Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
File: PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft (raw, json)
Hash identifier: gkxDlKO7m3kCRXFGs/KDhmkXR8uxc4cYQbH6gVzCfvE=
Subject key identifier: 8D:15:3E:D3:F5:FD:A6:7D:F5:A4:28:AB:DC:99:91:96:9C:F6:CD:BB
Authority key identifier: 3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A
Certificate issuer: /CN=3ca447fd0979b8a989355c354d304d114d20727a
Certificate serial: 0194BC73119129F8DC79FDDB0BA2745888D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
Manifest number: 0108
Signing time: Fri 31 Jan 2025 13:00:45 +0000
Manifest this update: Fri 31 Jan 2025 13:00:45 +0000
Manifest next update: Sat 01 Feb 2025 13:00:45 +0000
Files and hashes: 1: BcTRmH6BmmlSz8rh3pMxnCQXpBs.roa (hash: xmk+1c+FLynSNXKfYDQ/lfjoeA1RsSdHXQaf1l1+6Ak=)
2: PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl (hash: 7X03d4UYfe+ZEflQSzx2pLf0sRdsFvAxwF0wST1xH3w=)
3: eP87Vey-9rBbyOrOh4YCvuO3c1M.roa (hash: az6VMbDPubRZM135slIGEREK5WUZUt9MUwTRvHW3psg=)
4: wBy33E8gC6zWuMOmD5yzfH0QyIQ.roa (hash: yM84zdMfEYNT7elb1Nq+ZFqPP22ZSrKZWHzVdylcK6U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:11:91:29:f8:dc:79:fd:db:0b:a2:74:58:88:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca447fd0979b8a989355c354d304d114d20727a
Validity
Not Before: Jan 31 13:00:45 2025 GMT
Not After : Feb 1 13:00:45 2025 GMT
Subject: CN=8d153ed3f5fda67df5a428abdc9991969cf6cdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:18:d3:2a:46:59:fb:98:29:a0:c7:1e:1a:43:
43:4e:0f:0b:7c:74:b8:b7:f0:a8:5c:8b:2d:54:b6:
28:30:30:06:0a:4c:44:a1:19:bf:5d:77:42:1d:52:
bc:d5:fa:13:4c:dc:59:56:8b:28:66:02:ce:9f:34:
11:5b:d8:0e:34:70:57:66:3c:19:7b:5f:48:f5:0c:
c2:ae:a7:0a:6b:cd:5c:e3:fe:85:a2:d1:3a:f3:1b:
27:92:37:15:86:b7:46:b4:7d:75:7d:37:0f:e7:b9:
bc:2c:5b:9d:a4:d0:4c:c3:ca:36:16:7b:36:dd:79:
38:2b:aa:20:7c:7c:b1:c6:ad:fd:0f:56:68:0e:6f:
e0:0c:6f:e3:8d:aa:ea:d3:39:7e:27:05:e2:e3:72:
ad:4f:29:f2:52:b9:e4:b1:4a:27:fb:eb:d8:1c:5d:
fb:94:dd:9a:db:49:a9:c2:c3:d2:a4:69:9b:c1:5d:
1b:07:33:9b:4b:7a:fd:5f:17:eb:0f:dc:ce:e0:c0:
70:75:49:8c:94:f3:4f:a5:88:51:8a:d9:44:d3:e0:
8a:5c:b7:dd:73:92:a8:95:4a:ea:b1:18:c9:bf:c4:
a1:99:78:28:82:9c:1f:16:26:93:9d:64:7f:f9:16:
cf:e8:eb:8a:8e:8d:e2:76:d9:8c:23:3a:cd:2a:ad:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:15:3E:D3:F5:FD:A6:7D:F5:A4:28:AB:DC:99:91:96:9C:F6:CD:BB
X509v3 Authority Key Identifier:
keyid:3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f2:8c:bd:e5:26:6d:0c:a3:e8:e9:78:40:89:12:90:4d:90:
a9:f6:11:5e:33:1f:b8:fc:8f:78:07:14:ab:c4:f0:a7:87:45:
37:cf:36:cd:6c:62:20:fb:54:7e:e4:b6:30:af:39:45:20:de:
51:bc:5f:24:62:09:eb:7c:bf:32:27:5f:99:54:f6:e0:f5:4c:
4b:92:66:9e:73:02:21:16:e7:41:d2:10:d8:84:80:76:28:01:
14:89:8e:1d:df:b8:15:22:13:78:27:8a:99:47:86:8b:2c:5f:
d7:cf:d8:86:b6:8d:a1:49:7c:37:18:97:26:47:56:21:98:53:
02:e3:a5:3d:66:60:01:79:64:fb:9c:df:5c:45:0f:60:04:f8:
28:e7:c3:7d:eb:b0:7c:30:18:41:ea:1d:34:c2:60:89:61:a2:
ee:76:11:ab:53:a6:6e:b9:46:76:17:04:b7:97:0b:70:ba:28:
38:a3:d2:7c:4b:f3:fd:76:6c:05:0a:6f:a6:a9:25:40:e2:13:
bf:70:5e:c0:95:6d:b4:99:24:fe:1d:72:c5:b7:a0:45:72:b0:
0f:3a:24:89:5e:4c:25:8d:30:db:47:d4:8d:2a:87:4b:e7:e1:
92:eb:e5:a6:04:08:db:bc:6d:11:03:d1:54:e8:84:19:3c:e5:
a5:61:07:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:28:05 2025 by rpki-client