Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
File: Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft (raw, json)
Hash identifier: knaJ4SN39A0TRavFS09UtLLitbf6YJ1zxVq2aU7hdOE=
Subject key identifier: F9:C0:6F:47:A8:F2:3E:58:EA:99:F2:23:DA:BA:F7:F3:39:32:AC:FD
Authority key identifier: 3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
Certificate issuer: /CN=3f296fe945a23180753f67f7748e6f299d2e672a
Certificate serial: 0194BBCE0A63760B8551282301DC0FD4E3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
Manifest number: 0B0F
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl (hash: b4ARsPSCbh+0X+lHs8m+UUjFdn7M7Qxa/kkS3OtJmlw=)
2: T-DcnAmlcMePQv6bt_1HUJGUDFs.roa (hash: jsvsotQxthUCKKbNVxc16O+y+azMWL7s6yd1PzEZeOs=)
3: WMvTsPZVS0U2OZBcjuFYwltYNE4.roa (hash: 1A+nnJYORQYAEgiISECGnxCiUXJtXD/JDL4kR4cHlDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0a:63:76:0b:85:51:28:23:01:dc:0f:d4:e3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f296fe945a23180753f67f7748e6f299d2e672a
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=f9c06f47a8f23e58ea99f223dabaf7f33932acfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:ab:71:d4:b4:4f:09:a6:0b:32:2e:4d:b5:
87:b5:da:22:0a:af:8c:7a:05:50:ee:d1:44:78:09:
6b:4b:09:41:eb:85:86:87:53:30:ae:c7:4a:80:5f:
b6:53:2a:a7:f1:a6:90:bb:10:5a:72:d6:a4:cc:9d:
5a:da:07:94:e4:ba:d6:8b:3f:26:8b:dc:0c:d6:2f:
41:ad:71:7b:0f:21:5d:95:30:fd:0b:0d:0c:5c:3a:
cc:f9:0a:a4:f8:be:51:34:43:42:8c:bb:35:31:7b:
16:2d:a3:09:91:b1:ed:f1:cd:dd:12:91:54:0d:3c:
21:65:86:cb:91:cd:16:bc:64:b7:1b:81:bc:93:82:
60:cc:2c:dd:7c:4a:2f:34:e4:15:4f:59:f8:5e:c1:
57:41:8b:b6:3b:86:e2:7b:c4:47:e4:9c:88:ce:da:
24:54:b3:7c:04:e2:c2:c7:bc:04:24:a4:b8:57:e7:
b9:61:99:f0:5e:20:e7:9d:7f:ca:d5:52:0f:fc:d7:
1e:8f:a5:a0:86:79:e3:9d:54:7c:ec:f9:96:e2:c0:
3f:59:53:41:91:11:0e:8b:9e:79:23:7f:04:84:4c:
b2:a7:ab:8c:22:37:d8:96:16:e9:44:53:b2:cd:b6:
ec:8c:bf:1f:3f:5c:c2:02:f8:d2:5f:db:76:21:2d:
1f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C0:6F:47:A8:F2:3E:58:EA:99:F2:23:DA:BA:F7:F3:39:32:AC:FD
X509v3 Authority Key Identifier:
keyid:3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:89:fb:05:28:20:fe:cf:0e:fc:10:9c:4f:dc:ca:67:95:42:
f0:dc:ae:65:6b:6a:b9:12:87:54:a8:7d:fd:34:28:b1:05:b3:
3c:b4:0a:73:62:73:ad:ad:91:0c:ab:24:3a:f9:08:4b:7d:20:
f2:80:14:da:f6:6c:9b:4d:67:68:18:49:97:ac:79:d2:91:b3:
68:ad:94:3c:36:4d:ab:d3:98:75:c4:50:88:42:e7:0e:82:24:
b3:72:de:c7:d0:b4:72:1a:c7:5d:49:80:6d:12:f9:37:59:87:
4a:c9:8a:dc:09:66:fd:ec:96:db:2e:cb:e6:66:75:c5:cf:97:
5a:8b:83:14:ac:d6:c8:ed:f9:b9:b1:40:ab:3e:65:fc:fa:7c:
32:82:c4:ae:31:79:60:5e:16:00:cf:5a:2d:2d:31:37:17:d4:
49:74:5e:45:b0:55:f5:47:df:aa:e5:dc:6c:76:b2:27:b9:48:
67:01:15:4f:f1:8f:37:f8:b4:2e:00:21:a3:46:05:1b:b5:5b:
05:f9:70:ee:9f:ed:4d:a8:1d:35:3a:b3:41:02:aa:39:91:31:
a3:06:36:01:77:18:bb:1a:89:6e:a0:6e:88:8b:ad:19:62:80:
3a:1c:e2:71:8b:61:55:40:ee:54:3a:cf:db:09:c6:c1:4f:f4:
f4:d3:6b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:32 2025 by rpki-client