Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
File: pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft (raw, json)
Hash identifier: pJ753MZQIz9OUxo5v0nTpqr7dOyI+4VuEBLHIsd+Sec=
Subject key identifier: 65:66:69:31:9D:12:0E:AF:B2:8C:70:4E:13:B9:DB:5E:02:74:11:31
Authority key identifier: A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
Certificate issuer: /CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Certificate serial: 0194BC72801E00D2FC30788DD17E3278833A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
Manifest number: 08BD
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: LPRtA19ISdoMAcOg5dTdVh6L9Jk.roa (hash: yfplS3KyTgY8se7AVlwzcVLsAsein115ckLeaHyCF6w=)
2: pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl (hash: yDMiYGUl1DliVOXeXDwLOEy7iDg/Wxv8mFa2JCv4miY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:80:1e:00:d2:fc:30:78:8d:d1:7e:32:78:83:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=656669319d120eafb28c704e13b9db5e02741131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:75:01:40:1d:6f:88:ea:1a:17:bb:62:f8:
52:57:77:11:87:77:1f:f3:39:95:65:7b:d0:8b:51:
66:f2:52:6e:3a:c7:e7:6e:ca:64:da:a6:d2:94:41:
cd:5b:1c:5d:18:88:33:c0:ca:0f:33:3e:78:8d:97:
34:84:54:1c:db:91:e4:81:73:57:27:13:cc:2c:3e:
50:d2:9b:6b:fa:75:89:6c:61:95:19:fb:70:3f:45:
39:91:70:71:8c:cc:c6:c1:05:32:db:15:94:b1:ce:
ae:44:b3:ed:ee:79:61:52:a4:80:e9:27:be:d8:98:
55:25:a0:e5:ca:00:f8:7b:ae:e6:8e:07:0b:c2:a9:
f1:96:8e:30:63:77:aa:f7:9c:1a:6a:61:3e:75:df:
f7:f1:37:33:91:a2:09:23:a1:83:83:a6:e5:9e:fa:
14:78:81:61:c2:3b:f5:1c:25:d3:83:79:67:5b:24:
c4:2b:ad:5b:51:40:36:9c:b5:de:75:18:28:59:d4:
97:e3:56:67:5f:53:81:92:3c:45:b0:41:0a:a6:ef:
eb:1a:c3:c4:17:0f:81:82:2f:c8:ba:e1:31:ef:41:
be:c1:ce:08:78:fe:2c:a6:0f:78:df:62:31:9d:df:
0c:3f:f3:c9:3e:79:ee:79:8a:60:71:dc:c6:26:4e:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:66:69:31:9D:12:0E:AF:B2:8C:70:4E:13:B9:DB:5E:02:74:11:31
X509v3 Authority Key Identifier:
keyid:A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fd:4f:7f:4c:38:1c:04:a6:fc:8e:1c:66:4a:e6:92:8e:78:
a5:ea:0c:07:14:bc:12:12:26:c3:bd:3a:1f:88:cb:b8:18:04:
b5:58:3e:a3:8b:d3:83:75:ce:cd:b2:1f:a1:ad:66:37:07:8f:
cf:35:10:cd:1a:18:09:a7:41:22:f4:7d:4e:00:4a:33:c7:17:
cf:21:e9:2e:72:be:34:ad:a3:34:08:66:f1:5f:e5:95:17:50:
e6:b3:69:a9:98:d4:0c:d3:71:d1:cf:3a:a2:db:2e:03:43:1c:
6e:6f:ba:54:15:80:fe:e8:be:85:29:b1:dd:64:a9:41:c5:53:
d5:7c:15:03:6c:09:84:28:80:92:17:54:43:11:a8:75:39:38:
34:45:2f:01:64:bb:a8:38:2b:d7:44:37:af:d3:09:5e:b2:00:
1e:e9:ef:82:ed:7f:a7:98:b1:d6:f3:17:7d:b4:3d:be:d8:85:
b9:a1:1c:8f:bb:ca:e3:9f:7b:8a:51:cc:2c:f7:3b:3b:0c:b3:
74:b4:86:f2:f5:d8:01:02:3b:26:a5:01:35:76:6e:29:af:59:
e1:90:60:93:70:d8:2f:73:ce:52:90:ca:9f:93:6d:c7:6a:af:
ab:12:73:f9:3f:94:00:b6:ec:93:11:b1:44:69:6b:8e:56:1e:
97:00:3f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:51 2025 by rpki-client