Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json)
Hash identifier: y+VWXjS/pNoo0xBa3c2eAzMuI9rQqkGO93Aa0hgYJ+o=
Subject key identifier: 36:C2:EE:D8:03:29:3A:F2:F5:7C:E1:E7:82:95:35:F9:0F:B4:AF:C0
Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Certificate serial: 0194BC72B828A5719070005C7C539930F5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
Manifest number: 02F0
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa (hash: FKLm57miA/xZK8gsx+DBE/lZzuzN5GXUjYHQsCWDe8M=)
2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: OWmR1TmLzr4m9RKTqUK2RdZYSVixL0zDTZjwj7psATg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b8:28:a5:71:90:70:00:5c:7c:53:99:30:f5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=36c2eed803293af2f57ce1e7829535f90fb4afc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4e:98:8f:6c:68:b1:cb:b6:d5:66:be:f0:e1:
ce:23:30:81:3c:a2:10:11:d5:7c:c0:ed:ed:1b:1b:
64:5f:1a:b8:82:22:61:33:da:65:b7:31:93:b4:fc:
b5:83:a2:3d:b3:78:a9:f2:0d:38:b8:33:c4:07:28:
09:40:fa:d4:5a:fd:c4:d4:35:00:c7:83:a7:5a:b3:
6e:6a:e8:e2:b0:65:bb:2b:16:ed:5b:5f:56:84:9f:
6e:7b:cc:1a:28:ae:27:53:fe:28:61:1b:b2:ff:6a:
85:c8:2a:3c:23:8c:6b:67:7a:79:a5:07:38:b1:47:
d0:af:71:80:23:c2:25:d4:64:56:cb:47:e2:70:2e:
0f:3e:7b:2e:8b:c6:71:11:c7:2c:25:00:ea:9b:f4:
6a:22:55:b2:ef:ff:db:44:1a:c6:51:0b:8d:d7:a6:
e8:a4:97:46:21:6e:33:84:96:76:2b:4b:a9:71:bc:
b6:d4:af:dd:f6:94:a8:2b:7e:a7:97:78:a5:74:4a:
90:d3:cb:32:7b:45:93:27:c5:2c:09:4c:5c:c6:70:
a2:cb:4d:1d:7f:c8:d2:a0:40:33:5f:95:52:8c:76:
8d:17:3f:ae:03:c3:e8:e9:dc:15:95:03:0d:80:83:
83:84:f9:0f:d4:15:21:b5:80:3d:5d:53:e7:10:70:
37:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C2:EE:D8:03:29:3A:F2:F5:7C:E1:E7:82:95:35:F9:0F:B4:AF:C0
X509v3 Authority Key Identifier:
keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7f:63:48:d4:e1:53:15:b9:cf:00:93:a1:a3:29:51:49:2a:
4a:15:45:15:dc:31:42:79:05:7c:5e:87:11:70:5e:59:b1:df:
da:81:bd:bf:f3:78:50:10:91:42:6c:17:49:f7:55:3d:62:68:
47:e5:8a:10:73:47:47:6d:af:17:6b:58:f1:7a:ba:22:e2:01:
81:34:8e:da:36:6e:df:b4:12:11:12:a5:9c:5e:3d:df:59:52:
e1:52:21:4f:aa:0d:65:8a:1b:09:64:e7:bb:05:e3:2b:8b:81:
62:2e:e0:93:dd:77:a7:c6:90:c1:ee:32:67:8d:a2:0f:84:b8:
2f:1a:7e:8a:6c:03:df:b6:be:3c:a5:c5:16:f9:37:fd:af:38:
44:8d:99:93:06:c0:5a:bd:a9:67:9a:77:c6:f2:b1:c8:38:18:
e3:63:68:ac:cd:7b:db:d2:af:6a:d1:fb:89:43:fb:9d:d2:9c:
a2:55:ef:35:75:1a:89:15:31:64:19:04:50:90:de:48:bb:b6:
bb:de:ba:5e:a9:da:44:c1:d2:3f:d4:ce:d7:d1:a3:bc:c4:95:
56:d6:5a:33:d0:c0:32:2d:d7:16:e8:61:33:f8:37:1c:cd:a1:
b6:31:51:34:07:86:ee:8d:7d:97:43:f4:e7:46:fe:a4:1f:a2:
8a:d7:fb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:48 2025 by rpki-client