Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
File: PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft (raw, json)
Hash identifier: S13tcKjkotSVF3GK1g0OhWpEDTGkBk85awev0xLdBdo=
Subject key identifier: A0:03:D7:D3:B9:37:E3:4E:10:35:02:8F:51:C2:0A:D9:36:2D:E5:9D
Authority key identifier: 3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
Certificate issuer: /CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Certificate serial: 0194BC72C38720E005BA79A90A31D5B4D1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
Manifest number: 0B54
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: AuOuUKhz7LbWM9xXAFqUFIS1KQI.roa (hash: yQUlcBfkC7CQTeK1Wv3DBode7pqw+A1kJYyGEQOXp9g=)
2: PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl (hash: M1cgfV3/pp945q9GJen3SQEzqo7keLHkxFgSrvStJ4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c3:87:20:e0:05:ba:79:a9:0a:31:d5:b4:d1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=a003d7d3b937e34e1035028f51c20ad9362de59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:ef:b0:e6:a8:1a:e2:06:b0:a9:e2:c8:8e:
ac:ae:88:ec:da:4f:5f:02:9c:41:5a:0e:ef:24:fd:
92:ce:38:69:5c:33:9d:22:60:ee:cf:e4:d6:81:56:
11:52:36:b4:dc:18:bb:cd:5e:b4:39:8d:7b:30:f2:
fa:5c:0f:90:69:da:07:08:4d:4f:89:39:e3:e2:ba:
a5:15:6a:63:61:71:2a:e6:77:e5:1b:64:46:fa:dc:
7f:af:6b:35:bc:8a:91:6e:ea:25:b2:51:d1:d5:e3:
16:9d:e1:16:d6:5d:5d:0d:bb:48:d5:0f:a9:8b:4f:
58:29:ad:78:70:3b:dd:76:ce:1a:83:a5:c4:ac:a0:
b9:68:8a:de:91:34:29:05:72:16:de:59:08:23:da:
05:5c:25:3c:a2:be:82:f0:ce:01:63:b2:f4:7d:ec:
8e:ac:e5:a0:9c:cb:1a:50:7e:d5:a2:1f:42:77:29:
58:c0:1a:d3:f2:af:8a:e6:4e:92:1d:2b:7d:81:66:
16:ca:e6:a8:d0:82:02:a6:ae:fc:cb:da:eb:4c:99:
06:9d:ea:1a:d4:c2:35:47:21:8e:7c:9f:91:1c:cb:
bd:4b:ca:52:a7:f2:9a:86:2e:42:60:d8:46:97:3e:
67:a9:2c:3b:64:dc:01:97:ed:13:c6:9d:46:15:0e:
91:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:03:D7:D3:B9:37:E3:4E:10:35:02:8F:51:C2:0A:D9:36:2D:E5:9D
X509v3 Authority Key Identifier:
keyid:3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e7:95:bf:b9:37:53:5f:79:76:b9:25:23:69:db:0e:4c:05:
5e:e7:90:59:01:2d:ce:ef:6f:37:23:de:64:0a:5d:d1:8b:a9:
c9:3b:ed:58:89:0a:99:4e:73:d9:56:a0:22:af:13:88:4d:b1:
e0:9f:45:b3:d3:e0:ee:9c:b0:e8:3b:09:4c:29:3b:58:2d:89:
4f:d0:01:92:85:25:3d:98:78:d9:5e:13:be:8f:e5:58:45:b0:
0d:63:8c:aa:41:20:a7:c0:67:18:eb:98:b3:bf:03:58:98:a6:
6c:2f:1a:cd:06:a3:ca:0f:73:b5:24:db:87:d2:52:d0:02:8e:
ab:9e:43:0d:36:bf:b6:8b:8c:c0:33:d9:14:dd:9b:d4:b5:3e:
29:19:4c:68:b9:16:cb:d4:36:3e:d0:19:3e:74:5c:f4:fa:98:
77:1e:98:cd:07:59:e9:49:f9:64:f8:68:96:43:39:75:90:32:
51:fe:77:0f:28:10:03:5a:9a:af:df:3a:c4:80:86:57:04:e8:
c9:f4:9f:0c:0c:f2:b5:a4:17:35:58:a4:cd:53:d8:75:03:c9:
24:2d:1f:be:7b:00:f3:fe:6e:32:a2:4c:10:ee:fd:d2:39:ad:
b4:dd:aa:02:c6:ea:84:13:ca:24:18:33:e9:b1:88:e4:14:6e:
58:d0:06:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:06 2025 by rpki-client