Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
File: PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json)
Hash identifier: HgarY7XM+fuOR1pC6E9sEeKpG68VcIDbMUwAXLKRypk=
Subject key identifier: 27:1A:CA:EE:F3:3A:85:69:19:EC:FC:52:2E:F4:D9:05:4C:53:9D:39
Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Certificate serial: 0194BBCDE326C0F872497F13B60B36769F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
Manifest number: 04E0
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: BneHQ-af6etJYnzgVpFHJTLWtfI.roa (hash: SK4P5sVwHnq6qFE+d1xG/bjzaly1qgrqi3Y+RExkIAE=)
2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: GN1645X3BTHWgleazHoMijSl6QdiTOcXQNlGnUAZeMw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e3:26:c0:f8:72:49:7f:13:b6:0b:36:76:9f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=271acaeef33a856919ecfc522ef4d9054c539d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8c:1b:4f:41:14:11:da:35:4c:38:30:c6:0f:
68:f3:1e:2e:d6:e9:c5:74:9e:97:dc:b0:d5:29:9b:
0a:2d:fa:c6:b4:00:95:e5:5c:a0:0a:2f:4d:23:f6:
09:3d:ee:d3:7e:cf:8e:59:0d:2b:9b:59:e6:12:0b:
0d:73:aa:2a:a6:93:08:34:a5:34:7c:de:99:94:2b:
03:0b:0d:ee:cf:1a:d7:7f:cf:eb:ec:1c:c9:ea:f7:
f1:b1:ff:ba:6c:b0:2c:e3:1c:1b:be:1c:50:a5:53:
2d:06:f2:1d:bb:ac:93:54:97:b3:56:3a:e5:42:de:
df:82:36:53:8c:26:4b:26:66:90:c8:54:38:34:8e:
ae:6e:b0:f1:2c:18:ec:e8:30:58:3d:c0:ac:86:c6:
22:3c:e0:ad:d7:c3:23:ff:12:cd:6c:70:e2:8c:8b:
b4:0b:b7:3e:cc:24:52:67:5d:0b:80:20:05:d8:bf:
a9:ff:17:3a:a6:a3:26:65:b4:b5:3d:f8:e6:53:f0:
a1:d9:df:d7:0c:d7:11:15:d2:f6:c3:1d:3c:53:7a:
95:ff:9b:af:d0:d2:b7:77:69:60:3d:8b:ee:55:1a:
ec:2c:c7:5b:36:d7:4a:ab:9e:36:45:df:a1:1c:19:
bb:df:1e:d3:f5:66:b0:c6:27:d8:e9:fd:88:9e:db:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1A:CA:EE:F3:3A:85:69:19:EC:FC:52:2E:F4:D9:05:4C:53:9D:39
X509v3 Authority Key Identifier:
keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7e:2e:7b:a9:fa:95:2d:56:c5:49:35:69:15:93:4e:98:81:
d0:84:f8:82:0f:16:1d:1b:58:c8:27:12:36:de:c1:1b:ee:34:
dc:d0:61:9f:3f:7a:fd:bf:bc:12:45:28:d5:ff:e0:93:10:59:
4e:a8:00:8b:43:4b:da:19:53:e4:03:44:8b:4a:28:3f:20:1b:
d8:ad:da:40:a2:ad:57:f3:fa:8a:cb:5a:d7:5a:39:57:be:9a:
5c:c9:4a:f6:f3:83:b7:d9:42:37:3e:b1:78:f5:05:ea:de:59:
aa:36:71:5c:f7:23:a6:3b:5e:18:18:6e:6b:1a:a2:53:ac:a5:
0d:8a:be:49:9f:02:14:2a:0e:54:55:74:7d:ab:cc:69:17:0d:
52:7b:49:09:7a:df:d7:3a:96:4a:ce:4d:9e:18:75:37:a5:b5:
60:af:04:73:d6:95:bd:02:17:4d:c8:87:51:cf:88:6d:1e:ca:
cb:58:8f:72:d9:6d:0d:b3:44:04:16:39:c7:5d:ae:be:c4:0f:
c6:8f:2b:25:a2:49:53:23:bf:4d:f0:85:1e:2b:92:41:26:aa:
bb:75:41:cb:b7:3d:e6:dc:c4:4d:21:e5:a4:2f:21:8d:4f:19:
2d:6a:25:19:7b:ef:22:55:c8:15:70:45:6c:94:d4:ca:5e:95:
21:e2:f6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:25 2025 by rpki-client