Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
File: pstoJGZQvVjCKirgCtBmF4qB628.mft (raw, json)
Hash identifier: V8Ps5+/ACza+FEcuHAlkWv6x9wSfzXKYe2R6hqU5Egw=
Subject key identifier: 83:17:44:AF:23:66:F6:BF:BE:29:4E:D3:04:47:60:2E:55:B3:E4:60
Authority key identifier: A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
Certificate issuer: /CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Certificate serial: 0194BBCDCD3708AF2A1B3DAC881231AA9A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
Manifest number: 0CA7
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: PUpMBlY3y3LiEyvtN3mwZr7fC6o.roa (hash: 83wzwEaj6Lu4SVxQ13wsJpRArhNJgziukBIbApzP3jM=)
2: pstoJGZQvVjCKirgCtBmF4qB628.crl (hash: usZ8F4WjI+1/ekzi8HkJWAsazdsR9d7jD0gMYaV9bOo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cd:37:08:af:2a:1b:3d:ac:88:12:31:aa:9a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=831744af2366f6bfbe294ed30447602e55b3e460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8b:87:a5:0f:a3:82:fb:2a:f9:81:76:95:1c:
95:ae:ef:1d:88:c7:e5:8b:08:f2:f8:54:ba:c0:0c:
cf:87:10:ae:56:50:ef:46:6f:de:8a:58:16:37:b5:
a1:70:6d:0f:c2:87:c5:d4:87:d8:91:a3:80:ac:12:
b4:7b:0e:3e:f6:47:a1:86:5d:e8:c4:4b:e5:95:99:
e2:c0:5d:35:2e:cf:90:7b:22:97:3b:43:36:aa:c8:
0c:92:49:20:9d:cc:cf:1d:24:2a:a9:54:88:1a:3e:
d9:72:5a:d0:44:f2:93:1f:9a:87:50:1d:2e:ad:b8:
01:fd:88:f3:fb:ba:31:d3:0a:1a:31:84:14:f2:2b:
e6:5c:91:1e:31:49:4b:ce:cf:87:ca:c8:db:57:e0:
35:28:78:1d:6c:aa:c6:cc:5b:11:b1:05:72:64:01:
26:6e:11:72:9b:8b:63:5c:1e:10:45:12:6e:e1:37:
0c:80:01:c4:c4:55:c1:80:69:26:13:b8:8b:51:96:
41:e6:42:f2:99:76:3b:94:44:26:0e:05:61:1a:d6:
f2:c3:b7:d9:02:a5:3d:78:0c:92:f7:9d:d1:0f:e5:
67:21:2c:61:fb:f8:30:41:07:e8:99:78:a9:25:d7:
89:50:2b:ff:32:92:52:d2:f5:2e:e4:b2:3c:af:f6:
1b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:17:44:AF:23:66:F6:BF:BE:29:4E:D3:04:47:60:2E:55:B3:E4:60
X509v3 Authority Key Identifier:
keyid:A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:53:4e:3f:a3:a4:ae:bf:fa:95:12:a4:c6:38:9f:3a:47:6e:
3e:60:31:c8:c9:cc:84:6c:66:eb:0a:7a:f7:03:21:55:76:25:
40:41:bc:bd:1f:3a:1f:47:39:d7:9f:c4:bd:76:4d:1c:17:e6:
31:8e:c6:c9:24:e3:fd:85:7d:f4:3f:b0:a0:2b:09:e6:50:ed:
e3:86:50:53:cd:0d:c5:b7:f1:e3:da:74:bd:39:eb:22:f6:3d:
bc:04:43:51:21:fa:d1:6b:c8:df:70:97:f3:4a:97:d8:b8:5e:
9f:c5:37:40:4c:d0:7e:7e:6f:23:4e:eb:ec:21:3f:ee:89:07:
b7:a7:e0:13:c3:a3:08:b4:40:8f:c0:f3:d8:49:66:43:00:6b:
f1:43:9d:52:8a:72:74:09:20:f6:16:37:1b:76:46:94:f4:97:
13:0e:3b:17:c9:29:43:6f:b7:0a:ab:9a:da:9d:58:33:66:08:
9f:bf:6d:10:93:cc:3d:7e:5d:35:11:55:95:8a:e5:09:9a:d7:
fb:cc:52:53:35:5f:10:00:79:c6:7b:67:6e:54:e3:3d:af:10:
94:7c:39:0e:4f:c8:79:70:bd:e2:fa:f4:82:6a:17:8f:27:41:
a7:3d:f2:e3:7c:2b:92:0e:5b:ac:10:87:e1:78:56:63:61:43:
3b:bd:03:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:23 2025 by rpki-client