Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier: ujBO3lf+TWVZD28WQs+OnzSMN7/tboC5djgR6D+C87A=
Subject key identifier: C1:D3:3B:9F:86:00:8C:98:CF:E6:41:98:BD:6D:A8:F3:04:F7:72:0E
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 0194BC3C09FEA0A9DF650574B3A1C7F1F449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number: 05E0
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: KgqsoEWOOKYS72p82LHTqMFDZ6sHkgkFQ/XlsWe6Ssk=)
2: WrzesfgAIkReChvkvHbeme9Obyo.roa (hash: sSRQkO+9/oNieGkByWGhrbGGDkaRr1cGKseQKtOM7es=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:09:fe:a0:a9:df:65:05:74:b3:a1:c7:f1:f4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=c1d33b9f86008c98cfe64198bd6da8f304f7720e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a9:91:32:ff:20:2f:a5:c2:24:05:dd:be:9e:
bd:b6:11:66:78:44:b4:9c:a5:cb:77:8a:a6:2c:b3:
ce:86:bb:4b:2a:82:19:8b:23:74:c4:21:69:b2:49:
58:d9:f5:ff:ca:8a:8a:89:20:56:32:9f:29:3d:0b:
b8:93:76:80:76:3f:52:05:68:89:94:02:13:57:96:
1f:75:b6:73:1c:9b:b8:a2:76:31:c5:3a:5f:21:3c:
48:e4:68:ae:1a:c8:19:f6:e0:5f:2c:83:06:32:50:
c9:e0:a6:2a:90:66:90:73:c3:d7:13:0f:ed:67:aa:
d0:8f:2d:4e:de:50:f5:8b:86:4e:ad:f0:80:ff:07:
c0:7a:71:67:ad:02:1b:c7:20:40:9e:f8:dc:71:f3:
44:db:70:a4:5c:4c:23:7c:3c:a8:6f:02:ab:b4:59:
e5:df:d8:ad:f9:0f:64:ec:eb:e1:de:b8:a5:c9:ff:
9d:c1:ff:10:ea:b6:fc:d2:9e:07:db:fb:ad:d9:80:
75:94:a3:5e:08:48:f9:d0:08:34:ed:3c:e5:6e:0c:
c6:4c:63:4e:52:9c:89:b0:5b:87:d3:2d:a6:69:9e:
3c:cb:c0:41:e4:d1:c7:02:68:df:5b:9f:8a:d1:54:
b4:67:0a:dd:dd:1d:4b:53:da:ed:73:1e:b9:7a:d5:
b9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D3:3B:9F:86:00:8C:98:CF:E6:41:98:BD:6D:A8:F3:04:F7:72:0E
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7b:43:3c:6f:3a:70:22:5b:12:3b:26:c9:e2:9c:ed:8c:0a:
15:57:35:15:2c:6e:ce:86:04:92:e1:ac:21:37:f8:3e:5f:72:
ff:0a:a6:00:e0:23:c4:0e:d5:8b:eb:b7:ea:17:e9:05:e3:b7:
b0:e8:be:a4:bf:e4:b0:e0:74:2d:96:22:22:e2:ba:e5:5c:73:
32:b5:cd:45:51:3f:9d:d6:0d:16:b5:e9:a5:c3:5f:44:7c:1d:
37:89:04:8a:c2:1f:58:37:62:8b:e1:ff:93:40:6d:ef:38:f3:
df:84:53:4d:ef:c8:5e:0e:74:75:01:d8:dd:9e:af:eb:4c:c6:
05:5e:1e:8e:57:2b:8c:a1:16:05:0f:e3:f6:7c:83:0b:f1:82:
d5:32:ef:38:7e:aa:6e:a0:6d:52:04:b6:63:9b:64:51:0d:af:
33:b2:8f:cc:a2:cd:94:f2:cc:6a:66:cb:6e:67:10:8c:51:91:
67:3c:b3:8b:04:07:28:9a:f3:a4:3e:51:70:4a:07:97:c4:82:
75:c9:0e:29:30:86:8b:45:88:71:96:d3:91:7a:a8:f8:26:3a:
4a:1e:13:96:d6:d1:0f:c3:8f:91:0d:fe:f9:2e:4d:b6:ca:70:
21:7f:b3:24:d6:49:08:a4:58:1d:d5:c3:be:bf:38:5a:c9:8e:
55:55:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:28 2025 by rpki-client