Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
File: Pls0eWfOpnu2K2nSWazeS4-elBc.mft (raw, json)
Hash identifier: oG3aMdcQgYlexmkM7a2x4hykSGK1rJXD8sDyyNWzNfc=
Subject key identifier: 98:32:00:0B:E8:D5:BC:F2:6F:EF:0E:35:8B:EE:3A:66:D7:65:3F:C8
Authority key identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
Certificate issuer: /CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Certificate serial: 0194BD85621B4CEF4507A3F82F80791A5C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
Manifest number: 0942
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: Pls0eWfOpnu2K2nSWazeS4-elBc.crl (hash: Tjy7k5er3zA989+W/9N6z+nwkDcjvhEzlJWOd3eMizw=)
2: yeykCTxRfXSLEqjo1MZ7zObmrks.roa (hash: 1vVWF5KJNfMy/yYL5Sp0YWKLB5R7wsPTTiR6VRMJgCU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:62:1b:4c:ef:45:07:a3:f8:2f:80:79:1a:5c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=9832000be8d5bcf26fef0e358bee3a66d7653fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:50:72:05:a0:7e:aa:73:b1:6a:17:c6:5b:
78:f3:93:bb:62:c9:27:5a:98:86:90:a5:0c:0e:76:
77:de:fd:ca:d7:96:fc:65:b7:a2:30:f8:8b:51:f8:
3d:a1:18:f1:4f:c6:96:3c:57:1f:8e:b1:51:42:fd:
84:2f:0e:ec:c5:5c:9c:c4:a9:21:57:5d:ab:f6:ef:
69:86:37:e4:30:48:1c:30:43:84:78:2b:5e:fe:e1:
9a:77:84:9a:08:93:dc:aa:1d:1d:d1:ee:a1:9a:7d:
a9:59:d1:5d:25:b2:c1:b4:a5:db:8c:04:0a:77:58:
61:a8:1c:30:cc:3c:d6:3f:8d:f1:c3:17:8c:e8:7a:
83:61:a7:eb:0b:88:75:5e:e4:b1:08:e8:4e:25:55:
b5:42:88:fc:dc:65:71:55:5f:5e:d5:41:54:87:df:
7a:0d:89:1f:0b:77:98:f3:fb:f3:31:6f:ab:38:1d:
0c:9a:cd:8d:3c:1e:ed:5a:b4:57:d8:69:0a:72:e3:
47:09:92:44:e8:4e:38:e3:9b:f3:96:fd:5c:6d:a9:
4d:c4:d4:01:85:05:ac:94:f2:80:bb:2b:7d:03:8e:
39:fa:85:88:58:bf:00:84:24:3d:25:45:24:d5:2e:
65:95:fc:a4:52:53:7b:a3:2b:3a:c6:6e:04:e9:d3:
9e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:32:00:0B:E8:D5:BC:F2:6F:EF:0E:35:8B:EE:3A:66:D7:65:3F:C8
X509v3 Authority Key Identifier:
keyid:3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:82:79:7d:4c:67:10:e2:b5:c8:b8:0d:9e:04:b7:98:71:67:
7f:f5:7f:b9:70:44:81:68:fd:4d:5e:cb:85:69:c8:86:5c:3d:
fa:b3:dc:f8:f9:0c:b6:0c:ef:71:1f:6c:99:a0:47:8e:f9:7f:
d1:ae:ae:9d:64:47:88:77:65:d7:36:69:91:5b:e5:d2:6d:0f:
3d:c7:95:f4:ae:e3:46:6b:6a:94:b8:c2:b0:8c:f9:b1:27:14:
28:75:13:04:e4:e8:0f:df:ee:37:d0:70:90:a2:ed:11:60:b8:
c7:8e:88:63:e5:3c:0f:17:7b:30:2a:20:f2:ce:81:86:8f:a9:
b2:3e:46:86:0e:55:c5:92:e3:c3:ea:f4:b1:d5:bf:9a:ac:ab:
52:21:f1:57:f9:79:46:60:11:20:47:e0:7c:3b:7f:86:45:13:
36:70:83:08:36:b8:56:41:85:01:22:37:6a:51:b2:6b:ab:79:
dc:f3:7a:fb:0e:0b:a7:63:f7:a4:a2:83:b7:f0:f8:c3:c0:26:
00:ce:58:2d:8e:8b:28:18:13:f7:59:72:1e:f1:cb:f5:bf:48:
f4:41:b5:d5:61:16:6e:18:5a:24:50:03:8a:03:88:52:ce:44:
df:9d:77:f8:76:27:3c:d2:33:61:78:e6:30:1d:2e:57:7f:9f:
70:24:6b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:59 2025 by rpki-client