Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier: K+yWDBqtlnmoivTSPyCTwg9AKYKhDJTrPPIZddLPXRc=
Subject key identifier: C6:9F:89:EB:7D:BD:E5:4F:5F:24:73:FC:E2:AC:CF:96:02:5E:23:EB
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial: 0194BCA9CF76EAAEAF720069F407471570B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number: 01E6
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: cKcTnaQXmLmU5/GEP9cBRp4eXHRV8UCE54YGE4BBEic=)
2: UTJEyA5eoUQbkVsnzE_qVEPp7QI.roa (hash: QLgDwiA3HQMhzQTCpM1sPvRtSa6KhJD7pUZz4AfYcjY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cf:76:ea:ae:af:72:00:69:f4:07:47:15:70:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=c69f89eb7dbde54f5f2473fce2accf96025e23eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:cb:5a:3c:41:e3:70:a6:67:72:92:e7:48:
ab:05:b4:6d:c0:0d:38:ef:5b:fc:c1:08:4c:47:7d:
c6:ab:60:9f:79:92:50:b4:93:fe:ee:2f:46:9a:d0:
49:7a:d2:35:95:0e:73:a7:cf:9e:d7:48:49:33:05:
9b:ef:92:7e:88:a4:db:b5:b9:ff:3e:e7:cf:b7:29:
0f:34:da:e4:84:51:16:07:92:66:0e:c8:2d:d2:9c:
3c:49:e9:03:cb:98:bd:c4:80:b5:bf:90:fe:89:21:
18:61:e9:dd:3d:b1:e4:74:ef:7a:39:f4:da:ea:1c:
29:aa:46:91:a9:17:3d:dc:7c:34:a9:a5:b7:a4:bf:
79:0f:f5:74:48:61:18:f5:62:ee:d2:12:71:59:bd:
75:00:74:d7:72:da:e9:4e:b9:04:cd:e7:b0:09:aa:
f8:56:43:82:56:35:50:e0:3b:59:24:0d:4b:4b:9f:
7d:c7:12:03:13:46:7a:2e:b1:00:7e:9e:c7:22:11:
e4:c7:cd:43:12:ee:fa:74:77:e9:a1:4f:53:4c:bd:
d3:a8:82:b4:b9:f8:e5:4c:41:46:60:48:88:97:dc:
e5:81:36:3e:a5:56:07:a3:59:63:d7:d6:9c:11:2d:
82:8d:85:bd:54:1c:54:5c:9a:a2:da:b8:21:e3:f8:
51:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9F:89:EB:7D:BD:E5:4F:5F:24:73:FC:E2:AC:CF:96:02:5E:23:EB
X509v3 Authority Key Identifier:
keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4c:f4:b4:46:d1:40:7a:4e:d0:05:7e:00:df:29:19:8c:2e:
e7:ec:ac:67:8a:8c:fb:61:8d:93:21:a6:ab:0e:8e:7b:32:73:
eb:f7:72:a4:e5:8b:a3:bc:36:79:cc:f8:51:68:ca:e0:5b:61:
f7:a7:90:cb:cd:d5:f7:22:73:36:53:1c:ec:46:a6:73:90:83:
09:14:39:9e:57:c7:97:f3:e0:af:b8:59:d7:21:c1:cd:de:c6:
85:db:87:aa:57:6f:8b:bf:38:95:b2:0d:20:99:88:76:c3:b5:
78:17:27:33:cd:60:ff:d7:57:a5:8e:a8:78:85:82:85:83:d2:
e7:45:6b:67:b8:c8:3f:01:f6:35:59:53:e3:c2:2d:19:c5:b8:
7f:e6:2a:38:de:4c:a1:2e:76:9e:21:f9:76:36:d0:91:96:ca:
9c:c6:60:21:51:e9:cd:22:e9:b7:ef:6c:e0:c0:db:af:22:37:
c0:92:de:73:18:00:74:45:2b:d6:06:30:f8:e0:8e:b5:f9:9d:
23:6f:60:72:a5:5d:e5:6c:d8:1d:ea:08:28:b9:02:81:32:4f:
a7:48:1f:d3:63:13:bc:15:ad:a1:97:a8:51:6c:82:48:ce:42:
30:16:68:d2:6a:ab:53:bd:8f:c5:e2:e8:40:85:c3:f9:30:63:
61:64:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:24:50 2025 by rpki-client