Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
File: pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft (raw, json)
Hash identifier: 8ILWJ6m2JprRfBy0VdbHZ26eheZ6i/HSBtSo+AxB1QE=
Subject key identifier: 42:EC:A8:44:C7:4C:3A:16:8B:90:87:15:F0:3B:D5:00:7B:8E:69:43
Authority key identifier: A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
Certificate issuer: /CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Certificate serial: 0194BD4E553E39F7CD595398FB8C0CCD1C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: LfvParklu0gxciTOgFZh-BpaZYE.roa (hash: fxMbCosgtYcMMEyUONm7A6ez+akqjsDq1R4iKueGkms=)
2: pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl (hash: tH2VDbj/Xs9NTviS35rnkkn7MmqLAOeeJg1OHgisgIY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:55:3e:39:f7:cd:59:53:98:fb:8c:0c:cd:1c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=42eca844c74c3a168b908715f03bd5007b8e6943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:0b:78:94:d5:2e:9f:d4:2e:d2:c8:64:56:
d5:68:94:87:9e:b6:f8:19:a8:fc:b7:cd:ed:75:e7:
94:fd:56:63:f2:fd:34:51:af:fa:c9:b7:cd:4a:7c:
43:9d:f0:cd:7d:fa:f3:da:fb:aa:4c:83:24:f9:5d:
79:2f:3c:d4:9a:59:12:be:a7:49:f1:b6:70:22:ee:
35:9d:f8:d0:54:0b:a6:71:41:20:8b:e6:50:9e:32:
1f:c8:a6:27:d0:c9:43:3e:82:9b:d8:ef:60:a4:80:
0c:da:b2:15:df:c7:59:21:ff:35:95:31:8c:d6:4f:
ad:87:5a:03:94:43:05:ef:1c:2e:89:7f:ea:8a:17:
e8:d4:16:b8:e6:0c:a3:99:ea:d5:2c:6c:6a:5c:04:
aa:2e:18:c2:e3:37:c0:2e:48:98:10:15:3d:b3:ba:
f1:0e:c9:cb:64:78:f0:72:86:56:e3:e0:5f:97:b0:
8f:92:24:b1:df:5e:1a:5d:1a:05:1c:e6:87:fb:1e:
50:9d:c6:a0:5c:d5:10:bf:b0:da:88:24:4b:25:58:
90:25:00:f9:f2:2f:98:64:e9:b3:a4:1f:b8:db:d0:
55:61:0f:c7:bd:bd:14:0c:ba:45:26:06:30:a8:7e:
9a:65:ef:d5:58:b8:ff:06:f4:bd:c5:3e:bc:0b:02:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EC:A8:44:C7:4C:3A:16:8B:90:87:15:F0:3B:D5:00:7B:8E:69:43
X509v3 Authority Key Identifier:
keyid:A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ed:05:0f:07:81:b7:f9:9f:e7:f8:67:36:61:32:ea:d1:a6:
f1:b4:c1:79:d5:4f:cb:e5:cc:47:f2:33:a7:e7:6c:ca:6c:46:
86:23:e0:a1:d0:b1:0f:21:2e:9f:1b:79:4b:50:3f:1b:e5:b8:
7d:41:bc:8d:40:cc:7b:9f:f6:92:2a:0c:5a:1f:d8:40:23:25:
6f:51:10:89:de:17:22:d8:56:1c:ef:40:e7:dc:ac:9d:3d:0e:
9b:65:c8:0d:8f:e4:52:9d:a4:ae:3f:93:67:e6:8e:8e:91:a2:
9b:1f:ca:af:b9:c9:e8:69:6a:16:e7:3d:06:9c:fb:f1:77:f3:
a0:a6:74:6c:ec:19:78:48:cd:f0:61:85:c9:fe:a1:ee:c1:03:
57:f6:fd:4b:38:7b:c3:4d:c7:10:ad:98:fd:95:4e:12:79:64:
b9:5e:98:74:4c:b6:a3:ae:92:f5:c1:54:01:f8:26:b7:a1:7b:
7e:1e:d4:10:74:e2:f5:8d:ff:50:1c:71:f7:99:0f:0e:89:98:
b8:fc:ed:a2:c8:85:c1:e9:04:89:3f:77:de:d9:3c:87:7d:39:
9c:9c:21:9b:47:db:d7:b4:77:c7:0d:ac:50:03:af:1a:34:f1:
61:27:bd:16:ad:d2:27:3c:ee:fc:43:81:d5:9b:ee:63:a9:51:
ec:de:18:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:11 2025 by rpki-client