Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: PyAZeyQ8pBUQvqqs4NcPhF2rWUnxu+ekydfpkydRU4g=
Subject key identifier: 2F:2D:A4:95:65:04:96:85:4C:95:3C:B2:9B:BE:E2:47:45:F5:C7:F7
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 0194BCE07A143E330BCA28321A2C7C7BDF13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=)
2: dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa (hash: 907V1dpHSKLMVnsiYxdzmGC4efZZA0x8Cd4YjFYyRYo=)
3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: NzUYCT5yXA9EIhWbPewh5AlcvJWsTWXHv/RD5sXh+8k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7a:14:3e:33:0b:ca:28:32:1a:2c:7c:7b:df:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=2f2da495650496854c953cb29bbee24745f5c7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:f2:03:51:27:1c:15:4e:82:07:7f:30:c3:
88:b4:ec:1d:30:a0:a1:c8:84:bc:b3:3a:05:b4:b1:
c4:e3:86:d6:7a:70:c1:c0:ca:1d:92:4a:7a:22:c1:
92:7e:5b:20:b7:1b:50:cf:15:38:7e:c6:c4:2f:05:
95:25:1e:25:ac:b2:2f:c1:44:d4:14:78:a6:97:cd:
2d:48:32:2d:fe:9b:47:0d:9b:be:46:85:6d:47:f0:
f4:82:26:ee:1d:02:65:48:b2:25:83:1a:54:09:ee:
86:bc:92:5d:3e:86:eb:74:96:eb:92:7b:6c:12:06:
9e:8f:07:32:7f:6b:cb:18:55:dc:ba:4e:69:ee:3f:
a1:ae:3c:4e:31:fb:e3:75:32:a5:4f:19:43:36:e9:
55:d9:ff:ae:6c:6c:b7:37:a4:1b:95:59:c3:55:0f:
9e:2a:f6:24:5b:56:b2:d4:f0:63:cc:6e:f3:72:80:
44:05:28:03:49:eb:95:34:0d:6d:fe:a8:cc:5d:82:
0a:93:4c:b9:7a:31:21:66:51:18:8c:21:fa:83:fc:
55:93:ff:a2:1a:7a:2c:e0:3b:cd:65:db:b0:a0:c2:
38:76:ca:cf:8e:98:6e:fd:1e:22:ef:b8:68:19:fb:
25:7e:39:2b:81:95:97:bc:69:42:3c:7c:bb:93:ce:
0b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2D:A4:95:65:04:96:85:4C:95:3C:B2:9B:BE:E2:47:45:F5:C7:F7
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:90:38:ce:03:7d:46:e6:d2:34:ba:4c:7a:9a:16:1d:f8:35:
bf:f2:d9:d6:b0:59:fe:ed:db:97:21:8d:0c:26:1b:2f:a1:c1:
8d:65:37:64:03:72:4c:67:65:ec:67:29:21:53:9b:5c:90:89:
c6:5c:58:32:3d:89:25:14:81:bd:69:13:14:03:c5:09:83:6b:
9c:99:ae:7e:62:2d:06:c8:a9:42:b5:94:d0:a1:21:90:83:37:
95:d4:aa:f8:01:4a:da:8d:ce:06:72:bf:80:c7:20:3b:f2:f7:
0c:58:04:fc:b9:09:80:23:20:bd:d7:f3:7a:60:54:f6:30:1e:
11:d0:b4:67:dc:87:91:10:07:48:81:ae:ea:47:d8:db:39:dd:
5d:a4:58:d6:dd:f6:9b:99:40:52:21:80:b7:32:7e:34:e6:a8:
56:78:ae:c2:ba:d6:52:a3:e2:bc:cd:79:9f:4a:6f:bf:57:2e:
30:50:20:59:bb:e6:ed:d2:86:88:f9:39:f3:a1:a4:70:25:b1:
65:59:f1:5a:0d:d0:b1:56:5a:12:99:fb:50:d5:90:04:41:9a:
83:63:bd:cf:3e:89:a2:0a:4f:06:01:c2:85:a5:c6:c7:81:12:
30:cd:1a:a6:20:e7:89:6f:d4:14:e9:be:81:44:16:91:a5:ba:
fe:db:f8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:17 2025 by rpki-client