Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
File: PNKqcak6qcEye3NTigR45PeC9vc.mft (raw, json)
Hash identifier: OYZnSE0OzfeedC/unYGXUJ0G1PruRZKUDFNBMNpSRwQ=
Subject key identifier: 24:E9:F1:47:F1:85:2D:6C:AE:F7:92:99:72:83:B7:2B:51:40:9A:D7
Authority key identifier: 3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
Certificate issuer: /CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Certificate serial: 0194BCE0D46616D9D0257A985A11528D4590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
Manifest number: 0BA4
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: PNKqcak6qcEye3NTigR45PeC9vc.crl (hash: b43+PKnPHnT9ecI2/hwVILC8eKM00dZXICrswXv9IAY=)
2: mkUXmgygJpYBMQ2Igm9L-tv-j1s.roa (hash: 9Fpz5SGKImESLClWOjbnaFAMtUoqIoi74+/yK2yHMuQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d4:66:16:d9:d0:25:7a:98:5a:11:52:8d:45:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=24e9f147f1852d6caef792997283b72b51409ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:8d:f5:92:25:d1:71:1a:bd:9b:2d:13:08:
93:99:fa:ab:6d:4a:ce:34:af:91:2c:cd:d6:9a:89:
c7:8e:0a:a8:7c:71:31:d4:a5:73:17:d2:c1:6b:45:
b9:09:7d:ab:06:33:29:a2:75:58:c2:3c:7f:6d:56:
63:b0:ca:3d:e8:67:b1:2d:07:5b:81:01:72:76:0c:
fc:62:10:02:51:c0:ee:d5:5a:a4:d4:49:32:63:0f:
1c:43:9d:4c:22:c2:0c:35:de:c8:89:79:27:4c:0b:
f0:7a:b5:61:3e:5b:b5:ed:6e:ed:0f:dc:e6:39:82:
d0:74:3a:0c:20:59:d6:c3:d5:0c:44:5a:2e:26:74:
42:f5:99:78:f5:db:c3:97:75:43:4a:6e:20:b8:a2:
3f:ea:bd:7e:09:47:78:e3:bd:e8:7f:52:f0:09:f5:
23:2d:66:b7:18:c7:3c:40:e3:5b:f1:fe:4d:65:c0:
73:8c:06:d0:e4:14:b7:7a:7a:8c:c7:4a:4b:56:45:
97:f5:9a:6a:34:9d:ef:56:be:d2:d6:77:0d:86:fd:
b6:be:33:cf:f5:c4:da:d7:64:75:d7:08:97:5a:c1:
7b:2d:b5:a0:b1:7e:a9:04:1e:ee:9d:c9:7d:74:cc:
99:3c:0c:2e:77:2d:fe:88:d9:5e:f8:ec:a4:d6:c6:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E9:F1:47:F1:85:2D:6C:AE:F7:92:99:72:83:B7:2B:51:40:9A:D7
X509v3 Authority Key Identifier:
keyid:3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:75:94:85:d5:b4:c4:53:bc:e4:a4:99:47:cf:8a:09:2d:c3:
8a:7e:71:91:fe:91:85:71:89:4f:7d:54:d5:7b:17:60:61:5c:
a0:2a:d5:8b:76:22:18:98:aa:2e:9b:c6:b7:03:eb:88:e0:cf:
f5:d7:80:f6:ae:f2:35:43:22:e3:bb:ac:bc:ec:e4:d3:f8:0a:
bf:4c:dd:a9:c0:b0:8d:76:76:59:0f:62:d9:52:a9:4f:d9:e4:
3b:d5:ca:14:79:94:4d:2f:ab:07:63:ac:e1:4b:4d:d5:a6:6d:
9c:ff:50:71:ec:8b:36:06:a6:d7:36:d0:7a:40:11:bb:70:c9:
f2:0a:f9:3b:cd:ad:72:34:90:e2:5e:c3:05:b3:a7:2a:e8:ba:
05:96:2b:09:35:c3:25:07:e1:ba:6f:69:7a:88:aa:e1:c0:b1:
0c:ac:db:fb:69:56:c7:49:d3:2f:81:d2:ba:0c:c3:05:26:58:
66:53:0b:1d:3f:bb:ae:91:39:2e:b8:82:b3:30:1a:ce:80:e7:
ac:c8:cb:14:3a:a2:ed:b8:d1:50:3f:51:65:01:3b:8b:65:dd:
8b:88:85:f0:16:6a:71:28:1b:55:16:10:8c:bf:8a:1a:27:a2:
6c:8e:9c:65:df:89:1c:7d:fc:7b:07:76:90:d8:3d:1b:38:f9:
d8:6b:24:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:29 2025 by rpki-client