Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
File: PNVhnbjXcXN5lW1Op1t22ybRwck.mft (raw, json)
Hash identifier: PfF75CzSiQvE5RQczkPPSu7DGrBM0+E1Es+s15jq9Uk=
Subject key identifier: D2:3D:F3:7A:FF:C9:CF:67:F6:6A:6A:7C:43:F7:B4:68:62:76:E7:76
Authority key identifier: 3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
Certificate issuer: /CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Certificate serial: 0194BC7308F2737687AE375F7C7984420ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: 4prfTAA9HBYIWFQscXuDZvPOJfU.roa (hash: zMicpYmGFLFzW1lGiXS7QLLBWvT2YuAYQEgxuNA/2gA=)
2: PNVhnbjXcXN5lW1Op1t22ybRwck.crl (hash: JMXBoumAdWJWamkIV/323epWVllcn9wn7GA0pD+cVto=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:08:f2:73:76:87:ae:37:5f:7c:79:84:42:0a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=d23df37affc9cf67f66a6a7c43f7b4686276e776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:de:83:56:67:72:4e:9b:7f:69:81:b2:0f:
63:cd:40:36:63:ba:61:8f:28:44:7a:2c:a9:59:c3:
f7:4d:a8:6c:70:3f:46:ff:1f:69:73:8f:78:1e:2d:
b3:f3:52:2a:05:ed:7b:46:d8:4d:f6:57:68:79:74:
64:7b:8c:76:0b:31:d8:6a:c1:ec:fb:f4:35:31:36:
4b:17:c3:b8:46:81:86:76:fc:04:98:2c:59:39:91:
c0:7f:46:e3:1b:a7:03:90:44:ca:6d:48:1a:06:b1:
26:a1:c1:e5:9d:38:96:53:4a:ca:71:1f:a0:fd:52:
89:22:15:51:fb:3f:b7:36:de:00:86:7f:f7:0f:73:
72:20:48:b2:32:e5:04:42:2a:88:39:f7:ab:47:4f:
5a:56:7f:0e:57:43:14:7b:a5:46:57:a4:0f:e5:55:
04:99:dd:12:29:8f:3f:16:13:26:cf:6a:ae:b2:0e:
54:64:41:32:00:6e:24:86:f1:92:0f:ce:47:18:7d:
67:89:52:7d:15:0a:a4:c6:4f:23:ff:40:3b:c0:f2:
34:51:ee:6f:4d:d9:0a:3f:6e:29:46:84:32:b2:93:
22:e1:41:19:f5:26:24:89:4c:4b:aa:ca:86:15:e9:
b5:5b:b6:76:6b:39:f8:88:55:32:8d:99:49:1c:f4:
1f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3D:F3:7A:FF:C9:CF:67:F6:6A:6A:7C:43:F7:B4:68:62:76:E7:76
X509v3 Authority Key Identifier:
keyid:3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1a:ef:87:15:59:8e:64:96:b8:29:be:c2:01:a3:38:39:2d:
0e:a6:89:9e:46:ed:68:2e:5d:e2:08:64:de:8c:c7:e5:3a:19:
e1:be:ee:58:63:d2:ba:0c:82:8d:5e:54:9a:06:1d:3f:56:3e:
55:86:f8:ce:ee:18:2d:ad:91:8a:12:a4:94:f4:3d:23:11:70:
19:ff:9c:ac:87:df:56:0c:c6:4a:b8:88:26:2d:df:5b:c3:4b:
22:84:50:36:4c:4e:aa:a9:2e:3e:27:39:f5:74:ef:48:c4:a2:
fb:9e:4a:e7:ad:ef:d8:97:ce:9f:69:56:47:01:50:d0:e7:08:
14:e1:e7:4d:98:26:17:de:1b:c5:ba:49:3a:d3:cd:6e:16:e3:
00:f3:e1:58:b4:d0:e0:e5:5b:de:a5:40:91:4c:21:58:69:f4:
be:93:08:2f:2d:87:fa:ba:56:a8:f4:c3:10:0a:08:c0:e0:1c:
4f:69:28:ac:8b:65:c0:87:b0:d6:0a:68:1d:2a:53:a0:be:3c:
4d:ed:73:67:a2:1a:80:f1:36:b4:7b:37:b3:3c:3e:95:a0:e2:
c9:ea:39:db:30:cd:ef:45:32:90:9b:f1:dd:04:03:08:82:93:
28:13:36:eb:0f:d1:b8:90:8f:c3:3e:29:98:f2:2d:91:20:e6:
19:d2:af:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:14:22 2025 by rpki-client