Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
File: pnhXc98xO5FxG_a8WxSezCRrnok.mft (raw, json)
Hash identifier: BmZmKn+agw28y1ChFqA0fFYCxsV4mHL403rzBhtQuUs=
Subject key identifier: 7C:AD:FA:B1:15:17:76:69:93:C7:80:0D:D9:48:4E:DC:D4:2A:F2:79
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 0194BC72C6A351A1F5A86B2065AF263BB583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
Manifest number: 11ED
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: 4_O_iIpyAI9RehObq-pOpadb0Oc.roa (hash: yk0faU3G873g+gLSQoGVoe7NYYyCWEaHzHI6ZIk9UdY=)
2: 7loUqY3SMQ476AvW8cBj_oE5D0w.roa (hash: 9ZWiK7Ya0oQoJXKuXssFNZZZ1jcO9WaxjH/2eSSyYlw=)
3: 9qXJnie35SdfH2J2EgodKBngTzA.roa (hash: jwDaD5ZgcucjZdcdoISWLpA3Zdrcncz7G1jWAlDHN4k=)
4: ZBlIbQcGI_iYAdNriW4LiOuavMw.roa (hash: Ey5N+Mavd8x0raBXK5nQyAb6MUhwtfItWf0no8uge6M=)
5: h0Rq-64YdH2Rhgx8VqQPxecaOJk.roa (hash: +OMPPDfPiGbQBs5xm10WtKzO2XvkhzUC6VL8TFg0R8M=)
6: p7CrYRPqjfqg5-SpOOWgZYcH7pg.roa (hash: VxeYJO6+oO8JTtkcjhdpm2dOlDG12rU/cm/baKhjYqs=)
7: pnhXc98xO5FxG_a8WxSezCRrnok.crl (hash: DVeKoPwNum3e2cMervwvgTeXnLawvwTfCGi4T1fS0kM=)
8: vm5i6AVzmYzAz9qPwbnD4VrLfVA.roa (hash: VDQ8oeDiLzJU7KaKEM2DHEI37PMjg/GP0JQI1knZDEc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c6:a3:51:a1:f5:a8:6b:20:65:af:26:3b:b5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=7cadfab11517766993c7800dd9484edcd42af279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6f:13:7f:f2:40:89:0e:c0:b3:d3:6e:97:ec:
f8:11:9d:90:2d:5f:60:b1:4b:b4:f6:2e:b1:40:32:
7b:79:50:27:3e:b0:b7:e1:bd:f4:54:90:eb:87:20:
1f:f7:33:c5:90:80:b0:5b:45:db:47:e7:39:98:7e:
89:ad:dd:4c:98:2a:bb:7d:3c:ae:d6:33:13:21:5f:
d0:17:10:22:d7:5e:d8:8d:ec:0c:1b:4d:1e:8b:c2:
87:5a:29:88:2a:79:33:80:43:21:97:be:75:57:ab:
30:bc:cd:e8:f6:be:a6:66:b7:e4:3c:69:ea:87:46:
df:09:8e:5f:e9:8d:84:ae:fa:5b:7d:3d:f4:f1:48:
bd:b0:1b:55:3d:da:f2:2a:a4:59:fd:32:2e:46:13:
f5:e1:29:ea:6f:77:c2:07:ef:64:e5:e2:f0:2e:f1:
c2:82:f6:f3:86:e3:26:6e:b4:95:2c:84:54:9e:0e:
57:da:10:f5:4f:65:e6:b7:0f:2c:d0:61:59:64:66:
64:a0:28:4d:41:ee:5d:18:52:9f:48:e5:2a:ea:87:
b9:9d:b8:e6:8a:d0:ac:3c:af:cf:5a:28:16:44:3b:
eb:ef:00:1d:5a:97:59:13:1d:bf:f8:0d:ef:d8:bf:
a5:8e:28:29:05:3c:de:47:f3:75:d1:05:51:08:9d:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AD:FA:B1:15:17:76:69:93:C7:80:0D:D9:48:4E:DC:D4:2A:F2:79
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:54:67:9a:c5:89:ba:f2:e6:29:b0:43:90:6e:fd:41:9c:e2:
5b:8b:99:c5:fa:c9:80:ca:63:50:bd:72:1d:ad:9d:2c:51:5d:
2b:04:76:cf:9e:fb:f4:62:b3:a7:06:bc:6d:1e:ed:e0:1d:ce:
c3:2b:92:24:55:d2:fa:74:71:f3:fc:35:29:50:69:3d:a3:ae:
98:8c:39:f8:52:72:55:6f:56:cf:79:b6:3f:96:ac:95:d5:b0:
04:08:56:74:88:11:33:33:23:66:14:81:1a:18:84:2c:ac:4c:
b6:3e:95:c1:be:f8:09:23:06:b8:4a:85:1d:14:62:80:15:a9:
7f:a5:c6:22:07:ca:50:fc:33:49:06:24:e1:a6:27:09:ec:f2:
86:3c:93:fc:87:9d:28:18:a1:c5:3b:3d:ea:d4:11:d4:98:19:
56:78:ee:68:a8:7f:1c:80:98:75:f8:b6:5f:8e:b1:7c:c8:29:
81:6d:f0:13:9b:81:e7:cc:51:39:93:3f:53:22:69:fd:56:fb:
8d:13:2a:c0:b2:50:78:93:fc:b9:ec:75:e9:15:f5:ac:b3:63:
37:52:c8:17:46:34:09:5b:b6:d6:75:d3:86:82:e5:55:6d:86:
7b:49:ce:84:fa:f4:99:25:e7:9d:0e:c6:0e:10:a3:63:77:7a:
89:1d:dd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:12 2025 by rpki-client