Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
File: PabmnmXdClQFmXA-0MkkdMsg6Tk.mft (raw, json)
Hash identifier: YrUVUnm0DbQm6QBy9HtLjYiVEPMjKXq1VySNa0SuKso=
Subject key identifier: A7:48:28:D9:EB:40:8C:DC:A2:29:CE:CA:60:44:B8:12:F0:6D:08:A7
Authority key identifier: 3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
Certificate issuer: /CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Certificate serial: 0194BC72CE647878F63171464A2FD3BE3F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
Manifest number: 138A
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: PabmnmXdClQFmXA-0MkkdMsg6Tk.crl (hash: CNZ0jHpm+9oc12M7a2D8BsP5RsG5GaC/Dt4/Nmnit6s=)
2: wgfEWoteV0ugJhJFFY5StCpYga4.roa (hash: Bu0QgGIHWGxscJbgnF2zr/rd8qdTFWvwHrlBzc8O9aU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ce:64:78:78:f6:31:71:46:4a:2f:d3:be:3f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=a74828d9eb408cdca229ceca6044b812f06d08a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:f5:47:c3:7a:58:ee:51:b7:4f:1e:7e:3d:
9a:f5:4e:3a:0b:02:2d:c3:2e:26:d4:80:2d:f1:c4:
f4:98:74:83:6a:7f:f6:ef:25:47:9f:30:c9:6c:c0:
2d:12:d9:fa:f8:cf:3a:cf:6a:13:d4:e9:3c:85:67:
fc:93:1c:8e:1a:43:92:3d:c0:87:da:4e:95:35:f9:
1c:4d:6d:b1:47:17:ca:30:6a:9f:61:1d:ba:17:34:
60:93:2c:e4:ba:d3:c6:aa:74:83:11:d7:b5:d4:04:
ca:24:96:88:4d:63:31:f2:38:16:0b:9f:8b:ba:44:
99:5b:08:d6:fc:16:7a:0d:18:92:43:81:d2:27:b7:
f8:f7:53:41:98:7a:ff:f6:47:c5:a7:db:9c:2b:fa:
d5:67:f2:e6:25:b8:43:31:5c:7e:f4:3c:d1:09:70:
c5:d5:f3:d3:36:1c:01:91:91:3e:8b:4d:6e:65:08:
a3:87:b8:f1:cd:82:e5:1f:e5:02:39:1b:1c:e0:dc:
fb:79:f2:52:c9:83:8a:be:dc:69:12:ef:00:44:13:
30:14:91:39:61:bb:ef:5f:b6:38:be:64:e8:78:27:
27:aa:2f:f6:f3:53:ed:52:12:68:47:a2:4c:92:90:
2f:3e:9c:9c:25:fd:d6:2a:45:94:f8:39:38:a4:22:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:48:28:D9:EB:40:8C:DC:A2:29:CE:CA:60:44:B8:12:F0:6D:08:A7
X509v3 Authority Key Identifier:
keyid:3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:20:1c:22:63:16:87:59:d3:67:33:d8:ce:a0:87:1b:5d:ef:
e9:ab:16:18:89:c5:b5:ed:7e:28:f4:2a:97:bd:c7:06:53:91:
fd:2b:51:c0:c4:f4:e2:8e:f1:38:f7:16:3f:03:07:55:e4:fd:
f6:23:b9:5b:0a:4a:8c:49:ef:b5:4a:3c:86:59:c3:89:29:82:
0a:57:3f:2a:6b:48:55:eb:7a:ad:26:3b:5b:2e:fd:29:d4:c4:
82:53:b3:c8:9d:c0:2f:54:8b:00:fc:de:f1:f4:e4:25:16:81:
0e:1a:c1:5d:f9:0a:47:c2:88:68:86:f2:ad:fb:e9:32:99:75:
1e:45:fa:c5:e8:df:58:26:96:0a:81:69:de:b2:f5:a7:6d:7e:
17:3f:08:68:ed:2e:f9:2f:fb:bd:8c:f8:0f:02:25:3a:0c:25:
4d:0a:4f:27:fc:2a:15:52:35:cf:b1:af:8a:f4:65:c9:a2:b2:
81:3b:1a:bd:a9:09:b9:e9:4b:c6:ec:34:b7:15:9d:42:ed:c8:
64:0f:b1:25:6f:ac:39:34:73:9d:41:94:8b:2d:5d:cb:8f:5d:
11:54:28:8e:8c:46:64:5b:10:26:2c:07:01:ee:94:d1:04:cb:
95:63:46:25:5d:99:a5:fc:61:2f:c1:46:ed:51:56:7f:72:3e:
f2:2c:0c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:34 2025 by rpki-client