
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
File: PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json)
Hash identifier: sXCTn/oPBlUxuSzdpmoQMVVcYRB+jRZB/1h4gSaeEDo=
Subject key identifier: B4:D6:2D:58:A8:1C:68:A8:C3:53:17:A0:36:61:EB:78:51:81:B8:B4
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial: 0194BCE08B88A78DB0CF729D62C77C54E4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
Manifest number: 0F93
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: 1-dSijOlomtrsqkND-2jGvkzEh1s.roa (hash: vAMtZ2jKMP2IiV0cN+Yk3wrsh8M5v/wTw365APu16Sc=)
2: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: MwwDrpahizzTwlk9KbP61YgsYVJ2nc1yCNC13s0Rz4I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8b:88:a7:8d:b0:cf:72:9d:62:c7:7c:54:e4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=b4d62d58a81c68a8c35317a03661eb785181b8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:64:f5:a0:ee:52:fa:46:c2:4b:3f:5b:9c:
6a:e7:b1:5b:c6:87:d5:7d:33:23:7d:04:10:6b:19:
47:af:94:e5:6b:f8:a4:ad:9f:83:76:db:3e:da:86:
f1:5e:74:f6:2d:ba:66:2a:13:ba:cd:a2:03:c9:3a:
51:80:2b:d9:f8:5d:f2:4f:03:59:e1:60:33:9b:71:
bf:37:04:a9:51:b1:b8:51:01:7e:3e:06:00:01:c9:
fd:67:0d:bd:68:28:f6:0c:38:ab:12:71:76:2f:f7:
f8:aa:b5:c5:ce:5e:e7:1d:c3:33:3e:a8:0b:84:36:
a7:20:45:55:06:8d:a6:50:6f:e9:a2:f3:e3:d7:54:
97:66:08:d9:d9:8f:c4:33:07:93:a5:eb:b0:91:c4:
44:9e:a7:a8:02:8c:4f:57:e5:a6:c5:3a:60:5d:94:
11:2c:fe:b8:25:34:6b:e3:22:eb:ee:e7:13:e9:ff:
76:11:99:a7:14:b2:07:59:06:6f:56:af:78:e6:70:
0d:f3:d5:b5:26:29:fa:77:04:4f:30:d0:3b:94:41:
03:5a:cf:3e:0f:ec:55:dd:50:f1:5d:17:89:93:d3:
cd:49:4d:41:8a:8d:c0:50:04:9b:65:fe:0b:c6:12:
9a:02:80:93:7c:52:97:bc:c8:91:f4:b2:7c:d9:fb:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D6:2D:58:A8:1C:68:A8:C3:53:17:A0:36:61:EB:78:51:81:B8:B4
X509v3 Authority Key Identifier:
keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:33:a5:de:2e:8e:72:42:ce:b6:2b:ab:54:1b:1c:17:ce:8d:
d2:64:27:fa:67:7b:3f:77:b5:0d:78:7a:14:d8:57:9d:29:b0:
14:61:36:a9:81:36:f8:68:79:40:3b:fb:ba:85:f3:85:c3:bc:
3c:93:a4:c6:9c:c6:15:d1:19:e7:83:0e:ff:d4:2c:f1:95:24:
9d:89:b2:64:34:e8:3a:47:2e:cd:42:62:26:95:96:86:f0:e1:
17:88:d6:f0:40:04:2d:63:d4:03:f3:ab:79:06:84:b5:16:c9:
7a:7d:50:bc:6f:e1:10:cb:84:0d:8f:d2:f3:7e:da:4b:10:8b:
c5:ea:24:f9:00:a8:19:94:30:e0:ba:d6:70:ce:6b:1d:a1:aa:
ec:61:c1:6b:af:fb:18:82:6e:6d:71:3f:55:0c:77:27:7b:c6:
c0:00:a9:66:1b:8a:9d:ff:ed:d3:15:fb:7c:5d:1e:06:a4:58:
ff:2f:b2:f8:dc:c2:25:c7:91:4b:27:c3:8f:de:4e:2e:86:e3:
0d:6a:83:71:5b:65:52:47:50:5f:a9:3c:54:30:6e:0c:3e:b7:
88:88:6e:40:ff:8d:8e:f1:e7:71:9d:e7:79:db:56:c4:e9:57:
7f:ef:37:61:06:32:90:ed:ab:89:0d:da:a7:71:49:c6:83:0b:
32:1e:da:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:38:16 2025 by rpki-client