Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
File: PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json)
Hash identifier: TswCQ4+G7nIUSIF9IN66cG8vEb+BXiBN07as8mVX7j8=
Subject key identifier: 4C:08:8E:45:95:C3:D4:32:57:89:9F:28:7A:D1:8B:8F:A8:84:69:95
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Certificate issuer: /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial: 0194BD17A6EF9FB7DCFA8A5F5D93A8D2568F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: 1-Csr3W7RFkTtbpc5vegpM0x3SJg.roa (hash: OEps/3ayuoO5bERjIwyI74TPDpt1ijmiHI+Ru4dOW1I=)
2: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: yBzcM8jgLahs2ok261ZX3o5JQ8Boof2Ko+MBpJXIyFM=)
3: aI9PtDrL1wGCUURcBpHMKfTf4hE.roa (hash: 4oSaxJpQHFX+hBtLYICwFPgrE4wCzYMHUMuoAxfYBXE=)
4: j6dQ2cjzXA3192uDTyOAiZGLE8Q.roa (hash: b9/CxQNUb4cLntaVBU/KEYsxwEObm97HgDwZmznQiH0=)
5: jyPlSfMwE97ShJiNEree4W-YnKc.roa (hash: RPRkI69AUdx22PSRgMKu/d39p+trzoeOCprFB1jyo6s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a6:ef:9f:b7:dc:fa:8a:5f:5d:93:a8:d2:56:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=4c088e4595c3d43257899f287ad18b8fa8846995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:25:5a:17:30:50:c9:99:a8:2b:a5:48:07:
34:9d:63:0e:93:6c:37:19:84:42:02:5a:c7:e1:9c:
11:bf:5b:4e:f2:5c:a2:a0:b2:ba:df:9d:8e:1e:48:
46:86:d5:48:94:78:4c:46:9f:05:68:4c:29:f3:9d:
be:5c:15:d4:1c:f8:a5:8e:85:48:20:30:ca:cd:21:
30:1f:72:c1:6e:fd:1d:aa:10:ee:4f:e2:98:c8:f6:
b0:d8:10:a9:2f:50:31:ad:4b:80:e8:ea:0f:c3:ac:
62:54:45:1e:bc:3a:21:ae:53:41:cf:31:e8:04:96:
3c:f1:fc:15:14:69:44:0d:ed:7f:d2:85:7c:46:d7:
f7:87:75:0f:a7:4c:84:9b:6f:e6:5d:12:07:c1:e8:
47:fc:09:02:30:17:cf:ba:ed:a1:41:b2:66:b7:40:
d5:d9:b9:48:ae:42:06:36:dd:9c:f2:46:b4:08:18:
92:a4:35:0b:42:3b:5e:a3:ac:bd:ed:c3:e4:1d:df:
05:9d:e8:eb:de:73:7c:ca:ff:1a:6e:8a:38:25:59:
e6:da:ef:21:44:ee:13:49:74:28:fe:b3:03:64:44:
d8:30:c9:6f:f2:9f:36:68:b1:e5:96:8d:39:ba:78:
92:67:c6:57:ca:25:c6:9d:d2:e3:3b:19:75:5c:fc:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:08:8E:45:95:C3:D4:32:57:89:9F:28:7A:D1:8B:8F:A8:84:69:95
X509v3 Authority Key Identifier:
keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:39:db:37:00:60:b5:54:4b:ff:8b:4c:58:f7:2e:27:69:4c:
38:ee:3b:ce:cc:67:75:a7:89:d8:dc:b3:fe:86:95:df:01:ba:
38:81:08:81:e5:73:b5:ec:4c:23:4c:44:9d:26:ec:61:d4:4f:
89:fd:0c:30:a2:88:89:6c:70:c8:60:00:c6:2f:04:fe:63:c6:
5a:97:76:99:09:16:6f:f8:a7:b6:2a:56:08:cf:87:96:b0:dc:
58:d9:2f:fa:9f:11:87:ed:51:ae:df:7a:1c:a7:ea:1a:29:4f:
5b:ec:dc:1d:5d:77:37:cc:1c:e8:0d:e6:e4:53:5e:b4:a9:20:
b8:51:83:8a:7b:7d:26:a9:f1:6d:17:c9:69:e8:91:c1:7d:7d:
0f:e5:5e:e8:c0:18:ff:5a:74:90:de:c0:62:95:f7:69:88:7e:
c0:58:01:73:50:47:d4:57:b6:60:75:30:aa:e4:1f:fa:94:73:
a0:e2:44:4a:13:f1:c6:b5:9e:db:1d:03:a4:b2:31:fe:93:1e:
46:e0:e9:fb:58:40:51:07:29:d6:38:26:52:03:03:3b:47:aa:
2b:3f:a3:be:88:ee:3c:73:6c:dc:cd:99:a8:9f:1c:7c:7f:96:
b4:81:59:00:1a:b4:6d:de:7f:7d:18:22:b0:af:a9:8c:95:6a:
65:f3:e2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:29 2025 by rpki-client