Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
File: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft (raw, json)
Hash identifier: 6rxsVSOJp2vnON0f9CeY8EmW/HoBt2vWtiO7MxDwu+I=
Subject key identifier: 83:A0:32:4F:11:05:F2:C8:41:58:81:7D:62:62:CC:07:9F:56:22:E0
Authority key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
Certificate issuer: /CN=3c02094c2210d8b21715f98df8598b353208d10c
Certificate serial: 0194BCA96F30BFDFAC68436532521D59C2F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
Manifest number: 0EC6
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: CufUT2fMUqvz9LGxO18OZgdQp_g.roa (hash: G2fcMqhZShi/pIW7MbvdKjfohzkmwJAvDqVZX+1pdMQ=)
2: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl (hash: zol/KuLIP4L0NVVgdpc3yJYpcX87UzuOF+c1ikzsN8M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6f:30:bf:df:ac:68:43:65:32:52:1d:59:c2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c02094c2210d8b21715f98df8598b353208d10c
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=83a0324f1105f2c84158817d6262cc079f5622e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:32:38:a5:bf:94:1f:a1:78:19:43:5b:ec:
0a:e8:07:df:b4:86:7f:a4:2e:eb:d9:70:4e:4c:0b:
95:a5:de:7e:2c:b4:ca:51:44:61:28:75:67:6b:1a:
6a:88:ed:63:bb:24:de:c0:54:bb:09:1f:f1:5b:bf:
0b:aa:1c:17:54:61:38:d1:24:48:89:9f:2a:0a:7a:
7a:24:b5:72:0b:03:67:93:28:e1:e5:ad:b5:7d:f8:
c6:3f:6e:f4:b4:25:11:cb:c9:88:77:19:44:f2:9a:
06:42:bf:84:2d:b6:6a:a9:33:16:85:22:2d:1f:87:
6e:c8:6d:70:9a:a9:5b:e3:36:47:10:27:3d:14:e6:
8e:36:2e:78:e7:3b:de:7f:3d:1c:5f:1f:20:7b:7e:
ce:96:4f:f3:20:e6:1f:b9:de:14:ef:a0:d0:14:fd:
3d:9a:12:2c:29:75:d2:5c:6d:0a:44:11:8e:73:a0:
1f:6f:50:71:08:e3:e7:29:f7:d1:74:0f:cb:50:5d:
87:c9:62:18:16:6a:96:b9:53:c4:27:22:98:4f:4c:
2f:0a:7c:88:e4:df:d7:c6:ca:e4:d4:f5:39:49:c8:
89:9b:27:83:5e:ff:d1:d4:9d:0d:03:74:77:c7:32:
ac:56:d6:36:c9:20:1d:62:d2:49:ce:45:df:df:40:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A0:32:4F:11:05:F2:C8:41:58:81:7D:62:62:CC:07:9F:56:22:E0
X509v3 Authority Key Identifier:
keyid:3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:db:55:85:58:c9:d3:35:4a:f8:a2:01:b1:77:8c:e8:c9:29:
d7:8a:c9:c8:9c:73:4c:d6:96:56:0f:a1:ff:4a:71:b4:ec:cb:
6e:62:33:87:54:7f:78:d4:2e:cc:41:3b:32:d4:b4:9b:4e:51:
5d:52:a7:1b:b6:7c:fe:83:1e:ed:da:00:e9:ee:30:e2:91:3e:
19:55:a8:35:75:25:f6:d1:3c:88:13:40:32:2a:6e:54:c6:e7:
00:3a:47:46:2a:78:d5:11:0f:a0:f7:d9:a7:ef:f8:91:1f:f8:
72:de:84:74:26:23:1a:41:67:03:8a:41:9a:fe:ff:ab:e8:8b:
69:df:75:17:56:33:a9:9a:c3:04:75:b3:e5:40:a8:b8:f5:d3:
c8:1e:18:80:c2:1f:07:5d:47:3f:31:9b:9a:f6:d1:4a:85:70:
90:fd:9e:f8:01:cc:85:45:63:81:da:36:b3:fe:4f:68:40:c6:
24:c5:4a:25:c1:eb:57:2e:5b:d5:0d:56:48:fd:61:f3:70:b3:
d6:61:52:5a:d6:4f:9e:68:e4:33:b5:b4:6c:0e:b1:6a:25:2a:
f8:83:98:8b:04:ee:f5:c8:82:bd:5d:49:4e:86:c8:d5:f5:c0:
89:1f:d0:51:bb:bc:38:d0:90:0c:de:28:0e:79:43:f5:f7:2d:
db:1a:36:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:33:01 2025 by rpki-client