Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
File: PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft (raw, json)
Hash identifier: s9fWN93Nw1OsNuVy2ue2rZyjJXPrYS8PJZAxjnd4Hcg=
Subject key identifier: 6B:51:C0:7C:39:71:3A:EC:47:5A:69:9D:27:7D:E4:6D:0D:26:F0:E5
Authority key identifier: 3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
Certificate issuer: /CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Certificate serial: 0194BC04F62FEB5B3F844147127057F7A784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
Manifest number: 05BD
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: FNcoFmyMsrmKFW3pVuTLoiKb9Y0.roa (hash: L2M1ZIYqNE7da9VzHmMG0LiaV1K9e8NQgXmk4Xn6knE=)
2: PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl (hash: 29s2l3/Thhvjb7EKCh7tLfczNl7SazB/rObpvrjlu6g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f6:2f:eb:5b:3f:84:41:47:12:70:57:f7:a7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=6b51c07c39713aec475a699d277de46d0d26f0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:8d:84:62:cf:2f:c3:a8:ff:db:2c:32:61:
17:d4:3f:71:23:a5:9d:ba:ab:a2:6f:fb:14:93:90:
0c:d8:12:4e:1a:7a:74:a3:26:8f:10:46:2e:62:55:
e4:f3:9f:83:4f:cf:b8:99:67:4d:a4:af:30:1d:30:
82:1f:5c:cd:17:4c:53:61:81:88:c2:e3:a5:1d:68:
60:68:d8:ec:c3:56:71:00:d2:86:65:54:b6:6f:5e:
ce:4d:96:f0:fd:5d:8e:f3:3a:bf:aa:1c:0f:c7:e3:
86:b9:2f:55:3b:92:d8:ba:3d:73:d9:59:97:25:e2:
71:21:51:88:f3:72:f2:68:96:d9:64:5a:c0:ae:f3:
d1:71:94:6a:34:b1:69:bb:8a:bf:aa:04:0c:ad:6b:
a2:f0:c4:00:c8:21:5c:ee:99:93:b4:01:e6:7b:69:
e8:e9:f9:0c:fb:1f:d7:00:88:6e:06:05:44:67:a8:
03:d6:fc:67:d1:77:e2:38:dc:1f:c7:d3:76:6a:a6:
9a:88:7e:5a:cc:b1:49:dd:c6:b7:6e:5d:4a:8b:60:
35:01:02:0b:d4:3f:f6:00:73:63:c1:1d:db:2d:79:
ad:08:0c:e9:41:cb:64:e1:0c:d5:db:81:b1:de:c0:
68:ea:ec:1a:a0:9f:eb:a2:ac:aa:e2:d2:3c:a8:03:
a5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:51:C0:7C:39:71:3A:EC:47:5A:69:9D:27:7D:E4:6D:0D:26:F0:E5
X509v3 Authority Key Identifier:
keyid:3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:53:da:eb:5f:65:bc:2a:45:95:19:36:af:35:f4:40:cb:ff:
74:19:42:8f:33:00:e9:3b:52:55:4d:27:5e:ef:e9:8f:4c:ee:
eb:66:93:67:e5:77:84:4a:0d:91:f3:c9:cf:95:46:ad:6e:35:
dd:0c:63:bd:0c:64:d2:c5:57:de:28:6e:b4:d1:2d:e5:36:13:
3e:14:61:32:87:5a:0e:8d:70:b3:78:0f:e0:c6:ab:67:ea:87:
1a:6b:59:72:6f:0b:d4:89:24:99:58:42:d2:dc:b9:d2:ef:05:
9e:2d:71:ad:0f:da:d8:32:72:0b:72:cd:44:89:44:36:03:68:
83:dd:b7:55:a9:cf:ee:8e:58:8e:89:b9:d7:54:be:20:06:63:
40:b6:4c:9f:e8:f7:fc:c2:5e:46:9a:05:6c:0b:d5:50:64:7e:
58:60:3f:bf:f2:70:e4:f5:b1:c5:ac:1f:8b:91:61:b9:a4:33:
68:39:53:ef:8a:85:02:da:9d:d2:b9:4c:c1:97:81:21:9e:17:
1d:f9:61:9b:b7:c1:6c:e0:7d:f0:28:46:28:56:83:0f:a3:4e:
d0:b8:68:4f:9e:0e:3b:62:59:86:b6:9c:dc:f8:c6:73:a2:77:
06:06:a9:ff:24:52:71:26:f5:f6:93:25:df:89:14:02:80:a8:
eb:1b:c8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:34:40 2025 by rpki-client