Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
File: PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft (raw, json)
Hash identifier: 18TZQFCYRc1zk9dO2JYFCWYc+39518K36ss5L7NIHSY=
Subject key identifier: 59:6F:7B:B7:86:F3:7D:CB:D2:D8:DD:0B:43:6D:9F:2F:38:9D:A9:F0
Authority key identifier: 3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08
Certificate issuer: /CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408
Certificate serial: 0194BCE058465B91119698755E6A2E357238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
Manifest number: 0CB1
Signing time: Fri 31 Jan 2025 15:00:06 +0000
Manifest this update: Fri 31 Jan 2025 15:00:06 +0000
Manifest next update: Sat 01 Feb 2025 15:00:06 +0000
Files and hashes: 1: J60Pw4hyKKjQhqi1eSTzFtauoi0.roa (hash: Pts66hPVy/S0JFZfVc88DLunALgdL+k1upaL/I3M97g=)
2: PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl (hash: O/jhu68nZpScVU6oQgsi2TRXTBIR5rSYNXP/dmGTXY0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:58:46:5b:91:11:96:98:75:5e:6a:2e:35:72:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408
Validity
Not Before: Jan 31 15:00:06 2025 GMT
Not After : Feb 1 15:00:06 2025 GMT
Subject: CN=596f7bb786f37dcbd2d8dd0b436d9f2f389da9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:d6:b4:72:03:13:e6:85:ca:08:6b:09:3b:
51:35:fb:35:99:a4:33:70:19:85:1a:46:a4:26:b1:
e5:e9:d5:44:1b:89:a0:e7:ad:2d:49:f2:35:ff:0d:
a5:9e:54:5d:b4:fa:c5:c5:93:6a:49:d3:15:71:9f:
00:f1:54:67:4a:cd:a1:93:d7:b3:74:8a:5d:70:79:
2c:a7:cd:69:44:6f:31:5b:84:ec:a9:3c:0a:31:42:
f2:74:dd:cf:61:f2:4c:87:90:9b:7d:ed:01:43:a3:
93:21:29:25:1a:15:7a:ee:9c:d9:0d:0b:17:66:7a:
7b:4c:6a:61:d0:e5:c9:71:c9:da:b0:8e:4a:fc:35:
d9:60:8e:02:c8:fd:b7:5e:8a:c9:79:9b:2a:75:9c:
93:d7:d0:04:0f:87:66:a6:46:f8:56:58:63:c3:be:
ba:5f:9c:fd:6a:d1:2a:55:cb:9e:f7:f1:fa:64:de:
09:3f:ff:60:c4:ae:c8:19:f7:09:2b:f3:39:86:06:
13:6c:f4:13:af:3b:08:8c:62:c8:f2:df:77:83:2d:
6c:2c:01:a0:0c:cc:1f:86:ce:89:0c:43:86:c6:e9:
30:be:18:23:09:03:df:45:3c:35:da:d4:13:51:07:
64:ec:41:a5:6a:57:a4:94:e3:e6:38:c6:b1:01:e3:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6F:7B:B7:86:F3:7D:CB:D2:D8:DD:0B:43:6D:9F:2F:38:9D:A9:F0
X509v3 Authority Key Identifier:
keyid:3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:89:b9:d8:c0:cf:e9:81:9f:ae:3f:3f:84:16:07:df:aa:6f:
71:f6:11:3c:63:c4:5d:b5:8d:18:ae:61:06:72:c2:c9:28:4d:
04:f0:da:38:56:ed:92:7c:8e:07:9a:3c:3b:17:b7:7d:d8:f9:
c1:76:96:bf:a8:62:c2:8c:24:29:c3:16:7e:93:95:1a:d8:01:
32:01:9c:30:98:82:6a:7b:96:17:cd:9e:d4:c8:9d:b1:13:78:
bd:5e:53:7b:d0:38:6f:b1:e1:f4:4e:b1:ad:70:34:3e:18:89:
43:d0:b8:0a:90:1b:98:41:c8:28:75:27:f4:c4:01:8f:fb:22:
e7:b8:1a:74:03:be:a1:68:e3:4e:fc:eb:b2:55:11:ec:ef:4a:
30:01:2e:82:49:7c:3f:3d:7c:ee:06:bc:d1:65:c7:6c:2c:d2:
91:12:6e:a9:c0:f6:b2:11:1d:cc:7c:af:6e:eb:e9:dc:33:c5:
bb:3b:31:0f:3e:4c:21:a0:cd:c5:a5:b3:62:c5:14:fe:c1:5b:
2f:22:ec:53:17:35:f7:49:7d:16:b0:78:2d:62:14:16:3b:93:
27:e1:8c:56:b7:63:59:66:ee:04:bf:6c:18:4b:e6:8e:c1:69:
df:15:49:f0:f4:0f:16:a9:1e:ca:d6:19:b4:68:9d:e3:08:bd:
8c:37:c4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:52 2025 by rpki-client