Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: FhHpraJpZ2MUR+suB0YQSGS+NTd7HlgTX1ZiHwdXFEY=
Subject key identifier: 2F:FC:A4:ED:DA:01:36:8F:A4:CF:E9:94:1A:88:21:CD:2F:23:15:3B
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 0195E07D461D6069CA14CC0131382866E98B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 0E5D
Signing time: Sat 29 Mar 2025 06:01:00 +0000
Manifest this update: Sat 29 Mar 2025 06:01:00 +0000
Manifest next update: Sun 30 Mar 2025 06:01:00 +0000
Files and hashes: 1: 9fywOGNsk6OIfuzuy-reOW9V4kc.roa (hash: b/vhaQiKQhhebnkpqZc4spciDDH3KeMp+AUrKHHSWv4=)
2: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: HlLAYo0OYARUvSVCbzeZS4goqr6C11bmICRA2Wnhk94=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:46:1d:60:69:ca:14:cc:01:31:38:28:66:e9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Mar 29 06:01:00 2025 GMT
Not After : Mar 30 06:01:00 2025 GMT
Subject: CN=2ffca4edda01368fa4cfe9941a8821cd2f23153b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:88:31:82:fc:04:64:f0:de:85:c6:50:9c:
16:c6:c0:1a:fd:fe:dc:21:12:e4:65:25:40:fe:a7:
d5:37:ea:26:95:ab:9f:ec:56:7d:aa:29:17:fd:8b:
ef:e6:0f:4c:3c:42:c7:77:aa:23:9d:1b:7d:80:be:
19:43:e8:d9:06:d9:2c:bf:7d:78:bb:fc:ae:d7:2d:
ac:9d:6b:58:25:12:1b:38:e8:18:91:ee:7b:94:8d:
95:78:21:ae:8a:12:ae:df:96:c3:ef:a3:f2:7f:b3:
98:1d:6c:bb:db:54:45:7b:13:81:2c:8f:04:00:0d:
af:a9:74:db:ad:7d:33:a9:49:ce:45:1f:b4:84:cb:
d4:2f:23:77:bb:a4:f9:4c:27:6a:03:d0:0b:43:ce:
fe:12:c4:2e:53:6c:22:75:1c:39:9d:9b:d0:0b:bb:
c1:f9:4c:94:5c:fe:f9:dc:36:16:b4:d8:24:74:2d:
f7:fe:d7:3a:99:bb:4d:e8:26:f8:f4:1d:b8:e4:48:
69:9d:f4:16:6b:c5:7a:79:e3:a5:79:68:b9:10:cb:
c1:70:81:8f:ac:fa:95:11:ba:1f:57:8a:f9:ba:26:
98:99:d6:9d:82:cc:3e:ba:4e:ee:3b:d5:e6:31:d1:
5f:47:78:ce:89:99:b9:42:19:4f:05:25:7a:47:69:
94:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FC:A4:ED:DA:01:36:8F:A4:CF:E9:94:1A:88:21:CD:2F:23:15:3B
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:36:bf:20:80:f7:9f:94:e1:1a:79:16:b3:9b:6a:37:8d:3a:
8b:a4:e7:7d:c4:21:12:ed:2e:e9:43:71:cc:e2:a7:2d:a9:1c:
45:ae:f6:81:c9:82:d5:f9:9d:23:a4:3f:d7:2c:ab:e2:7a:fb:
6c:e5:37:f1:2a:ae:12:03:38:51:4a:61:01:68:14:43:3c:f5:
da:72:67:55:f9:c0:44:2d:23:2d:a1:b5:cb:57:0f:86:65:b5:
67:81:12:0f:db:b4:09:13:af:f4:df:d9:e3:95:cf:73:0e:96:
e3:67:2d:e5:ae:0f:12:0a:2a:0c:53:22:16:23:4e:85:24:b2:
84:bb:f5:d8:22:94:32:9f:55:49:71:d6:82:75:58:50:a7:fe:
e3:df:ef:b9:b0:aa:0f:7a:83:ac:f1:5f:f4:32:33:c3:1c:ed:
ea:1f:36:2a:04:f6:7b:e2:90:55:d5:46:1b:77:79:9e:50:91:
2f:4b:8f:eb:d3:c0:f5:8a:81:a5:b8:d6:8d:6f:d7:a7:f3:23:
49:b3:33:30:e8:2a:e8:04:68:8a:0a:7b:58:e3:ec:3b:ed:41:
68:24:8b:f7:f5:e4:cb:b7:20:10:cc:3b:e5:7d:6b:a1:7e:8f:
46:47:a5:ec:82:6e:9e:ee:e6:40:fd:d5:b4:0a:ee:81:dc:f7:
cf:2d:4f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:47:56 2025 by rpki-client