Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
File: PnFWq-5roji5BzFd-cVShlrc2ug.mft (raw, json)
Hash identifier: uin3qlofQIH3yDacLtnESr7hbRfEsj+uQuScPNLBVH4=
Subject key identifier: 44:DB:90:FC:78:2C:93:3D:2B:1F:2C:D0:88:6D:63:17:98:98:D9:5A
Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8
Certificate serial: 0194BCAA2EA0918BFE4166B6A6DB738B7C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
Manifest number: 069B
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: PnFWq-5roji5BzFd-cVShlrc2ug.crl (hash: pdt+7a0Y3G5eXTRmmaSKcOj1rUvgiZEhLTDwTTD7/mw=)
2: vDazkPOiPtoCYetZfRX-qpQ69j8.roa (hash: B0GK+5WaWwtXf0DhRaPxfP/Ak+Di2Wr89zC0Jym0UK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2e:a0:91:8b:fe:41:66:b6:a6:db:73:8b:7c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=44db90fc782c933d2b1f2cd0886d63179898d95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:03:96:40:80:56:20:c7:c8:66:11:c8:ae:f0:
d0:3b:43:15:39:f6:0b:f6:44:a5:d0:d3:71:6e:a2:
78:6b:a5:23:bc:ec:50:e2:62:3b:77:f5:48:54:c6:
5d:eb:08:03:c1:42:e0:b8:19:52:e3:17:9d:81:c0:
bf:eb:2d:91:00:b6:9a:32:19:67:ce:1e:89:1e:56:
a6:ee:fb:1f:3a:fd:67:5d:1e:3b:44:9f:5c:7f:33:
ea:ec:8a:cd:b5:22:e7:cd:d8:1c:2f:6a:ed:e4:c2:
1f:1a:43:15:ba:d4:cf:ac:62:22:c6:86:65:91:08:
05:09:a7:05:30:69:11:0b:21:0c:27:65:dc:ec:1c:
40:3e:80:3b:96:f1:20:50:d8:54:9a:4c:da:f4:a2:
5d:f2:4f:04:f0:9c:25:73:de:c7:18:2d:46:1a:d8:
c3:d0:25:00:88:99:95:e8:b4:74:88:a7:37:89:41:
ab:4f:b8:df:6c:ff:03:d1:6d:5a:62:e5:1f:76:f9:
74:7e:9d:1e:0b:28:4b:9a:5d:5c:eb:a1:a0:5f:45:
92:9d:95:3f:33:cd:96:73:53:fa:bf:de:fe:aa:ca:
13:60:56:fa:c5:2a:a6:de:5d:1a:1b:47:e1:76:8b:
77:42:26:ac:ac:55:80:72:41:c4:a1:d0:b6:94:43:
c9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DB:90:FC:78:2C:93:3D:2B:1F:2C:D0:88:6D:63:17:98:98:D9:5A
X509v3 Authority Key Identifier:
keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d1:a1:a4:b6:7e:b0:68:c2:6a:f5:02:24:7f:23:da:d2:e6:
14:22:5d:35:0e:78:42:c8:1e:49:50:a6:2f:da:76:94:86:0b:
2e:cc:0e:c4:b9:b0:33:53:d7:34:81:6e:d7:ed:1c:43:0b:60:
c1:ea:03:3b:28:a0:53:57:95:83:3a:ea:4e:a1:45:49:96:b6:
df:2f:50:7f:fb:c4:3e:70:0b:64:9b:69:f4:3b:86:4c:72:b6:
91:ea:9e:9f:8a:7e:fa:c0:96:4d:08:41:a4:39:67:19:09:c6:
9f:45:a2:43:b0:ed:d4:9d:d4:e9:45:c6:91:00:d6:d4:01:7b:
88:a7:02:30:33:47:77:67:51:e7:ee:31:1c:b8:b7:8a:6d:a9:
24:07:41:2b:9d:c0:fa:1b:6c:46:76:78:5b:bb:36:93:ec:82:
ab:39:ee:6f:50:8e:61:6d:3d:9e:1d:73:6f:f6:4b:f8:d6:10:
06:0a:bb:d6:ba:e1:fc:24:67:59:a3:d8:da:7b:4b:e0:3a:57:
83:36:96:bf:09:65:46:7c:ef:8b:3b:9b:57:2b:a4:8e:07:38:
11:3d:c3:35:fe:17:76:41:d4:29:e9:2f:e8:54:0e:46:dd:04:
19:14:34:a3:ee:c3:d8:54:6e:b1:8b:bd:9a:78:9b:2b:f8:fa:
ca:38:ca:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:13 2025 by rpki-client