Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
File: pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft (raw, json)
Hash identifier: gY8T1+GwtrAnMKibdXCH/pCYik9z30MW8XT7KQpu22A=
Subject key identifier: 4E:6C:C4:33:8E:F3:DE:D7:26:60:8E:C6:72:44:3A:FB:09:F3:54:5B
Authority key identifier: A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
Certificate issuer: /CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Certificate serial: 0194BC72A7F8EE428C483B44835C54338BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
Manifest number: 137F
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: 0TN8GbA_0te4LvZwiVGOjxWVyyI.roa (hash: r7htGnYfYSEvlu71tGptm+rLAL8pN7TnQ6e7cOorBgk=)
2: pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl (hash: sTLvZ6prGkZtNpmekHoNXYMG/nUGA8VkLeL5DgM5qdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a7:f8:ee:42:8c:48:3b:44:83:5c:54:33:8b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=4e6cc4338ef3ded726608ec672443afb09f3545b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:1a:a2:fd:f7:41:f2:12:d9:07:79:c6:94:
07:93:9e:2e:a2:4a:45:ce:a2:7c:68:57:25:48:2a:
62:62:eb:1d:92:cc:cf:76:a5:7d:3e:dc:b5:0e:1a:
b6:34:07:55:26:12:0a:7e:07:85:88:b7:44:c4:2a:
2c:89:22:6f:ef:f8:ab:16:49:8a:88:aa:fe:36:af:
e1:d0:c1:0a:18:28:85:12:ba:64:b4:4f:2b:0c:91:
95:d1:bc:40:a3:8e:60:52:f0:db:35:d7:63:6e:cd:
81:42:44:12:10:0c:0d:7d:d8:07:3c:58:f1:a9:b6:
88:22:96:c0:13:b3:e1:09:9d:0f:86:c4:53:f1:2f:
24:5b:c0:35:f7:a5:75:d2:2d:90:d1:2b:75:22:1d:
52:eb:db:6e:a7:d4:25:cb:2c:8b:28:3b:6e:b4:4f:
4c:15:f8:01:4d:d3:94:bf:4d:59:62:f4:11:b7:60:
83:b6:bf:b3:bf:f3:5a:4b:f0:af:f6:02:f5:36:a8:
8f:ee:0e:cf:5a:92:95:c5:ba:32:ae:cd:46:28:68:
50:e8:f4:78:39:08:c8:5b:69:96:00:3e:00:65:2a:
01:fc:6c:40:71:8e:0b:5b:aa:ed:d8:0f:1c:f0:dc:
42:96:d9:37:8e:ff:5e:2a:e1:0e:ef:6e:21:2d:43:
b5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6C:C4:33:8E:F3:DE:D7:26:60:8E:C6:72:44:3A:FB:09:F3:54:5B
X509v3 Authority Key Identifier:
keyid:A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:51:5a:ac:4a:ff:36:50:28:2d:6a:41:6f:3c:e2:4f:0f:03:
65:9b:73:e6:19:21:dd:e7:21:19:23:96:29:2d:9a:05:c1:d4:
79:c2:e6:69:13:13:a0:28:0a:44:36:b8:d1:7f:5a:dc:5a:a4:
13:05:6c:1f:58:18:15:bb:01:74:89:f7:0a:8f:7f:1f:b8:a2:
d2:6a:f1:25:6e:0d:d8:43:f5:75:cb:5c:c7:dd:ec:88:8e:e0:
5a:02:91:cb:22:16:98:b3:ea:ed:e6:5b:49:82:ed:1e:c6:70:
13:2e:88:eb:61:44:0f:e0:b6:6a:dc:c9:9f:6b:c4:e4:d1:51:
31:16:c0:72:cd:bf:73:17:c7:d4:3c:26:13:bf:f8:86:69:46:
0b:5d:ee:6f:28:24:23:82:26:d2:ab:c4:8b:92:9e:e2:d7:14:
60:72:a9:28:e9:5b:3d:ab:64:7b:54:16:83:1c:63:f2:0a:12:
9b:6d:d4:87:9f:26:51:ad:46:a3:ab:ac:b6:e2:31:71:47:9c:
39:42:c1:ef:61:39:6c:6d:9b:f6:b4:42:5e:ca:01:03:ff:26:
e7:e6:02:40:79:09:da:2e:78:44:1d:e8:5c:fe:92:82:9c:6b:
09:0a:05:e3:09:bd:51:d7:6e:81:be:24:e2:de:3a:51:bb:af:
9e:46:af:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:34 2025 by rpki-client