Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
File: pBdnGZEpiZeeCGEloqQaEz__3CQ.mft (raw, json)
Hash identifier: TtX9x5zel3pWigoA+KHulZcrhJthnX4+lA1xY9RFor8=
Subject key identifier: 47:7B:56:14:66:EA:99:15:6D:0A:C0:0C:F9:5B:88:8F:75:67:09:D2
Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24
Certificate serial: 0194BD4E5E6F3245EC015B056F30474A7CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
Manifest number: 15
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: cbfaYBjluJFGRHIZotfNKfL5QOM.roa (hash: hnnwP5hTMZNnGccOJwmbq229la5aF88t7OiSZXiU/mU=)
2: pBdnGZEpiZeeCGEloqQaEz__3CQ.crl (hash: wmligD8JY3N903l9k6Fzz9JUT8i7D7oSTopAAP9RvoE=)
3: zwNxRZCXOiLKuZa_7Wmh9NcuOqQ.roa (hash: 6xxBkLaHc1up/veCbZl0eXM5uTf3B1SDA3dM0Oft33U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5e:6f:32:45:ec:01:5b:05:6f:30:47:4a:7c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4176719912989979e086125a2a41a133fffdc24
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=477b561466ea99156d0ac00cf95b888f756709d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:c0:81:4d:5d:b6:70:a0:9a:51:53:8e:e9:
ed:8e:39:3e:a6:95:72:ae:69:10:cb:28:e0:41:e0:
16:82:e5:52:ab:79:44:74:ab:1a:69:df:d2:71:75:
e3:54:19:09:71:e1:71:08:4f:7b:bd:82:50:ed:c7:
97:8f:d5:19:27:1b:4d:46:5b:e1:54:4d:60:44:3f:
01:0c:56:e1:e3:db:ab:b3:4f:b2:fd:42:8e:d0:4f:
d3:13:b1:9d:c3:3b:0f:ba:33:2e:ea:bc:65:d6:a8:
29:bc:95:bd:9f:77:7f:aa:ea:70:f8:64:b3:23:66:
a1:54:66:a8:69:e4:42:cc:64:ea:9e:37:3d:87:32:
54:cb:ba:da:5d:57:ef:6c:46:54:f8:5d:41:04:ce:
9f:6a:f8:78:9b:00:b9:a1:d2:ef:03:1a:ec:7c:46:
4a:4a:16:cc:96:95:ee:ef:8d:f2:ca:0f:12:78:7f:
b3:8e:aa:02:14:01:22:bc:e2:8c:98:5b:2e:e1:b1:
64:e7:d0:df:cb:6c:90:1d:8d:5e:22:dc:87:fc:60:
4f:1a:1f:5e:10:ba:df:82:f8:79:75:9f:a8:b0:55:
fd:f5:d6:67:3f:19:a0:74:bd:e0:14:06:f4:32:de:
10:17:21:a1:b4:08:62:19:66:a0:51:cd:d8:de:19:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7B:56:14:66:EA:99:15:6D:0A:C0:0C:F9:5B:88:8F:75:67:09:D2
X509v3 Authority Key Identifier:
keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:30:f5:c5:36:82:cb:36:66:30:e2:d2:6c:04:50:f6:0f:90:
cf:57:06:67:9c:3a:1e:3a:2a:76:1a:44:26:32:7c:d3:9d:2c:
41:c0:b6:8e:d8:f9:89:0d:a5:c3:14:d2:dc:a1:af:d1:94:79:
76:fd:9e:bc:94:9a:72:4c:f0:74:49:40:3a:32:41:20:94:b0:
78:e1:a9:c6:bd:46:e6:de:3f:ad:bf:b1:28:6f:f0:34:50:08:
2c:c0:f5:16:a3:aa:34:96:03:c6:e5:48:cc:cc:96:0b:7b:08:
d5:73:dc:03:64:bf:9b:9a:63:31:74:df:07:e3:51:4a:18:c1:
19:b3:b7:bb:90:07:4b:37:24:77:1e:6a:7c:59:58:63:7a:1a:
19:29:9b:e8:46:2e:93:e3:fc:a5:f3:2e:16:22:c7:5b:d9:a7:
9c:6d:c4:7a:bb:26:e4:f0:dc:ee:1e:3e:74:37:55:b4:93:ca:
ce:4f:9a:f1:1b:bd:c3:18:85:22:96:56:f7:14:db:76:0f:e2:
76:f4:a5:cc:6c:09:f7:a5:e9:0c:77:e4:99:89:f5:86:bd:76:
cd:41:40:c9:d9:fc:61:14:10:23:27:be:58:b0:a2:1e:38:31:
8e:8e:7f:fa:99:bf:95:5e:8d:d8:99:f5:90:d9:72:f7:6c:ff:
a9:5a:21:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:43:17 2025 by rpki-client