Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier: 8QG3Ze1qAecqHGj0nLol1yWk7t/2YNOS/hOFGDoDIDg=
Subject key identifier: FD:36:1C:FA:3C:82:F0:B2:72:68:7B:37:19:3B:DD:CD:44:54:2C:EA
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial: 0194BD175AF9C9EDE4B62C1F3A2B8D61A09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number: 090C
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: XKCgbBOF2hVHKDo78niiU6jULHg.roa (hash: QEaRFAJhUUsQeo4vGH+Fx3VQmk/EsBaPpLYF/MqkgOs=)
2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: 4nYZzYyv4eN+ihtJanbL8TLcWgE1eE5TjBEIy42P22o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5a:f9:c9:ed:e4:b6:2c:1f:3a:2b:8d:61:a0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=fd361cfa3c82f0b272687b37193bddcd44542cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4f:d2:18:e8:c9:cf:6d:10:91:46:f7:5c:82:
36:a2:84:73:05:ce:51:17:19:ee:dc:f4:84:1a:e0:
56:b2:ba:f4:85:74:da:bf:33:e6:c2:7a:b3:4b:1c:
8b:35:c0:be:37:a1:b1:7e:5d:8c:d8:3e:b0:98:f9:
15:79:f3:2b:82:d5:cd:2a:ff:0f:6f:9f:ff:a6:c7:
97:1b:f2:0c:ca:74:42:29:18:2a:e9:84:fc:b6:ce:
49:b1:fc:84:18:64:f6:2d:ad:24:a6:ed:ad:de:e8:
41:4c:8a:58:7d:65:e4:98:10:70:50:ac:91:88:bf:
cc:3c:a1:ff:fc:c1:52:c1:7c:d7:77:09:90:51:f1:
2c:b7:af:69:bc:02:9b:f1:1e:b1:10:18:4f:9d:24:
ae:0d:ae:24:ad:b6:0b:22:05:fc:de:34:5a:7b:ae:
54:58:d7:bc:16:66:6f:95:5b:00:1e:8f:17:88:81:
e8:dd:fb:b1:e0:1f:ca:16:3e:f7:52:2a:68:c1:29:
10:77:6f:b4:09:ba:c5:e9:98:40:ad:e8:1f:e2:8c:
1b:0e:7f:aa:23:39:35:1c:fb:51:5b:e7:4e:90:5c:
41:15:dd:b3:36:01:48:d9:97:36:16:29:61:00:a8:
e2:3f:de:fa:62:80:c4:d3:5b:b2:d1:67:be:f7:67:
7f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:36:1C:FA:3C:82:F0:B2:72:68:7B:37:19:3B:DD:CD:44:54:2C:EA
X509v3 Authority Key Identifier:
keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:72:85:1c:2d:49:35:6b:25:d4:07:90:91:84:78:2f:ef:b0:
b2:c1:d1:64:38:26:28:c0:e1:6d:47:f9:b3:67:c4:a4:66:42:
22:78:e8:7f:13:34:ff:9e:93:d7:d0:25:4c:87:e4:fb:f5:60:
c5:e6:33:8a:57:0a:38:de:35:8d:f6:a3:91:6d:7a:dd:47:f6:
b3:7c:28:d5:d3:cb:2d:da:a6:a8:2d:e0:dc:e5:05:d9:84:c3:
23:05:ac:53:ef:82:11:07:7a:39:f1:93:16:5e:ae:f9:8d:7a:
b0:90:78:76:31:91:bd:57:45:3d:ad:da:3b:df:96:0b:9d:06:
cd:af:ba:32:66:6e:d0:02:37:52:37:1b:4b:7a:aa:7f:22:3b:
15:27:af:e6:d1:09:b3:82:1d:64:33:5a:98:c9:17:96:ce:da:
4e:7e:5e:0b:61:6a:9d:30:8c:49:26:16:bd:d7:d9:86:11:f3:
e5:87:1b:b4:c3:a9:d0:c9:b5:dc:c8:8a:b7:65:e6:0b:ca:fd:
00:31:fd:1e:a1:93:a9:fc:85:7d:37:af:8b:48:3b:41:69:0f:
11:43:7a:e2:17:d4:67:1f:93:f1:e3:a9:6f:40:df:29:97:da:
0e:5d:81:29:7c:36:3c:ba:61:58:a6:21:ff:db:48:9c:22:f6:
a5:38:67:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:28 2025 by rpki-client