Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
File: PqFIQth34nvEBouYH-dK64vufnM.mft (raw, json)
Hash identifier: ANJpBxlgKpXTUKAExBG7793UkQeWn0sboU33MCdU++0=
Subject key identifier: 3C:05:30:88:D5:F8:D7:35:9D:55:DC:AB:B0:EF:72:FD:69:04:C2:36
Authority key identifier: 3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
Certificate issuer: /CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Certificate serial: 0194BD853B4FB16B8C0A615BB3BE78E3B169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: PqFIQth34nvEBouYH-dK64vufnM.crl (hash: hg5heOtrvaUHTZBFlFiPU3KCNEhceUO32qhLuq3a05Q=)
2: h5AoEy-X54Db83-jTlFH2Y1fCVw.roa (hash: HOh3C7TWeQ0O5hO+1P91yiEiZozSeSnp7F1/q290vZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3b:4f:b1:6b:8c:0a:61:5b:b3:be:78:e3:b1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=3c053088d5f8d7359d55dcabb0ef72fd6904c236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:8f:8c:63:4c:d2:ab:55:8b:12:ed:3b:83:
0f:29:84:68:a3:c2:0f:27:4a:1a:ec:7a:17:55:b6:
02:d3:8e:ed:11:71:00:c3:63:a5:c9:49:b0:1b:21:
71:04:65:10:cb:f5:e8:ca:3b:a8:ce:c7:1e:de:3d:
0f:37:46:f5:3c:a4:16:4f:15:fb:f2:86:c7:e7:be:
ee:68:50:f0:4a:eb:df:89:51:19:4c:54:b9:1d:1d:
00:79:c0:00:a3:51:40:ef:2b:90:a8:a7:ef:68:ad:
f1:54:7f:15:89:63:55:a4:14:3d:a4:39:e6:2c:08:
06:0c:9e:0a:63:4d:1e:01:61:5a:ab:4f:a5:d4:cb:
c4:d3:07:ba:57:dc:dc:82:7b:2a:8a:33:ed:51:e3:
f1:01:f8:db:94:ca:e7:20:03:5d:59:6e:7b:55:36:
38:11:0d:f7:d9:04:f8:f5:55:a9:b3:ad:4a:84:a6:
1b:82:95:11:f6:a7:4a:73:b5:94:c4:88:b6:6f:30:
14:56:20:99:2f:18:eb:75:c8:ac:84:16:a7:d5:ae:
38:0d:ce:c2:47:6b:99:03:dd:e6:cb:b2:80:f6:ef:
8e:dd:6d:e3:23:0d:08:d8:5f:14:9d:7f:8c:6f:dd:
68:be:9a:3e:8f:5e:a4:43:43:d8:d8:ee:e5:fd:3c:
8d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:05:30:88:D5:F8:D7:35:9D:55:DC:AB:B0:EF:72:FD:69:04:C2:36
X509v3 Authority Key Identifier:
keyid:3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:83:49:b4:4b:f6:a3:fd:76:d6:5c:8e:38:c1:5d:eb:3d:d0:
fa:8f:3a:4f:77:93:ee:c0:cb:70:e9:86:ed:91:b7:bc:0b:d0:
20:28:53:66:44:1e:e9:30:72:73:eb:0f:5b:0a:4a:cc:8e:1c:
45:21:51:89:fd:3a:db:98:5b:79:15:4b:aa:1d:19:dd:18:80:
b7:50:0f:f9:02:f2:c5:b4:f8:44:68:70:08:9f:5a:06:85:18:
28:92:e8:94:22:ad:80:98:0c:a4:bb:da:51:4e:94:5a:d1:27:
ac:60:ff:1f:ba:d8:7e:28:22:95:79:6b:a7:0b:1d:a1:33:f9:
ad:bd:85:b7:9d:fe:28:fd:30:57:e6:ad:ee:8c:b6:bf:cd:04:
ba:b3:50:92:a0:c2:67:52:2c:52:2b:ef:64:1b:e4:c6:f6:1a:
c0:6a:33:d9:c1:76:7e:2e:2c:22:68:ea:a9:1a:e0:b2:27:83:
cf:51:46:8f:89:92:5d:00:35:b5:30:e5:cb:d7:a0:e4:ed:58:
b4:e4:cc:cd:02:44:1a:1b:3b:85:9f:42:0c:70:31:71:fa:17:
b8:7e:c2:20:f8:00:85:b0:fb:4e:60:61:bb:b1:6d:bb:af:e0:
8f:09:b3:5f:63:a8:9b:c7:33:27:f5:45:5e:2e:54:2f:fb:a2:
93:ab:a6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:31:52 2025 by rpki-client