Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
File: PsY-XbBDXC0-dKayitPZww1qjO4.mft (raw, json)
Hash identifier: Q7jyKXLPYkTFGFr8utdkICUxXhmys1mfssJQ8iuaF/M=
Subject key identifier: F7:74:CB:1F:EE:7E:6A:90:49:3C:31:CD:75:6F:DC:7B:A0:2A:59:5B
Authority key identifier: 3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
Certificate issuer: /CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Certificate serial: 0194BD85644911A4B749B95C50D7C8EFF105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
Manifest number: 0C3A
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: GSEh8gIZdCBsRKOnb9fKkFOFuZk.roa (hash: u2uTEL6Ts0fKYl8Es1LELd2Ambr6iVn6vwhJ7qDD50c=)
2: PsY-XbBDXC0-dKayitPZww1qjO4.crl (hash: HpfJzCRuQDqBjhG9zw0YVpEzZNt6E2OfftbwkskKHNE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:64:49:11:a4:b7:49:b9:5c:50:d7:c8:ef:f1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=f774cb1fee7e6a90493c31cd756fdc7ba02a595b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0e:f2:39:7b:f4:d7:1d:f9:d3:fd:2d:c0:2d:
f3:8d:f3:14:3d:e9:c5:b4:fe:2a:e8:27:e5:13:7e:
86:ea:06:8d:59:00:83:29:e6:72:3e:c3:82:e4:ce:
d7:1c:13:01:8d:37:56:cc:02:0f:19:31:63:7e:1e:
d5:16:b2:6f:67:14:a6:f4:d2:0c:34:1b:b9:18:c4:
8f:7b:7e:fc:12:80:6f:22:79:63:c1:da:0e:cd:15:
16:dc:65:11:cf:07:8e:d0:12:d9:02:7b:dc:53:e9:
90:1f:92:69:ab:08:0e:b0:97:02:24:9b:35:63:10:
95:57:1e:a1:41:06:34:7c:ac:47:f6:35:d5:ae:6e:
42:e4:33:20:2d:11:54:6a:a1:38:d3:0b:1e:e7:75:
55:dd:ac:48:d4:41:3e:93:00:c8:aa:ca:66:1a:b3:
00:ec:1a:e4:58:e3:82:bf:52:95:77:a2:76:95:14:
02:2e:1f:ea:91:83:8d:a4:29:bf:d0:43:7c:15:e1:
e4:08:74:a9:92:c2:e1:60:37:bc:6b:1b:4b:a4:17:
3a:65:a5:59:a9:78:9b:4b:78:cb:19:cf:e4:d1:b3:
d9:c1:fa:a1:c3:5e:34:fe:8b:b1:a8:b5:c7:87:8d:
d6:27:22:cd:55:41:71:56:97:1d:d8:5a:55:b9:87:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:74:CB:1F:EE:7E:6A:90:49:3C:31:CD:75:6F:DC:7B:A0:2A:59:5B
X509v3 Authority Key Identifier:
keyid:3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3f:ff:5c:d6:1d:f3:fd:d2:8f:b8:a3:5b:4c:bb:62:0a:26:
a3:cb:5a:42:7a:81:31:75:e2:d6:4a:82:43:8e:4c:8a:7b:37:
5d:3a:ec:5c:e4:74:50:01:ec:a4:2b:3b:3c:77:20:3b:4b:a4:
87:b6:e1:bd:0d:16:5c:15:20:09:e7:c9:a5:ce:55:ff:74:8f:
10:88:a9:a1:79:98:97:3b:1c:6a:82:47:ce:e5:2f:31:ac:6e:
ce:38:66:2c:64:ea:3f:ae:da:51:39:33:d3:35:ff:5b:5a:82:
84:7a:e7:59:6f:99:49:8c:52:67:3f:27:f4:9c:b8:59:7e:b0:
7a:4e:0b:ee:ba:66:6a:0e:35:3a:dd:ec:ab:27:5c:fc:31:99:
68:2b:49:c1:3b:43:19:2b:6e:a7:37:6c:92:2f:b4:f3:9f:ff:
5d:fd:f3:e9:69:c1:91:ed:6d:44:0b:90:46:cb:ea:f1:56:94:
2c:f3:bf:0d:bf:5c:8f:e0:a0:47:df:c8:ff:de:85:c3:b4:90:
67:1c:f1:64:6f:cd:f1:6a:5a:a5:b2:61:51:2c:a8:f4:13:30:
04:15:5c:63:d5:0c:1e:fd:e6:32:bf:61:76:05:c6:f9:ec:c7:
40:eb:5a:4d:87:6b:cf:f6:ea:fe:ef:43:6f:e6:26:db:56:8c:
6f:b6:e0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:47 2025 by rpki-client