Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
File: PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft (raw, json)
Hash identifier: KRX6BrULZlbD6qWh28xLmdOucpZcNJB2Fet20dbHWyQ=
Subject key identifier: A9:5B:B6:71:F4:E9:DD:D8:01:7D:1F:29:BC:F2:22:59:8C:82:7E:16
Authority key identifier: 3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2
Certificate issuer: /CN=3d4c79394062376bca63a63a0bf973992a9f80a2
Certificate serial: 0194BBCE30C40777C8701BDD92D71B79F8F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
Manifest number: 0C23
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl (hash: xL0GlzSmFpgJl57PUxrbw33TzXHYHte8kI2QJardP3U=)
2: yQbKC99XDhYm8cHYtCzNNvOq7pA.roa (hash: RfdjXnuMOAkekc3w4VyM+j8sngFlhqDHkrg6JoAkaVA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:30:c4:07:77:c8:70:1b:dd:92:d7:1b:79:f8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4c79394062376bca63a63a0bf973992a9f80a2
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=a95bb671f4e9ddd8017d1f29bcf222598c827e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:04:f5:cd:55:2e:48:39:a7:6e:80:86:be:
94:08:70:ff:1b:ae:54:78:28:9e:c1:bd:f9:d1:c2:
b0:06:9b:44:2d:88:50:70:16:9f:65:83:30:cf:4d:
e4:fc:b2:c1:34:6d:a0:d9:c0:cc:a6:ff:f1:52:e3:
c6:f6:65:63:6d:b3:b3:00:b0:01:db:3d:45:ce:80:
41:cd:ca:98:a0:c6:36:45:49:da:f4:ba:09:62:3c:
43:6b:11:d6:d7:8e:0e:40:d4:72:a9:1c:09:2a:0f:
f9:20:39:b8:be:47:3f:6e:2e:fd:49:86:c4:fd:7b:
77:a5:2a:6d:25:fe:cb:e3:b0:61:3c:a7:db:47:c0:
a9:6a:c2:e3:6f:c2:9a:40:c2:c2:ca:25:52:82:f3:
10:d9:6d:3d:78:57:18:6d:dc:ce:a7:66:82:ac:e3:
5c:cd:cd:ce:4f:b3:b2:e0:9e:ec:05:bb:ea:d7:1a:
4b:ef:46:03:9f:60:ee:16:72:64:9f:51:2d:33:a2:
00:a6:92:11:71:a4:61:a1:19:2a:b0:0d:8a:98:a7:
77:0c:11:0e:89:f2:2e:b2:f8:48:38:7a:9a:a0:75:
9c:5e:89:54:f7:35:12:8c:f6:98:ac:d2:47:d1:00:
72:03:c9:6c:7c:21:c1:8e:85:33:dd:8b:40:1d:39:
aa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5B:B6:71:F4:E9:DD:D8:01:7D:1F:29:BC:F2:22:59:8C:82:7E:16
X509v3 Authority Key Identifier:
keyid:3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:71:83:11:c9:e6:d2:b0:03:50:45:34:45:af:a5:0e:e1:11:
b8:4e:3b:13:5a:37:33:89:4e:fe:5e:4c:14:00:51:c7:d2:76:
76:58:30:a3:72:bb:be:ea:35:eb:1d:13:f8:aa:ce:f2:37:e7:
9b:77:02:9c:28:47:77:3b:11:b3:c8:98:88:7d:7c:a8:94:f8:
fd:81:99:64:56:f1:5c:0d:23:33:3a:00:d1:2d:b2:f4:fa:83:
05:f5:ed:2e:26:13:8f:e6:91:d0:b0:4e:de:71:78:91:7e:b4:
14:40:eb:64:69:d7:2f:6c:15:b8:0e:6c:6d:23:d2:fc:44:55:
e4:eb:3a:0c:95:10:56:56:a9:06:10:25:fc:c1:07:69:70:46:
c5:be:57:78:67:82:3d:9d:b2:2a:98:20:d0:ce:72:08:60:b0:
a0:e2:eb:f3:39:ca:57:0b:1b:4e:f8:51:88:0f:82:ea:ad:4c:
f8:1e:d8:33:25:7a:80:d1:77:db:4b:5b:48:17:f9:4e:92:6e:
6b:3a:12:1d:c9:ee:17:5c:dd:4b:85:da:c6:ac:fd:36:7f:4d:
74:72:e3:67:a5:64:16:eb:36:9f:58:bd:0a:28:49:f1:30:df:
c1:29:bf:43:5d:4e:19:90:30:38:35:2f:20:db:5a:0f:89:45:
4f:a9:72:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:10 2025 by rpki-client