Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
File: pZyqKnNoBpiyyeGmyWQadPPOdug.mft (raw, json)
Hash identifier: BI1TjtnGizRx4LCAxRozSrdZrEhMp5u6ALnqLAgF0cM=
Subject key identifier: E6:E3:08:35:86:49:7E:C2:74:5B:B8:E7:16:29:EB:8B:C6:38:43:28
Authority key identifier: A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8
Certificate issuer: /CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
Certificate serial: 0194BD8581F25C40115E80A3904497F18D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
Manifest number: 08C0
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: _c_c0M25UwpZ7eHBk4pzeagMlVQ.roa (hash: 8jqy4hlWYt18GsvMo6F88//T4bDxnnNcBAAfWfrvPK8=)
2: pZyqKnNoBpiyyeGmyWQadPPOdug.crl (hash: oK13oPZPZ4ePtAhhOpaV5TfQ1awPHXlfKsi8L2rM/GU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:81:f2:5c:40:11:5e:80:a3:90:44:97:f1:8d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=e6e3083586497ec2745bb8e71629eb8bc6384328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:e2:66:47:a6:dd:de:2e:6c:67:36:bc:f7:
03:93:c3:13:a1:ed:e0:c0:3a:19:b4:17:0e:f4:83:
33:1e:18:95:c4:3d:9c:7b:29:61:50:2e:59:41:17:
98:a7:18:b8:62:23:68:1a:60:56:70:67:bf:2b:13:
a7:db:8a:9a:89:a6:d2:bb:be:35:70:4c:0e:eb:8e:
2c:13:32:eb:e3:1a:25:b3:58:c4:ef:31:37:ec:c1:
1b:e0:19:9f:1c:29:9c:0b:a2:44:3f:da:65:b0:4b:
d8:27:aa:bb:54:9d:01:af:b5:05:76:87:67:5a:88:
1b:dc:4f:a6:79:0d:cf:40:bd:48:ee:50:f0:40:4d:
a6:1c:e4:7e:90:dc:07:8d:19:ce:7b:b3:71:8d:e1:
a6:fb:b9:7f:d6:d2:f8:81:03:19:8b:d4:ce:6d:e0:
84:ae:1f:95:79:25:9a:c8:b7:3d:7b:6d:26:e3:a5:
e0:e9:89:51:8d:91:02:d2:96:98:f7:5a:75:6a:61:
0e:f1:b4:72:c6:ad:88:62:41:e3:90:34:0c:9e:36:
a1:79:ee:5c:12:60:bf:ce:b3:f3:bf:08:7e:44:e8:
43:60:85:02:9f:bf:9b:96:ae:20:36:90:9b:e9:52:
62:12:4e:56:ae:8e:ff:ef:65:a8:80:04:87:4f:07:
e7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E3:08:35:86:49:7E:C2:74:5B:B8:E7:16:29:EB:8B:C6:38:43:28
X509v3 Authority Key Identifier:
keyid:A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:55:39:18:8c:a9:b1:3e:3a:0e:22:e8:24:62:4a:5b:59:93:
7b:e6:0a:90:f7:30:04:bd:00:a3:63:88:68:ae:93:1d:5a:28:
93:4a:65:f7:87:37:6f:2b:f2:d8:ea:7f:d7:fb:0c:87:90:a8:
30:80:62:c0:22:95:8c:9b:1e:34:1b:1d:5c:c4:88:48:d0:97:
ac:2b:ff:f3:3b:ef:1d:3c:52:2b:52:f3:48:47:8a:a0:64:f6:
44:97:77:ca:b5:90:b6:0b:24:e4:e9:62:b5:06:c5:8f:4d:44:
45:59:59:be:b6:82:df:bc:11:87:be:67:ea:d4:a5:75:f6:cb:
67:32:0e:90:37:4a:2a:aa:c3:85:5f:3c:95:12:08:37:6d:e6:
b7:ad:8d:d8:f9:29:75:bf:ee:18:1c:b3:01:ed:ee:c7:2c:bf:
0a:42:9a:df:bb:30:04:d9:a5:9d:37:01:41:0b:18:db:1c:98:
41:87:ba:b4:44:b1:63:95:9c:5d:a8:82:43:ec:ea:7d:a4:2b:
92:82:0c:47:de:6d:58:e5:85:19:97:27:19:ad:81:b7:c1:1e:
c3:1b:a3:fb:e0:d3:e1:03:78:4c:76:d8:85:a9:76:ef:02:8e:
5a:66:78:f4:98:96:8f:33:d0:95:37:9b:9f:73:8d:17:e8:95:
f7:b6:8e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:25 2025 by rpki-client