Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
File: PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json)
Hash identifier: G/yTUFsSMf6z5w6/po2wAI57e292p6sfu3ehyU7XDPE=
Subject key identifier: A5:BE:B4:B9:59:68:39:55:86:89:EF:A8:50:6D:0F:09:7C:97:16:62
Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Certificate serial: 0194BBCEFE890A934F2B1ECE2A07431A2F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: NSGmG6GkzV0Sk3pxvAMTzC/SLlAD5JVsU3x69r1FdQo=)
2: kMic-cYu_3jAGaMkqOjyp2h03_Q.roa (hash: q724sfMAPnUFvRmxjRBhUtLlfNKhUfTz/xhqtAFnU88=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fe:89:0a:93:4f:2b:1e:ce:2a:07:43:1a:2f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=a5beb4b9596839558689efa8506d0f097c971662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:24:e0:6b:25:64:0a:fe:40:07:74:36:70:
27:73:26:fc:4b:ba:37:41:f4:7c:56:2f:2a:c3:03:
a4:ed:e7:87:fc:81:ea:ae:e8:1b:8d:80:02:12:8b:
c9:e5:2c:c5:a3:78:99:0d:7d:7f:a5:42:f7:d3:39:
fe:67:29:b8:46:ba:5f:f9:31:0d:9c:6e:cf:de:77:
a0:66:19:ce:4b:97:26:63:38:56:c7:7c:bc:4c:86:
12:d6:94:f1:08:1e:32:af:59:68:94:29:66:04:79:
79:d6:eb:47:17:c3:06:66:fb:d9:90:72:ac:03:35:
65:d3:5d:a4:b4:46:02:b4:77:8f:60:f5:fd:68:6f:
90:b1:e5:f4:59:b0:2b:59:3e:c9:8d:53:a2:35:a8:
e6:ab:d7:b0:a8:c9:35:54:aa:8d:59:23:a9:c0:23:
43:98:3a:0e:aa:5e:b1:ef:57:55:87:07:be:cb:3c:
9d:01:d5:52:12:bc:1a:f8:68:47:6c:ab:f2:6d:5e:
12:b7:16:d2:cc:9b:51:91:43:d7:7e:4d:32:a6:46:
dd:7c:40:ea:fe:c1:ad:71:54:64:17:04:22:ae:21:
06:84:42:df:60:68:94:6c:ea:ae:1e:3e:78:7f:ac:
f3:60:36:75:98:2f:81:84:64:52:70:28:a2:1d:3a:
1f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BE:B4:B9:59:68:39:55:86:89:EF:A8:50:6D:0F:09:7C:97:16:62
X509v3 Authority Key Identifier:
keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:99:e6:4b:83:de:65:9a:90:15:64:50:6c:43:0d:a6:d3:a0:
1b:36:eb:f1:eb:30:61:0f:46:ca:c2:94:a7:23:5f:43:a8:e7:
05:cd:1b:82:95:9f:21:35:62:0f:08:df:8d:dc:1d:89:e8:ee:
d8:f1:3a:d4:72:4a:d6:a2:7f:a5:f2:cb:e2:50:d6:bd:c7:2f:
c4:f1:67:e4:c0:5f:15:d1:e4:f4:f0:c9:a5:bb:b2:d0:8f:62:
bf:81:ee:f8:ea:fd:d5:20:9b:06:3a:32:34:11:26:0f:60:9c:
57:99:b6:6f:41:8a:18:06:ce:02:61:40:bb:ce:dd:62:55:eb:
da:eb:56:92:c8:bf:61:b5:a3:b1:dc:e9:b0:0f:e6:93:c1:d9:
96:a7:8b:e6:5c:98:0b:d0:bf:b2:6e:d7:70:1f:07:34:f0:7d:
ae:75:55:da:39:b6:d5:f3:f5:5e:c1:e0:0a:26:74:d4:3e:fa:
68:45:c0:95:13:3b:ca:24:f8:d3:96:54:b4:6a:5b:fa:67:4a:
0e:cc:c9:25:b3:5b:aa:1b:65:e7:91:ff:e3:75:7c:87:61:52:
e5:98:88:ba:b4:3f:a9:b5:94:26:f9:1c:b7:82:fb:77:8e:57:
25:93:a6:3e:ed:d6:f9:d6:af:84:b8:4b:7a:0c:bb:92:7b:9d:
a1:49:80:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:09:03 2025 by rpki-client