Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
File: PqGMkbK-KKB0uaOHSpC0RgE84b4.mft (raw, json)
Hash identifier: vOsbtFw59qs97hNgLO5oZc7bCmvCY11dfZ84TXO0y7Y=
Subject key identifier: FD:41:0A:91:93:C0:B0:FE:DF:A6:85:64:F4:83:22:FD:56:F6:CC:6A
Authority key identifier: 3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
Certificate issuer: /CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Certificate serial: 0194BD856FE54B810271F6CDDC7C0370AC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
Manifest number: 01C0
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: PqGMkbK-KKB0uaOHSpC0RgE84b4.crl (hash: 6FOWfwBz7X2tEtAuCGsQQHMsHq+MhOwgP6KF/so6SDU=)
2: w78-PkWjkmBWzXnYfu0GZ4j6LVI.roa (hash: BzBqUt4k6YCYPQ6Nn7PdPu+ICTIm/5kh0/Z+KfmEAhE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6f:e5:4b:81:02:71:f6:cd:dc:7c:03:70:ac:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=fd410a9193c0b0fedfa68564f48322fd56f6cc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:c4:0b:5b:64:7e:bf:ff:b9:20:13:12:20:
b3:c0:93:16:ea:05:00:54:7e:94:fc:ee:c4:9f:2a:
5f:6a:81:50:3b:71:67:63:3b:c9:09:29:c2:bd:93:
f4:4f:94:e6:93:8f:89:b1:e0:db:31:a4:b7:c2:69:
b2:26:1d:85:58:14:87:2f:3e:85:ba:aa:d9:db:4d:
c5:3d:7e:7d:76:28:62:6e:08:c3:e8:91:2b:0f:07:
93:cf:78:f6:62:90:a0:67:05:38:45:47:77:33:24:
63:b1:e0:26:45:f4:95:fa:3e:88:bc:d7:4c:c2:1c:
5d:7c:52:c3:7e:58:de:42:73:97:50:ef:89:a3:e9:
79:fa:b5:5e:2d:0e:60:cd:4a:8d:15:b4:2b:3c:c4:
94:a2:e8:0c:37:bd:21:dd:0f:2d:10:d6:d6:2b:e9:
5a:78:09:79:81:21:19:11:4a:20:fc:82:e3:0d:1b:
d2:ef:27:1b:92:4c:0c:e6:16:39:3e:1a:1c:fa:a9:
d6:19:29:73:66:4d:3f:3e:87:34:fa:2a:33:9b:eb:
e2:99:79:35:2b:a6:31:ef:fb:36:db:4e:e8:48:6f:
38:95:06:2f:79:14:30:65:72:2a:66:d5:84:d0:42:
30:00:56:c5:92:97:77:8f:11:c1:a9:a2:e4:5a:ad:
21:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:41:0A:91:93:C0:B0:FE:DF:A6:85:64:F4:83:22:FD:56:F6:CC:6A
X509v3 Authority Key Identifier:
keyid:3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:04:d2:5f:15:0d:02:c8:44:dc:7e:dc:19:5a:eb:4c:dd:2a:
e2:5b:4a:6f:12:50:bb:89:e8:dd:1f:b9:5f:80:a3:20:25:ff:
f1:03:96:e5:3c:70:a1:b7:51:b6:71:ef:ca:d3:96:95:10:2a:
96:ba:22:66:82:6f:5a:ce:fe:47:4f:54:cd:6c:55:d7:20:cd:
6b:54:bc:d7:27:71:fa:55:aa:f5:0a:e6:4d:dd:1d:be:97:b5:
1c:a9:6c:b1:00:e3:30:63:83:b8:2b:b6:ef:11:96:dd:cb:50:
7b:6d:20:08:3e:a1:4e:b7:01:3f:b7:14:74:da:d3:34:c8:b9:
6b:24:ab:52:f2:52:4c:56:2f:28:e8:cd:09:45:46:47:93:02:
cf:c5:48:76:6a:4c:3b:8b:87:38:36:b8:a5:a4:1d:d8:ce:b9:
38:76:f2:b0:df:63:86:78:49:44:82:19:cc:5c:b0:97:74:f5:
f3:76:99:c5:e1:79:cb:f0:61:28:10:e8:65:30:b7:ac:4e:fc:
94:3f:19:96:a4:4d:3c:ff:3a:ce:98:23:2b:af:46:eb:67:97:
87:bb:02:d2:84:54:d5:ce:cd:af:00:d2:b1:4a:fa:e5:f3:08:
8c:f7:24:d9:62:e6:cd:bd:b5:cf:ab:44:71:f2:81:41:71:fa:
a2:71:d3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:02 2025 by rpki-client