Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
File: Pbiird2wAoUIVJlqlLcrh_Snsw8.mft (raw, json)
Hash identifier: UwRjP56k2HFdj+8n44EoeQin5l3YVGIyHu3NLd2+1gU=
Subject key identifier: 93:61:69:22:82:68:44:6F:68:6A:31:84:DB:1B:E9:FC:09:25:D7:AD
Authority key identifier: 3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
Certificate issuer: /CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Certificate serial: 0194BC3BC5BB176EA7E481048FDAB91A1654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
Manifest number: 0CD7
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: Pbiird2wAoUIVJlqlLcrh_Snsw8.crl (hash: VJojMQGqXNVSah0qXmm9BfqU4/MUz47afGoYpaScysY=)
2: gt9goB76oJJ9IidA_tfxI6lWDIw.roa (hash: q0BFU46k9v4mjBVsSe1ZjIuLriX+JzS+b+gMagD0YfA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c5:bb:17:6e:a7:e4:81:04:8f:da:b9:1a:16:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=936169228268446f686a3184db1be9fc0925d7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:57:23:68:52:2e:a3:fa:1b:7a:6f:16:53:68:
bd:12:59:4d:51:63:d5:e3:2f:79:4f:2c:00:df:a2:
ae:11:b7:89:af:cf:ab:d9:c8:24:45:f5:5f:aa:5a:
ff:d9:9f:7d:78:1b:ad:3f:91:c6:b9:63:1f:16:c8:
b3:82:bb:63:bd:f1:40:60:de:9d:45:5f:83:67:70:
5f:df:2f:30:5b:3c:04:64:2c:3d:01:dc:d2:de:b7:
aa:7f:c6:49:17:52:f8:67:bf:a9:ea:59:92:fa:5e:
83:af:46:69:cc:fd:fd:d1:2f:82:4d:de:ac:44:d0:
f3:2d:fd:7c:9c:8a:3c:90:5c:cf:44:2e:9c:12:c6:
1a:29:61:3f:ea:bc:1c:15:d0:ed:3a:a2:74:d8:af:
ef:c3:e8:2a:6b:b4:e4:3f:c3:2b:e8:c8:fb:ba:c1:
2d:60:b9:0a:b6:3c:6e:2d:ae:9e:8a:50:2b:be:76:
58:20:c5:7c:b1:e3:2a:72:2e:c0:33:08:00:9f:24:
2b:12:82:2f:6b:39:45:02:55:ef:51:ec:97:3e:07:
8c:5b:1f:16:41:a8:d7:f6:31:55:95:b2:35:31:85:
e5:fa:e6:b9:a7:4c:81:75:46:5b:75:01:ab:8d:34:
6d:17:68:d9:92:4e:8c:cd:1e:0e:28:4f:04:da:f8:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:61:69:22:82:68:44:6F:68:6A:31:84:DB:1B:E9:FC:09:25:D7:AD
X509v3 Authority Key Identifier:
keyid:3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1f:83:40:8a:dd:d3:e4:af:ca:bd:15:da:28:b2:dd:10:7e:
74:14:1a:28:cc:d4:15:56:af:9c:5a:88:19:da:47:ae:4d:f4:
4d:b0:98:95:ba:7b:8b:57:dc:c1:e7:d1:b0:d4:9f:34:88:e4:
20:4d:d4:ed:6c:92:93:61:bd:22:ca:f6:a3:e9:10:ed:10:39:
3e:5d:e7:ee:71:9c:90:6c:71:0b:75:9a:e2:43:af:fd:f2:80:
5f:74:93:25:6d:eb:71:a7:f4:99:00:c0:a6:e1:f8:e2:43:ba:
3f:82:1c:82:ec:66:b1:32:30:f6:83:e5:7e:29:c5:db:bc:83:
b4:37:39:ae:f0:76:d6:b9:43:60:5a:1e:a1:45:1d:eb:72:3e:
ac:4d:de:0e:bd:14:49:42:d1:50:03:7c:81:6d:d6:1c:a6:87:
16:53:fd:38:27:ba:1d:2e:eb:0e:3d:d8:8f:ba:01:e9:48:26:
f9:75:05:c5:8f:bc:78:8d:cf:8b:d3:60:5f:16:7c:09:2a:ba:
32:84:a7:4b:7f:ed:5c:7b:a2:07:9e:a0:2c:dd:d4:f8:c9:bf:
fd:da:cb:6b:41:e7:97:44:d3:39:8e:ab:2b:97:54:4c:91:c0:
42:55:77:49:29:0e:09:a2:93:39:44:cb:97:c5:89:53:bb:0b:
23:13:b4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:39 2025 by rpki-client