Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
File: pcUihESYJRJgyNqrvCxeGp6PNf4.mft (raw, json)
Hash identifier: Fvpx+vJIVTXE0Phbfk1PgcE/znSCqRG3g07MFMtnkPA=
Subject key identifier: 64:23:CB:E6:2F:D6:A8:A8:2F:B8:94:E3:0D:7B:5F:31:35:E3:3B:35
Authority key identifier: A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
Certificate issuer: /CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Certificate serial: 0194BCAA053AC89B1A545A64FC333257C7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
Manifest number: 0AE0
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: mjQr1y7CThAMWtspCv07qky-Fa8.roa (hash: 1Julh/eRIdAGf0PUhXIsjYftTFh05ZaBnAtvljFrsQs=)
2: pcUihESYJRJgyNqrvCxeGp6PNf4.crl (hash: Q4qj4dKiJy8JBrBcfztbH4j/9lQSxXpVPcnWWQ2UtjM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:05:3a:c8:9b:1a:54:5a:64:fc:33:32:57:c7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=6423cbe62fd6a8a82fb894e30d7b5f3135e33b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:55:f5:8c:45:54:87:a4:2f:26:9d:a9:ce:
06:af:f0:86:a5:8f:1e:30:d5:a5:32:5c:dd:e3:2f:
ac:88:a2:5d:f0:5d:68:80:cc:b4:6f:72:56:38:5f:
05:3c:12:0a:38:43:f3:66:87:ed:64:80:ca:3a:de:
94:f1:b5:85:87:f5:0c:69:c2:3d:c4:e0:31:b1:90:
2c:3e:61:18:d4:fa:41:a5:c7:c9:ee:31:1a:31:a5:
85:2a:d2:cc:59:95:5e:c6:ab:12:6b:a6:15:23:6a:
78:43:a2:c2:fc:78:a1:4d:41:5a:88:51:5b:6e:a5:
5a:93:17:e3:55:28:15:d2:b6:e6:f9:2b:ce:a7:6c:
25:21:2a:9b:3e:9c:ce:21:0e:73:a0:fa:be:b8:62:
7d:23:e3:8a:7e:4e:43:cf:46:53:21:6c:98:7a:98:
ba:98:14:a9:bf:c1:12:d4:ec:cd:46:a5:23:9e:a2:
a4:00:43:19:1a:90:3f:d9:11:39:db:0f:4f:4a:de:
5a:71:6b:e1:f3:c3:67:51:e7:79:17:1f:1d:50:d2:
ef:59:02:8c:c9:27:25:bd:c8:cd:0f:4d:7d:f6:a1:
0e:bc:41:09:96:a3:92:eb:96:e3:7f:23:b7:1f:ec:
fa:5c:8c:ed:26:62:40:bd:5c:05:31:69:a6:6d:12:
7f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:23:CB:E6:2F:D6:A8:A8:2F:B8:94:E3:0D:7B:5F:31:35:E3:3B:35
X509v3 Authority Key Identifier:
keyid:A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:41:65:f9:d8:4a:d1:45:24:e1:78:96:a0:ce:54:50:2b:a2:
ce:a8:da:d5:2f:16:0b:2d:be:d5:b6:c1:62:08:0a:90:94:17:
32:ca:38:4d:38:b7:ed:bc:6e:05:26:8f:92:82:2f:69:d4:18:
08:15:a1:1e:d7:5b:91:d8:02:9b:fb:98:ba:45:10:e3:85:61:
f7:37:44:d7:26:9f:c3:39:db:05:ea:ba:ca:58:e9:89:5e:72:
5a:4b:73:0d:b3:19:b7:db:2e:0b:58:85:0d:2a:82:d5:9e:0d:
4f:08:1d:fa:94:f0:0b:a6:df:9d:5f:3b:a9:d6:38:bf:92:9e:
65:6a:b3:4e:71:53:4c:6d:6a:bb:37:a4:eb:36:bb:e3:90:dd:
43:7a:17:74:37:8d:8a:8d:ec:59:4f:f4:5f:d6:22:88:3c:67:
f4:e0:23:8c:21:a8:ec:6c:10:2c:62:9c:26:43:95:55:3e:be:
2e:15:e9:6b:57:4f:82:92:93:ff:8b:64:bd:cc:b6:40:bd:29:
f9:dd:5b:6d:1c:1c:40:df:18:80:f3:99:f1:db:ec:8a:2b:90:
5b:9c:28:42:b5:34:98:81:99:89:a7:c1:18:12:38:a7:87:e8:
1c:74:28:63:02:dd:ca:5c:59:ed:34:3d:02:8c:a2:93:79:e5:
3f:42:ff:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:49 2025 by rpki-client