Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
File: PrEhzwYygZ7s6r64qVVpxnUpiCE.mft (raw, json)
Hash identifier: gfXJP8ikBiuR6vzhN4suDfl6aDC0qmSxK6s1gdD1tcQ=
Subject key identifier: FA:AC:54:D6:31:6F:8C:F1:25:F8:56:9E:2C:31:37:1C:77:BB:16:81
Authority key identifier: 3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
Certificate issuer: /CN=3eb121cf0632819eeceabeb8a95569c675298821
Certificate serial: 0194BC3C75716A5396E1B67C2BEC5B4BBFC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
Manifest number: 0FAE
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: PrEhzwYygZ7s6r64qVVpxnUpiCE.crl (hash: gDUhUJNyqt61kGq81gDQ5kCurr/8453cCLzC8HNaa0A=)
2: _k-LVkRidjyVBxM5JDfBSAF4xXQ.roa (hash: sWdlQ6il1efqRiBOryvgVXuddGRGIEg9GvemLG8GNq8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:75:71:6a:53:96:e1:b6:7c:2b:ec:5b:4b:bf:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb121cf0632819eeceabeb8a95569c675298821
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=faac54d6316f8cf125f8569e2c31371c77bb1681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:32:d1:da:7e:bb:bd:1d:13:d7:87:ab:6c:
ca:a4:19:80:d2:ca:2d:6f:00:22:00:1a:ae:35:cf:
05:23:cb:32:2a:cf:8c:97:b4:41:69:6d:e8:a0:84:
30:0f:89:93:63:6d:9e:64:fb:2f:b6:e4:20:0b:79:
92:8d:b5:41:91:57:28:b8:fe:80:74:5f:a2:cd:f1:
0d:c5:85:45:c2:a5:39:d7:09:eb:04:26:5c:8f:17:
a0:ff:4c:6d:38:74:01:8a:66:6c:38:06:74:31:c6:
1b:84:16:f2:f7:90:85:bb:52:e0:92:a4:62:52:4d:
7d:fe:7c:83:25:82:95:67:53:5d:63:ae:39:40:42:
5e:a1:e1:c2:17:ce:0e:0b:fe:cb:37:de:84:0d:40:
12:5b:57:2a:fe:16:ed:e0:5e:11:e6:45:21:fc:ee:
c5:66:72:0a:3e:67:b5:3f:5e:6f:42:5c:63:86:f9:
6e:7b:5d:e8:ff:e6:16:08:4b:c8:d4:f0:87:6d:b9:
cc:e6:ee:83:41:ea:cf:62:13:66:ac:ed:f6:ee:ff:
00:03:39:4d:4b:70:09:37:75:8c:c2:c0:3a:37:cc:
f9:f9:9c:d6:38:7e:3b:67:cd:f4:15:8d:e5:31:33:
e1:72:68:89:02:00:51:a2:95:13:6d:84:7a:a2:04:
1d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AC:54:D6:31:6F:8C:F1:25:F8:56:9E:2C:31:37:1C:77:BB:16:81
X509v3 Authority Key Identifier:
keyid:3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7f:38:c5:62:f1:c1:69:23:12:e3:9e:ad:71:46:0d:ed:4a:
50:fa:dd:0d:4e:14:93:ca:8c:c4:2b:45:c5:19:16:bb:e6:b4:
86:71:04:7d:3b:20:32:96:ef:a3:56:c1:7a:93:a6:53:1a:44:
f8:c6:d3:87:5d:83:5b:24:25:9c:6b:d0:bc:77:27:30:49:4b:
32:9d:2b:0e:82:5e:83:a6:ec:ac:03:d5:0f:b5:f7:59:b1:73:
a1:46:c0:c2:c3:3b:c8:ee:a8:27:99:61:a2:d0:44:c0:01:7c:
52:05:5a:20:64:8c:13:87:82:03:25:3b:22:ec:03:b5:55:3f:
14:81:57:58:a5:c2:29:9a:58:69:6b:e6:e4:ae:71:b8:2e:bd:
cd:cd:a3:3b:b7:06:c9:8d:c1:c1:40:30:ca:6b:2d:23:ab:93:
96:d2:56:69:48:f8:9c:26:51:06:d1:59:f1:4c:82:6e:d8:f9:
97:67:f8:44:50:e6:dc:fc:22:24:c6:df:f5:2e:94:8e:29:9b:
72:c1:c2:24:d5:f5:8f:d8:d1:70:be:59:0d:0e:6f:e6:0f:93:
c5:4c:21:21:27:3f:fc:88:66:0c:60:18:b0:35:53:fa:c4:0c:
a9:5f:b8:cf:63:50:fb:5a:05:9a:4c:a6:37:2a:5e:9c:a0:11:
9e:96:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:40 2025 by rpki-client