Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
File: pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json)
Hash identifier: 3QyFIwCIBfij7sufPYpKtE+JSiZEBkbJd6vJdHk+qds=
Subject key identifier: 3C:B5:B8:39:B2:12:2D:D1:44:67:0B:CB:45:9A:04:B9:5F:5A:DF:84
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial: 0194BBCDC95A588D872BBD260297992A706A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
Manifest number: 06CD
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: HfQcZUosYB38WUcoYIEz_7k83KM.roa (hash: /K2P6JpdfwjoEYHmwZLKE7XXSJIGLEcUy6J3vqVuO5E=)
2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: VzLrMdnZY5574Ur5O0la98zaXYmVSmygGBz70wmWU2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c9:5a:58:8d:87:2b:bd:26:02:97:99:2a:70:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=3cb5b839b2122dd144670bcb459a04b95f5adf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:6c:d3:8b:6d:47:3b:e1:36:42:0a:c7:cc:
34:31:4a:8e:77:20:6f:06:45:a3:c6:a3:0f:f5:14:
d7:36:ce:da:b9:f4:11:66:bc:00:76:70:ad:c7:ea:
3e:76:b2:cd:34:76:49:6b:0f:a3:88:12:06:da:ef:
73:6c:a2:a2:c4:99:fe:0c:66:8a:63:81:5b:c5:a1:
7b:89:78:65:ce:77:e8:85:e7:29:38:a0:ca:62:73:
35:c6:f4:cf:e4:7b:f5:04:7e:c5:ce:7e:4b:4f:ca:
4e:7e:71:1f:72:3b:74:a2:95:a6:c9:69:64:33:5a:
ca:80:9d:f7:de:0f:22:80:a6:29:6b:10:3b:0b:1f:
52:c2:75:c5:81:69:5a:ba:a3:3e:07:dc:d5:7e:c8:
40:92:ad:31:dc:c6:94:69:f4:db:66:c4:ad:c1:84:
3f:2a:91:4c:d1:70:a7:77:92:53:3f:9b:ad:8f:60:
47:d1:f6:52:b9:69:9c:f5:f6:74:93:35:5a:0f:68:
34:b7:bf:f5:5f:1e:63:4b:df:1c:5b:5d:e2:9d:a4:
29:70:bf:ff:f4:35:08:23:96:94:c2:0e:c5:c3:c2:
bc:18:37:3b:37:c6:30:dd:ce:99:a9:89:cb:d2:1a:
31:ba:fa:a8:da:d3:f8:3a:92:f2:05:43:a6:cf:04:
f0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B5:B8:39:B2:12:2D:D1:44:67:0B:CB:45:9A:04:B9:5F:5A:DF:84
X509v3 Authority Key Identifier:
keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7c:c8:d9:5c:60:ee:5f:17:24:20:15:26:ac:4e:54:af:d6:
69:9f:24:37:2f:b2:37:6f:dd:3d:57:00:20:fd:bf:2b:cc:5e:
24:64:78:eb:90:7b:0f:38:8d:eb:ec:ef:8b:b8:1d:62:4f:6c:
21:e1:59:a9:ec:20:79:43:42:de:95:af:4b:ff:54:40:e4:27:
0f:a3:c3:4c:ce:d2:2f:96:65:9c:82:73:9b:34:16:34:e3:5a:
b7:52:6f:39:07:ea:dc:65:3f:8b:1f:9f:74:50:5c:9d:8d:31:
cc:79:36:3b:dc:2a:50:74:6d:ff:82:9a:f0:1e:a9:37:aa:d5:
92:31:81:9b:03:60:d8:3b:20:78:cd:b9:68:77:e4:f0:81:7d:
98:15:13:65:18:9f:6f:2d:ba:50:f4:1d:eb:85:cf:1b:4d:11:
a7:77:9a:5c:66:fd:ad:56:86:9c:e2:90:ff:8b:24:53:83:1a:
6f:7a:3e:48:05:c4:e0:52:4d:4e:fb:e6:bd:97:ee:d2:84:95:
ba:d2:ec:f7:d7:27:46:10:75:b6:b5:06:a5:8b:2a:11:07:63:
e8:ae:4c:0d:8c:e0:67:fc:f9:8b:9a:53:9b:26:fa:ca:b8:0c:
67:2d:0d:fe:4d:99:04:2a:4d:19:8a:1b:55:19:d7:65:06:26:
e1:e6:95:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:05 2025 by rpki-client