Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft
File: PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft (raw, json)
Hash identifier: 88d2tuHJ0OPpYwwNIULrJptk/4Mc5awwQssReSFrtKY=
Subject key identifier: F7:CC:AB:76:83:64:CD:2D:82:47:6E:B2:DF:1B:15:41:A5:61:8D:AD
Authority key identifier: 3E:09:A5:4C:C2:24:AD:7B:3C:A0:C5:75:31:7B:81:84:E2:AC:E2:16
Certificate issuer: /CN=3e09a54cc224ad7b3ca0c575317b8184e2ace216
Certificate serial: 0194BCA9FB0B5BA6418E79CF668080B22576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgmlTMIkrXs8oMV1MXuBhOKs4hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft
Manifest number: 1302
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: 4aKaPeuKkFGP9DkxcB8DOClWpKg.roa (hash: m9nL9aDr5NjXaEfCOc4RkIAjrxKiWL1MukDMMkDw9YE=)
2: PgmlTMIkrXs8oMV1MXuBhOKs4hY.crl (hash: cufWQa6MFMTCpyYJWFVf7f6d/OeXNhM+6aD8SdrVPoU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fb:0b:5b:a6:41:8e:79:cf:66:80:80:b2:25:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e09a54cc224ad7b3ca0c575317b8184e2ace216
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=f7ccab768364cd2d82476eb2df1b1541a5618dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:30:58:dd:15:0a:bb:c1:54:6f:75:a3:9d:
c9:e0:a2:4d:06:b4:e7:c3:47:78:e4:56:94:3e:5b:
93:63:d0:44:e0:0e:5a:14:68:8a:08:63:6b:8c:6a:
4f:20:6e:a8:52:f2:e5:69:70:54:c7:2f:93:e3:d8:
0e:34:ad:1e:1b:7c:e4:62:1c:a1:03:42:a6:1d:64:
9f:6c:f1:ca:01:ac:5a:a9:73:11:6c:50:3e:96:f9:
db:9c:83:3a:43:19:3d:8a:05:9f:bf:ba:4e:ad:6c:
15:0c:bd:40:75:7b:fd:ac:66:93:8f:c2:df:69:07:
c8:e6:af:3a:9a:04:67:90:e2:92:42:ce:b8:e2:4b:
43:34:94:9d:5a:d8:47:64:8b:02:d8:e8:cc:95:a0:
1c:91:a5:f1:38:3a:8c:ce:8e:dd:c9:13:28:4b:9c:
56:3e:ca:15:7d:0d:98:19:00:6f:ff:39:3b:b2:c9:
5d:69:30:d8:0e:a2:5c:74:60:ab:7e:33:68:83:e8:
09:48:d5:06:b5:b5:c5:4a:37:86:c4:06:9d:22:bc:
a2:d2:41:20:32:db:84:f6:68:05:37:28:42:ed:61:
61:7e:04:4c:66:75:08:79:72:dc:d7:ad:85:65:ba:
c1:17:41:77:82:fe:73:af:0f:52:2f:43:c0:fe:02:
ae:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CC:AB:76:83:64:CD:2D:82:47:6E:B2:DF:1B:15:41:A5:61:8D:AD
X509v3 Authority Key Identifier:
keyid:3E:09:A5:4C:C2:24:AD:7B:3C:A0:C5:75:31:7B:81:84:E2:AC:E2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgmlTMIkrXs8oMV1MXuBhOKs4hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:32:77:92:70:aa:ba:0b:67:59:62:42:2b:08:2e:6a:c5:93:
14:e0:e2:00:33:78:51:81:6f:40:74:5b:6b:7d:26:0f:b7:6c:
9f:6e:8d:47:27:bb:3b:b3:9b:44:a8:66:1e:3b:32:74:bd:0c:
76:4a:a0:ef:fb:33:b7:d4:f0:8e:4e:de:57:1e:32:65:08:ea:
98:08:6c:29:84:d7:0a:a8:b0:a7:41:be:71:a5:84:59:9d:8a:
c5:fa:97:33:0a:58:8a:30:42:9f:64:7c:1a:3f:7f:ce:84:7c:
5c:36:78:29:33:a2:69:cc:a1:9a:20:92:f1:86:a0:d8:b8:15:
09:12:cb:4b:7e:97:9b:a6:0f:a8:b4:d4:ee:7a:29:9c:c7:5c:
be:17:07:bc:a8:81:8a:c2:c2:4b:fb:69:74:1a:81:f9:e1:ad:
ba:d9:17:72:3b:f1:36:03:56:77:f0:10:6f:ca:f5:4b:4f:10:
dd:65:f7:cd:e8:27:1d:1b:a2:bd:41:33:9f:11:d9:58:01:e0:
8e:3a:9c:a0:f7:bb:09:a3:a0:c7:5e:47:66:ee:ef:ab:21:86:
65:fb:df:02:7e:69:9e:8b:7a:d4:17:e9:2c:55:9d:9e:b8:16:
ec:50:d3:72:4a:85:16:52:56:c4:7c:97:3b:32:84:47:1d:f7:
c7:41:3a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:31 2025 by rpki-client