Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: /97Rh7e3rqY0nRye9op+VtUDjzJ+BTyZo8ghg8h4TPA=
Subject key identifier: EB:37:A2:CA:A0:BE:CE:FF:83:20:44:D3:71:40:75:8A:B8:FA:87:72
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 0194BCE0A0F64FEF981CCC5E822D03696C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 0309
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: Pf9y4EUcfcGMbRh+DdweN/0UfKBvKy6v1XgRNjCUmeE=)
2: wTHnefFYASN9t7OgaDJP2pTz5W4.roa (hash: 9oC2Jer2cW2AbqdUqYgPoU7bU/Jm0xDFHVun+XWYaKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a0:f6:4f:ef:98:1c:cc:5e:82:2d:03:69:6c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=eb37a2caa0beceff832044d37140758ab8fa8772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:df:1b:39:53:6a:c6:9c:de:f5:75:c2:30:3a:
ba:91:fc:ab:23:04:87:8a:0e:5d:96:f4:e6:47:16:
bb:e4:47:87:59:eb:d9:3b:d8:28:23:da:34:dd:9b:
15:75:4a:e7:d1:7b:ec:c7:4d:6f:b4:2f:31:93:c8:
8f:b1:a2:13:06:3d:08:48:84:50:bc:ee:1c:0b:7e:
97:6d:a2:42:2f:eb:a0:ac:c3:16:57:d6:80:05:35:
8b:5a:07:18:6a:63:2a:07:ea:c1:01:9f:83:95:9c:
ea:2f:c6:b3:b7:80:90:40:ef:5f:1d:22:8b:eb:55:
e9:fb:a0:18:bd:df:ff:25:82:f9:c9:ab:f7:64:7e:
fe:ad:d5:92:4f:12:29:3d:10:be:57:eb:fe:d4:ea:
ed:57:a8:08:bd:87:43:34:42:e8:50:3d:e5:49:5c:
b6:f0:d1:f0:88:67:58:6b:2f:7f:f8:21:1a:c2:ba:
8c:df:d1:d2:71:88:71:1c:25:ed:1e:fc:d2:cf:27:
48:c4:39:45:9a:1d:86:81:6c:78:d8:3d:87:43:70:
31:e4:d4:f8:0c:a1:40:5a:85:11:c9:b2:eb:b1:5e:
2e:66:16:61:28:82:0c:1c:a3:df:fb:ab:19:0a:ef:
f0:12:b2:36:e2:78:58:fd:14:00:7b:f6:fa:28:dd:
de:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:37:A2:CA:A0:BE:CE:FF:83:20:44:D3:71:40:75:8A:B8:FA:87:72
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e2:c7:0b:42:05:ac:30:34:bc:50:21:eb:bd:87:8b:58:84:
06:4f:d8:25:0b:5a:7d:09:16:f4:6f:73:24:35:61:5f:2c:76:
b1:f1:6e:7b:d9:61:e8:a2:7d:43:e1:53:c2:5c:cd:29:dc:ff:
99:1d:da:68:2f:11:31:2b:a2:53:12:82:78:3f:b1:5b:b2:75:
d8:77:30:59:6d:69:c3:b3:25:c2:b8:90:f6:a2:34:ba:be:7a:
c0:2c:df:3a:13:41:f0:62:4a:a6:67:c6:df:1b:23:4d:13:bb:
ed:da:8c:b9:c3:e4:98:6b:98:19:b6:5f:59:bc:e0:46:9e:d1:
b5:4b:29:77:2b:6f:10:48:04:e5:dd:58:e2:c9:60:62:95:b1:
6c:a9:4e:a8:6e:1f:e6:df:e6:19:1a:4e:98:25:ff:08:cf:12:
ef:3e:13:27:a4:36:75:00:c8:40:ab:fa:40:2a:be:b9:e7:44:
63:b4:c2:2b:6d:6f:cb:19:a3:d4:1f:e9:42:6d:90:fd:1d:2e:
92:7b:12:55:bd:46:50:bc:e9:62:08:92:87:9e:5b:35:ef:ed:
5d:5b:53:a2:a4:26:19:7e:ad:b1:e6:53:92:24:d4:b2:9d:38:
81:39:16:88:dd:44:6d:67:0f:b6:e3:24:6e:f9:fe:e7:42:ee:
e6:d1:b6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:24 2025 by rpki-client