Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json)
Hash identifier: AhiS830SJ01qlxh11fTWDKw2tmLlkT50J8igiQXetDo=
Subject key identifier: 69:94:E8:2A:A9:3A:5F:3C:7B:45:9F:03:C6:B3:DD:E0:93:44:29:A0
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 0194BBCE2484BBC0E066A977B8B39FDD64D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: /M8UhztI/abCKNFkM6km1nZGTj5OfV8w/4K9jBfI53E=)
2: yxseiDrTDKkfKumKkJUQ-S699SM.roa (hash: jMn0qSGQuB1rlWwE3sPg8LRuW4ybf3WJJD6jW2FPlxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:24:84:bb:c0:e0:66:a9:77:b8:b3:9f:dd:64:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=6994e82aa93a5f3c7b459f03c6b3dde0934429a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:71:50:6e:a4:31:e5:98:8c:01:ee:1b:e3:
82:5d:c1:f5:2f:fb:02:cd:f3:85:48:02:81:a2:b6:
53:c4:22:ab:47:c8:36:eb:17:b6:cb:af:e3:f2:9e:
e1:db:4e:92:c3:82:2e:03:b0:70:08:17:e0:6c:56:
fe:e9:6c:9e:01:ee:0e:8d:47:11:ba:e6:a2:34:6d:
83:96:44:95:e4:d1:4f:e9:87:71:d5:a1:9c:33:69:
23:eb:56:b9:f9:73:76:5f:2c:c0:fa:62:03:48:f4:
55:82:38:e3:83:a1:c2:bf:30:36:36:e0:3e:00:37:
f0:c2:99:a7:7a:27:01:2f:0d:b5:e4:12:ef:86:cd:
27:bb:d1:45:b4:99:fc:dc:d0:b5:dc:87:76:ab:e7:
8a:b8:cb:0a:e6:26:01:58:6b:7f:55:45:76:66:c4:
24:40:db:89:88:16:5f:6e:a2:e4:de:be:12:ed:d6:
64:d4:38:38:1f:ef:12:9a:a4:b5:6f:94:25:ee:c8:
4b:47:c7:82:03:66:51:05:b1:27:ec:bd:22:21:79:
a5:20:48:96:6a:61:46:94:6d:ff:cc:c0:e4:c8:9c:
88:e4:e6:5a:07:ce:d1:2b:81:db:fd:9e:86:fd:c8:
d9:50:32:49:a1:9f:aa:8a:ef:ab:dc:f4:c4:59:26:
4a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:94:E8:2A:A9:3A:5F:3C:7B:45:9F:03:C6:B3:DD:E0:93:44:29:A0
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:35:15:4a:c1:18:6f:bb:df:9b:6f:b0:dd:6c:58:79:f9:05:
dc:b2:2b:d6:d9:69:6d:80:9c:70:f6:9c:32:e8:cb:50:d5:04:
ee:37:76:f5:0d:e1:2c:61:1a:d4:bd:48:d5:3b:1a:0a:dc:f3:
34:8a:3b:d3:19:40:8f:c5:1b:7a:c2:58:cb:e5:9f:4c:53:0e:
cc:47:6b:6d:22:ee:01:ad:47:6d:ed:da:90:33:c6:d8:50:b8:
15:c0:02:7d:aa:a1:e8:83:a6:b7:9a:0e:79:c8:99:47:99:da:
1b:95:57:86:89:c6:57:94:7c:65:56:ac:ae:b9:10:af:31:9d:
89:1e:2a:72:83:4e:88:35:f7:92:b1:93:ab:2f:55:cb:6a:75:
0a:c2:84:ae:ab:d7:42:61:7a:e6:ea:f1:3e:9d:31:41:8c:bc:
38:2a:a3:be:4f:27:e3:a3:97:54:c4:0e:d5:ab:0e:6c:9c:3c:
84:8e:af:8a:47:58:8f:d9:43:88:e9:3d:83:c9:25:17:44:17:
3e:fa:44:49:a3:68:33:e8:9b:69:84:24:62:c4:b1:a8:47:1a:
8c:5c:56:4a:57:db:33:a8:03:dd:8a:00:da:af:eb:c7:98:8c:
a7:a3:dc:92:83:20:df:05:38:87:f2:56:c4:cc:f1:0d:1d:8a:
38:18:4f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:28 2025 by rpki-client