Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
File: PcOGJxwOCo0B-xkNaNhf92TRatQ.mft (raw, json)
Hash identifier: 7s3Rv+MHpiKq7zAYtTHp8NIsKqNqOPefkX2Gej6Z05M=
Subject key identifier: 82:72:2A:1A:76:6E:E2:25:6F:33:E9:F4:55:7F:6B:BC:2E:E5:80:40
Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Certificate serial: 0194BCE0771AF38C4EA090DA359250DFB5A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
Manifest number: 0207
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: PcOGJxwOCo0B-xkNaNhf92TRatQ.crl (hash: +4vGjfhzYqRdQRTXhPpBYhSmSiufcvzsdTUhsmkqhjU=)
2: dA9mnK7u8SrMJvStuVXROxjQcrs.roa (hash: JKT3V8fX4yHMnqh46H6Ra4xfMdM8EBf4akbaDFvA95s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:77:1a:f3:8c:4e:a0:90:da:35:92:50:df:b5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=82722a1a766ee2256f33e9f4557f6bbc2ee58040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:c8:8d:c8:05:c9:06:ef:86:18:82:aa:40:
3b:59:5a:89:4b:98:e6:d1:5a:ee:20:ef:ac:ea:a3:
07:8c:96:f2:ca:ae:09:e5:f6:94:4a:f2:3f:9c:b7:
61:eb:61:8b:8d:9a:47:df:10:d1:f0:3e:ab:c3:ab:
6e:1e:3c:7e:9a:f5:f5:9f:c8:7c:f0:41:31:8f:9f:
93:dd:48:4c:00:3a:8d:6b:51:52:5e:5f:cf:86:34:
6c:14:83:8e:8a:c4:e4:fe:70:3e:bc:d2:b1:5b:e6:
7d:9b:52:48:6f:36:18:5c:37:82:b5:2f:aa:3f:d9:
46:35:3f:ec:80:9b:c3:11:2e:f0:de:72:4a:3a:ab:
06:d3:c1:39:b0:5c:92:e7:56:5f:65:65:4d:02:9d:
45:bc:ba:87:0d:c0:75:9d:9f:43:fe:34:62:20:e9:
98:02:06:93:0d:9e:3f:31:d9:dc:63:3f:70:b9:89:
ea:c8:51:a3:c1:00:26:7e:ab:0d:45:6b:ba:2d:cf:
76:81:b3:ac:86:8e:0b:66:e9:4d:4e:d9:6f:ef:af:
30:c3:0b:dd:c1:ca:b0:8e:d5:1f:e7:28:ad:3f:49:
a5:ce:43:56:c7:ba:78:ae:6a:ff:2d:3b:85:ba:10:
4c:45:2d:4d:73:db:65:72:02:d4:b6:21:6b:b5:74:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:72:2A:1A:76:6E:E2:25:6F:33:E9:F4:55:7F:6B:BC:2E:E5:80:40
X509v3 Authority Key Identifier:
keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ea:9c:a5:2f:30:1a:73:8e:8d:6f:c1:67:0d:42:45:68:bf:
76:39:42:b4:9f:d0:6b:72:f6:24:2e:86:ce:95:8b:e5:f5:e7:
bd:91:9b:4d:73:1a:2d:eb:61:3d:df:1d:9f:25:cf:dd:a7:25:
22:32:ad:b3:2d:5a:f7:22:13:60:f0:44:04:73:c9:24:9e:14:
c0:d1:68:8c:7c:0d:a1:67:bb:76:1d:d8:92:5f:a9:b6:c5:b3:
3d:f1:29:77:74:44:58:e9:41:5c:1e:a0:61:c0:a2:7b:8e:d4:
36:86:11:9e:02:24:92:96:5c:e6:b2:ec:4c:3e:54:94:e0:c8:
8a:94:e7:79:24:ad:7d:fd:20:59:2d:eb:d4:d7:50:5a:c7:ce:
df:84:b0:b5:64:15:c4:48:4c:7b:1a:de:ea:50:f7:32:c6:93:
a3:a8:8a:e1:79:0b:25:9f:48:da:04:c8:46:ba:9a:90:19:0d:
7a:75:5d:ee:c9:f8:e3:c2:fa:55:d6:9d:6a:46:ed:ab:59:28:
26:81:f9:02:34:3c:10:64:fb:01:62:fa:44:79:bf:7c:72:a6:
5a:0a:73:c4:c2:c9:e3:aa:e3:c3:9f:23:2b:43:68:9c:27:29:
e9:3a:bb:17:dc:ca:1b:6a:67:37:b9:71:c5:52:71:9d:a6:82:
62:e8:13:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:41 2025 by rpki-client