc:1b:20:61:cf:55:cd:e7:82:
e7:22:99:1b:3a:69:49:7f:1a:21:68:cd:8f:b0:9e:
5f:90:09:74:c5:a2:78:c3:58:a5:d8:ee:7d:44:b4:
66:f2:49:64:00:df:e8:63:b4:bc:ab:87:c4:30:54:
8b:59:1a:ff:65:22:74:86:b3:fd:6d:27:b8:bd:42:
34:95:44:bb:9b:0f:44:36:f6:2a:ba:b4:30:e0:d4:
c3:60:b9:15:1f:c1:91:60:5b:bd:7a:0a:26:83:f2:
32:91:d3:72:52:b8:72:d0:df:a5:cc:59:e2:db:27:
3f:55:ce:68:32:b8:e3:c8:5f:37:10:81:0b:39:54:
ed:67:92:ac:2e:39:47:d2:88:bc:73:ea:11:fb:7a:
f4:e6:5f:b3:48:42:6f:96:38:f2:94:4f:a2:1b:6a:
ad:c7:ee:28:30:17:23:70:79:08:fc:8b:e6:4b:c5:
20:f0:72:9d:fc:6b:60:d1:93:33:c5:8a:d8:c6:53:
f7:f1:6b:49:8b:3f:dd:f9:45:5b:4a:b9:10:18:03:
e4:25:f9:c7:5b:71:36:c0:0e:94:03:a4:16:cf:f2:
b3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:15:FB:A3:A9:0D:D5:49:25:B8:BD:CE:BC:D8:A5:07:F8:BB:2C:03
X509v3 Authority Key Identifier:
keyid:A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4a:88:4a:f1:4c:1f:18:db:b5:dc:f3:32:bb:99:3a:58:71:
06:4e:4c:f3:11:dc:99:8b:8e:3d:b8:50:0a:3e:80:ef:5b:44:
a9:29:80:a8:ca:95:be:fd:ae:41:21:97:95:7c:18:3b:e2:d0:
bd:7d:67:15:f6:61:6c:80:de:f2:89:c4:d2:bf:bc:6b:64:05:
9b:2e:ad:53:e7:9f:45:7e:5d:68:bc:11:57:b8:8c:05:04:76:
77:a3:19:7f:37:32:24:c9:b0:30:70:7e:2d:c9:1a:ee:07:ac:
3e:db:5c:6d:72:c0:68:7c:e2:9c:1b:68:c6:f0:d3:99:46:5d:
2d:3e:a1:6c:73:52:5a:b6:0e:96:e8:d7:84:0a:51:bb:0e:57:
44:fe:b4:a3:5a:64:ae:f2:4c:5a:d1:42:03:84:f9:d1:75:69:
83:13:08:cd:14:ea:c5:b6:3a:92:ab:68:64:f6:6c:bd:09:18:
79:a0:e8:c4:9f:7e:a7:c9:6e:64:e7:62:8c:82:c2:cb:be:8f:
56:f3:66:94:f3:67:2b:a1:b2:fe:6e:1a:5b:51:fd:95:77:0c:
48:08:cd:89:aa:13:f7:f2:e5:5e:f6:e6:f7:a8:81:b9:0e:22:
6b:aa:2f:14:e8:e8:23:c1:b1:7d:3f:1d:b8:49:6b:5c:9f:fc:
e8:e3:ed:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:55 2025 by rpki-client