Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
File: PCr6XHBtPrCpLaibXUG5NutJzLg.mft (raw, json)
Hash identifier: 2oi+nf8OFlJfhEtrKFaLDae4qK+QdkmGqxiqwqR3sb8=
Subject key identifier: FC:57:DE:02:01:FD:58:A5:C1:A9:40:08:7F:66:C5:A4:76:5B:C7:3D
Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
Certificate issuer: /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Certificate serial: 0194BC3C82B7125BF95BAFF134AF62022456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
Manifest number: 0EE2
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: PCr6XHBtPrCpLaibXUG5NutJzLg.crl (hash: gHp+y29AgoH6p5Ank8nkiAOVk113KDuyCPJ3cZLVuO8=)
2: gS9qTUkzusPVnwIVsvZEcIJfkGw.roa (hash: vAfS5SaRlx1aspB2qU2R3kxZGRQKFuwGAmKIB/uyw98=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:82:b7:12:5b:f9:5b:af:f1:34:af:62:02:24:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=fc57de0201fd58a5c1a940087f66c5a4765bc73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:cf:dd:f6:00:f8:4d:19:ad:25:36:94:22:
52:7a:72:96:bd:5e:1d:d1:b0:f8:4c:49:34:17:1f:
0a:b4:54:d3:e8:f9:c9:6e:80:59:bc:cb:0f:a8:ed:
3b:32:e0:5b:d5:87:da:ee:04:a6:89:16:1a:cd:7d:
b0:59:d4:42:d0:2a:67:9e:a8:a6:ec:6b:36:d3:c7:
32:67:f7:ae:88:e6:16:27:10:0d:23:e4:71:e9:36:
c4:76:d7:a0:3e:59:ba:9d:d0:85:48:8a:53:96:b4:
d5:df:31:ce:a2:92:78:be:4b:8c:aa:d2:37:b6:64:
6e:f7:13:8a:67:19:2c:52:cc:c6:aa:85:74:14:ec:
12:88:df:cd:78:91:e0:89:1a:53:20:ce:a5:b8:7c:
cc:b7:ef:7f:4b:6d:22:42:57:58:d3:31:16:74:9b:
ce:12:cc:27:41:d3:36:41:80:88:ff:82:bb:e3:47:
70:2d:51:61:25:c7:4f:c5:1b:e1:e8:74:81:37:ba:
08:4a:39:5c:a9:e8:c6:70:69:00:d9:00:fb:45:e4:
cd:b3:f6:1e:9a:fe:52:71:2f:8b:a0:b5:ef:e3:fe:
37:de:20:a2:b0:e6:20:58:11:d1:59:57:9b:55:fe:
dc:5a:73:ea:52:fe:ea:c3:5c:02:ce:30:bc:a5:c7:
3b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:57:DE:02:01:FD:58:A5:C1:A9:40:08:7F:66:C5:A4:76:5B:C7:3D
X509v3 Authority Key Identifier:
keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:63:86:61:5a:22:5b:4d:c6:93:1e:f9:17:a2:8f:2d:7d:2d:
7a:82:f5:6f:eb:89:b9:b4:b9:44:05:b5:e7:f8:d6:91:8a:c2:
67:09:af:e2:f7:8e:65:08:c1:73:db:d8:36:7e:2c:ce:1e:8d:
c0:21:79:28:2c:83:46:e2:08:33:5c:2a:12:10:ca:0a:db:c0:
ed:0e:99:7c:b9:50:92:16:6d:4f:4f:5f:c2:4f:a7:3f:8f:12:
ee:d5:e2:1d:a5:52:96:1a:99:4f:66:76:44:4a:ff:c3:29:30:
da:9c:26:f0:a3:a9:11:a4:1b:ad:c9:0e:bc:31:23:b4:01:66:
33:ec:fd:bd:4e:b0:10:41:c5:10:5e:57:a5:83:bd:9b:dd:c7:
d9:8d:42:a3:de:4d:43:0a:e3:58:19:e4:d0:1c:25:c6:e5:40:
89:6e:bb:38:33:37:25:8b:bf:ae:a0:47:ac:e5:6d:6e:04:65:
31:8f:e0:32:6c:9a:a4:4e:5a:08:7a:71:dc:b0:4c:9a:9f:2a:
97:4f:31:f8:5f:30:40:4d:50:02:15:72:5b:47:b9:af:05:c9:
9f:77:e1:c5:6d:ce:5f:24:13:2e:7b:7d:51:ca:8e:0a:64:8a:
89:12:89:fd:9b:db:d4:88:8a:33:32:69:54:ac:32:6f:56:cc:
70:ed:42:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:28 2025 by rpki-client