Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/9e7a3a-d528-4d3f-bf3b-ff27a1a2c528/1/PCNbIQRw4dd-tk4ZHA9w9yaPQIU.mft
File: PCNbIQRw4dd-tk4ZHA9w9yaPQIU.mft (raw, json)
Hash identifier: mhCHU8U2gcOJxZlGDNOilZZvHh8EeEDeIWCzKscpVDM=
Subject key identifier: 6F:7D:EE:02:08:D0:3B:60:61:E1:33:35:AA:EB:76:5B:11:6D:4E:3C
Authority key identifier: 3C:23:5B:21:04:70:E1:D7:7E:B6:4E:19:1C:0F:70:F7:26:8F:40:85
Certificate issuer: /CN=3c235b210470e1d77eb64e191c0f70f7268f4085
Certificate serial: 018C5BF813248BEE26EE001C36FD6FF1331B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCNbIQRw4dd-tk4ZHA9w9yaPQIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/9e7a3a-d528-4d3f-bf3b-ff27a1a2c528/1/PCNbIQRw4dd-tk4ZHA9w9yaPQIU.mft
Manifest number: 0FD5
Signing time: Tue 12 Dec 2023 03:00:33 +0000
Manifest this update: Tue 12 Dec 2023 03:00:33 +0000
Manifest next update: Wed 13 Dec 2023 03:00:33 +0000
Files and hashes: 1: OqJCcwfsmVaW00dHaCfSuSknkt0.roa (hash: NUcqQdcwRW/ZazAjwW0HZ3cyKod6y1nV2sCTJhwiCfY=)
2: PCNbIQRw4dd-tk4ZHA9w9yaPQIU.crl (hash: 2H01Q2VlnAwXT29h+Oa/yV5FRghsjQlAL2Kog3z6eHU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5b:f8:13:24:8b:ee:26:ee:00:1c:36:fd:6f:f1:33:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c235b210470e1d77eb64e191c0f70f7268f4085
Validity
Not Before: Dec 12 03:00:33 2023 GMT
Not After : Dec 13 03:00:33 2023 GMT
Subject: CN=6f7dee0208d03b6061e13335aaeb765b116d4e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4c:0a:c8:2c:49:bb:80:c2:01:4a:f8:99:0c:
2f:f5:f5:18:d1:7a:fc:a1:c8:99:c5:57:30:f5:8f:
58:f7:1b:0e:18:2e:70:c4:d0:58:af:fd:fc:96:6a:
9c:4a:a5:0f:16:8b:93:e2:31:dc:48:d8:f6:6f:9b:
52:08:d3:4e:09:93:b3:81:c0:ce:c7:bd:9d:88:41:
d9:0f:2e:54:45:75:66:52:2e:71:e9:6f:ed:37:27:
12:eb:6b:dd:25:42:de:5a:43:97:4b:dc:74:24:f2:
2d:43:bc:73:e5:af:10:36:54:42:0e:fc:0c:da:2d:
63:92:29:c2:9e:80:44:54:f0:ff:5d:a9:4e:ad:07:
ef:9b:10:34:19:1d:01:91:d7:64:8a:3f:a7:f0:45:
08:f6:7e:ab:cf:a7:d8:f4:6c:c1:28:0f:97:b7:1c:
57:1a:b5:18:c0:d9:59:e6:8d:e6:e1:cd:8a:16:92:
c6:5a:e5:89:c0:a9:ce:bc:84:6c:81:92:b5:c7:aa:
0e:82:f3:38:3f:d1:1b:9e:e8:46:ce:3e:ec:9a:4c:
7b:0f:49:d5:c8:75:90:57:84:fa:a2:e5:d2:13:1a:
da:d5:5e:4b:8c:52:35:c7:40:d0:84:0e:f0:76:ba:
7d:c9:94:7f:1a:c6:15:e5:dc:1d:0c:3a:e3:ae:89:
0d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7D:EE:02:08:D0:3B:60:61:E1:33:35:AA:EB:76:5B:11:6D:4E:3C
X509v3 Authority Key Identifier:
keyid:3C:23:5B:21:04:70:E1:D7:7E:B6:4E:19:1C:0F:70:F7:26:8F:40:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCNbIQRw4dd-tk4ZHA9w9yaPQIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9e7a3a-d528-4d3f-bf3b-ff27a1a2c528/1/PCNbIQRw4dd-tk4ZHA9w9yaPQIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9e7a3a-d528-4d3f-bf3b-ff27a1a2c528/1/PCNbIQRw4dd-tk4ZHA9w9yaPQIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:04:d5:8d:fc:6f:7f:b2:89:12:85:92:e3:4c:95:ec:2c:ee:
30:07:5d:a4:ae:8a:7d:d2:c8:02:65:28:86:f5:07:84:2d:8e:
39:5c:8f:88:98:78:8d:67:7f:55:6b:08:37:e5:2f:d7:a7:1e:
99:ea:8e:16:46:e8:2e:5a:9b:21:77:f7:df:7f:93:0f:ba:da:
0a:b6:a0:75:ff:3f:49:f5:ac:58:34:33:8d:88:7e:b8:75:c2:
eb:13:2a:fe:d4:97:13:45:7c:34:a3:02:73:bc:be:39:d3:75:
96:b4:dc:fb:80:05:e4:ff:3a:a8:66:be:10:73:4e:58:bd:fb:
05:14:e6:a1:7f:ba:02:38:03:71:1f:1e:63:7e:23:e7:cb:b9:
1c:5d:e3:73:db:a0:f9:9a:73:ed:1b:6e:26:82:c2:fe:4b:5d:
ab:52:2a:c8:08:d7:85:3d:88:89:d5:d6:9d:d5:a3:68:a0:7a:
5c:00:bc:83:28:19:80:5b:a0:51:92:c5:1c:84:0f:80:f3:5e:
1e:08:36:4a:28:76:b1:6a:20:87:3f:58:f7:1d:4d:53:9f:74:
93:6e:6b:3d:ea:02:43:cb:17:55:e4:70:f7:1d:e8:ad:f1:f0:
cf:5b:92:41:3d:c1:21:2a:86:3e:5a:5b:0d:37:6b:5c:66:e4:
99:e6:a9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:55 2024 by rpki-client on console-fra.rpki-client.org