Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
File: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft (raw, json)
Hash identifier: O7Ms/r0rmXF5+8QBWEod/FJR9x8c+Fou0OKSgPS0GmA=
Subject key identifier: 70:B9:1C:0C:72:21:80:6D:A2:B0:AA:74:C9:78:F4:6D:29:7F:C8:6F
Authority key identifier: 3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
Certificate issuer: /CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Certificate serial: 0194BC04DC301F935CC0AEF987FC9250A7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl (hash: e9W8iXWIt/2tHxCbLC/YyS1+ZIo8G1TBzf0xQOQlayk=)
2: itPEMbOZFFR8e5L5AvpBnlFEedQ.roa (hash: pIQ9iWRr1eE7BBGNob9EZxPiOkZPJVC3FeL7vrrHIjo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dc:30:1f:93:5c:c0:ae:f9:87:fc:92:50:a7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=70b91c0c7221806da2b0aa74c978f46d297fc86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:54:60:55:0c:45:3c:7a:f2:04:68:af:f4:
70:40:3c:49:ca:61:f5:6b:12:6d:6e:fd:1e:e3:d4:
08:36:9b:c8:67:c0:f4:e4:46:38:0a:81:58:09:59:
d3:d0:b1:4c:22:9f:77:a6:c3:41:98:ce:f3:ee:98:
aa:a3:70:bb:c9:44:59:dd:9e:30:02:78:3f:96:cb:
ae:c7:33:23:8d:99:5f:fc:9e:02:28:82:03:0d:bf:
85:33:77:14:bb:16:93:94:94:88:43:d1:6b:1d:a8:
e6:a1:28:81:fc:6e:73:31:bd:4e:2e:d9:71:02:68:
25:75:f1:a9:69:ec:6a:7e:89:02:ea:4e:95:73:81:
5e:86:7a:07:80:25:bf:f6:69:12:57:9a:62:d8:c8:
91:9c:13:85:b9:45:45:00:76:a4:e2:95:d9:db:d3:
c0:9a:87:ee:ba:e7:09:5d:8d:df:b6:4f:01:da:1a:
b6:3c:16:be:85:3f:5a:07:bb:5a:94:66:47:0c:e7:
45:82:06:c7:54:9e:af:c5:7f:02:f0:71:50:37:9f:
21:93:cb:72:ca:27:22:a5:63:c2:05:73:6a:62:0a:
66:67:94:dc:0d:89:00:00:5e:0b:71:e5:00:f7:f0:
b2:aa:7a:6d:32:d9:8d:61:81:38:04:2e:c5:3d:79:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B9:1C:0C:72:21:80:6D:A2:B0:AA:74:C9:78:F4:6D:29:7F:C8:6F
X509v3 Authority Key Identifier:
keyid:3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:94:a8:47:b9:63:42:7e:e6:cc:ec:fd:d7:74:5c:20:53:84:
c7:9e:fc:22:db:78:28:22:9a:da:8b:a5:f5:e2:87:44:7f:55:
c5:11:67:96:69:86:39:34:68:93:78:dd:52:55:c5:2d:fc:7c:
65:77:f5:5d:5d:fa:b9:e8:4e:ec:e9:4e:ce:a1:74:74:51:4e:
33:94:34:05:2e:d0:bd:7a:bc:9f:7e:d9:1f:e6:a2:22:14:fd:
0c:eb:6f:a2:ad:e3:dd:dc:10:80:46:ab:2f:56:38:a4:7f:af:
93:15:9b:96:85:e4:f3:5d:93:c5:f1:02:b1:9e:79:67:df:92:
5d:26:8a:22:ba:01:68:93:a6:d1:cb:a4:13:91:3e:c6:d2:49:
f8:0f:f4:04:02:68:19:51:38:6f:17:8b:76:e5:1b:0c:fb:0e:
39:bd:07:8d:20:52:1e:a9:c2:7d:dd:a0:06:28:04:1f:51:97:
42:79:bf:3c:68:4f:05:86:8e:51:06:92:75:16:80:23:be:26:
ea:6a:05:e2:3e:9f:66:0c:7f:c9:f2:6b:f3:94:f4:3d:2e:aa:
3a:fd:c8:2a:bd:11:62:1a:8f:a0:7b:23:21:47:9d:8c:90:50:
ef:62:a9:32:30:6f:8c:b9:99:2b:28:a7:96:e5:6f:a7:89:08:
a3:9d:55:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:41 2025 by rpki-client