Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: Pl815jh7IYkO/rknE2TU+oVmigu0R8kldBAzDHp8ZAE=
Subject key identifier: 9F:57:C5:7A:E6:09:DE:B4:60:C4:D3:95:0B:10:C0:E0:38:6B:26:7C
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 0194BD1766EE9598F7C80508D933089779A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 0BB9
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: 0B+COK+88az02uNvEI1fsWv6gxyw00HQFTXXS/QqTDY=)
2: qSKiJOg3xCxclMNg-Fd_1qbi_3I.roa (hash: /vBH3d6n8qi+I8tEAft/7KOt6213rHrV93iMeTKUeww=)
3: xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa (hash: gElK1Fi5SJc9J5gtHChbTahr7ydhdEBTnlWVGE/WfP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:66:ee:95:98:f7:c8:05:08:d9:33:08:97:79:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=9f57c57ae609deb460c4d3950b10c0e0386b267c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c1:f2:08:d7:a7:8a:20:a1:e3:bc:ce:55:b4:
68:ee:b2:1f:bf:05:4a:6d:6f:e6:fa:66:3e:29:51:
ce:9b:0a:46:16:e7:87:90:33:c6:68:d3:77:f4:29:
72:f2:af:aa:6d:00:2e:6c:03:3a:cb:fe:98:6c:84:
aa:1f:7e:3a:07:85:ed:49:51:68:c5:5b:44:d6:dc:
aa:d7:db:75:65:d3:7b:ca:18:70:1e:6a:3c:8b:d0:
2a:94:c8:8b:83:39:d8:fa:91:ed:a5:07:fc:27:1e:
7f:27:63:76:5d:17:fa:9f:d1:94:7e:2a:18:e5:9c:
e8:8e:43:43:4a:cc:0f:e1:6a:4e:97:e4:d2:31:1c:
61:f6:93:5b:b9:d1:74:39:04:8c:b9:36:d5:db:a0:
bf:8d:9a:18:0d:53:1f:14:9a:cb:5e:40:8f:5c:00:
7d:f2:a8:f6:e0:55:60:10:08:29:6c:02:3f:23:d6:
0d:07:a0:d3:3b:fd:83:07:00:17:0e:2d:03:a6:e6:
dd:8e:bf:b6:0d:82:e1:e2:bb:d8:92:8a:86:aa:3c:
bd:9a:da:2b:f9:20:69:ed:90:f0:25:5b:49:9e:5b:
41:e5:7a:d2:fb:97:d0:e9:56:9a:84:3c:3c:a5:d7:
d5:56:65:95:d4:1a:fa:a3:76:ed:8d:de:b0:84:81:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:57:C5:7A:E6:09:DE:B4:60:C4:D3:95:0B:10:C0:E0:38:6B:26:7C
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6c:c5:e5:75:f7:81:df:62:b9:f2:68:2c:7f:ff:d0:66:86:
7b:d6:f5:fc:ff:8b:f9:d5:79:74:7c:90:54:02:0b:62:d3:64:
0a:9f:35:b9:6e:d0:7e:b3:9f:ed:31:3e:57:bd:60:ef:bc:84:
ae:fc:a9:6f:07:4c:a4:ca:12:3d:45:d0:d3:b3:bf:d0:24:ed:
1e:ae:ec:fb:ba:9e:e9:78:45:d4:1e:41:ca:82:ed:aa:9e:03:
e9:9f:36:88:e0:77:b0:3f:cb:15:0d:6d:f9:28:98:8f:33:72:
01:a4:a8:4b:70:63:9b:8e:c0:83:7d:f6:f3:a3:af:f3:0c:85:
54:4a:24:7f:66:6f:ab:23:48:8b:f6:3d:eb:f2:5d:21:a3:b0:
72:45:0a:5c:f6:81:54:d0:59:18:dc:71:6a:15:93:04:1b:f1:
d9:dc:5d:41:b0:05:e3:d4:42:b1:d4:11:dd:fc:19:50:97:90:
b3:b4:22:8b:a9:47:8e:fb:42:e9:0b:30:a1:01:de:98:2b:f0:
79:9c:ee:dd:0e:d5:fa:a2:97:bc:27:fc:c0:f3:eb:d6:71:89:
14:fb:21:16:0d:18:b1:d9:f5:d5:87:6a:bb:96:75:fe:a2:8e:
3c:7c:dd:2a:07:08:38:12:13:9b:d0:80:62:45:c8:88:8a:7e:
24:d6:7a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:37 2025 by rpki-client