Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d1f8e9-d166-41bf-b96d-f17b0fddd0e0/1/pMr8tGEtHWVxkg9OSGBWmBA2piA.mft
File: pMr8tGEtHWVxkg9OSGBWmBA2piA.mft (raw, json)
Hash identifier: HDUC84NbPZNpzmOHtXxi/Or1UHCk325BBdH5/HjfGX8=
Subject key identifier: 17:92:1D:8A:23:0A:53:F0:C0:66:77:1F:1F:98:73:54:C6:FF:ED:43
Authority key identifier: A4:CA:FC:B4:61:2D:1D:65:71:92:0F:4E:48:60:56:98:10:36:A6:20
Certificate issuer: /CN=a4cafcb4612d1d6571920f4e486056981036a620
Certificate serial: 01912BA3776D77D16522BED8B81D071268DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMr8tGEtHWVxkg9OSGBWmBA2piA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d1f8e9-d166-41bf-b96d-f17b0fddd0e0/1/pMr8tGEtHWVxkg9OSGBWmBA2piA.mft
Manifest number: 1251
Signing time: Wed 07 Aug 2024 07:00:18 +0000
Manifest this update: Wed 07 Aug 2024 07:00:18 +0000
Manifest next update: Thu 08 Aug 2024 07:00:18 +0000
Files and hashes: 1: gXuPoqUCrva6vtnmShnbxKlNgUM.roa (hash: R3Bzub4AVzcQuHU6hDVI1ch4F6A9rcY7E8sWs2S2V60=)
2: pMr8tGEtHWVxkg9OSGBWmBA2piA.crl (hash: IZSROlw2u+OAavtYJS+tMqKM37YAvI1reZkSqaxngEQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2b:a3:77:6d:77:d1:65:22:be:d8:b8:1d:07:12:68:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cafcb4612d1d6571920f4e486056981036a620
Validity
Not Before: Aug 7 07:00:18 2024 GMT
Not After : Aug 8 07:00:18 2024 GMT
Subject: CN=17921d8a230a53f0c066771f1f987354c6ffed43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:8a:8d:b5:23:a5:66:07:28:9b:0c:be:bf:
d6:64:cc:cd:01:e2:02:db:a6:e7:11:e3:aa:1f:67:
58:ba:39:73:c4:ce:b1:f4:b3:17:d4:a1:bc:7b:60:
fd:12:9b:5d:a0:e8:38:f7:e1:a5:55:fc:42:cb:0b:
0e:8a:f2:d9:9c:60:c7:36:2e:00:89:d5:bc:ab:99:
15:f5:0e:f6:6b:31:3d:75:70:4e:4c:d9:59:02:38:
26:50:d2:c1:93:99:45:34:d0:c7:e3:42:54:fa:7e:
36:5c:57:97:bb:fc:c8:d2:d4:4e:62:c9:10:91:e9:
5a:a1:7b:a1:df:9a:8c:35:c2:85:c2:41:c3:7e:4a:
1d:5a:b2:2f:f4:f4:a4:82:7d:d4:06:4f:e4:1a:8a:
63:a2:14:0a:8c:6e:89:b3:c5:d8:a6:1a:2c:5a:5c:
f1:4e:94:67:90:79:c0:9b:04:07:9c:12:0c:51:ad:
9c:cc:d0:90:8b:12:56:bc:d7:b8:aa:85:fe:23:58:
a1:39:bf:c7:60:f2:20:1b:ad:56:e2:b4:67:a8:66:
41:33:b4:51:1f:d4:8d:97:0e:31:f2:41:15:a3:29:
ca:ab:fc:bb:59:85:5b:1c:4c:a5:f5:88:89:74:c3:
95:0d:75:e0:bd:73:7e:5f:bf:37:bc:00:a0:77:90:
85:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:92:1D:8A:23:0A:53:F0:C0:66:77:1F:1F:98:73:54:C6:FF:ED:43
X509v3 Authority Key Identifier:
keyid:A4:CA:FC:B4:61:2D:1D:65:71:92:0F:4E:48:60:56:98:10:36:A6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMr8tGEtHWVxkg9OSGBWmBA2piA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d1f8e9-d166-41bf-b96d-f17b0fddd0e0/1/pMr8tGEtHWVxkg9OSGBWmBA2piA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d1f8e9-d166-41bf-b96d-f17b0fddd0e0/1/pMr8tGEtHWVxkg9OSGBWmBA2piA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cd:50:5f:12:38:8b:3c:9c:17:22:13:88:70:09:0e:28:46:
ab:24:60:d8:07:b7:ab:bf:f2:1f:18:a1:29:5a:1e:69:b1:62:
2d:b8:71:34:67:16:2c:15:2e:a3:87:6f:bc:6a:28:13:a6:ac:
b2:2f:91:74:9f:12:67:06:d8:2f:51:ee:76:65:2e:94:90:d6:
a3:09:35:3f:34:4a:fc:a3:0f:04:ba:45:ec:d7:ec:9c:9e:87:
af:bd:84:55:a6:8d:5c:6f:58:2d:fe:88:7e:2a:2c:38:03:d8:
02:65:f7:87:7a:06:3d:1a:bd:71:6d:0d:c6:7d:3e:b8:87:0d:
43:8d:74:cb:8a:8c:bf:b3:09:f5:fe:89:9c:27:fc:49:7d:c8:
73:90:e6:70:e4:85:90:b9:67:e8:f1:cd:ea:f6:6d:07:70:49:
b5:51:3e:00:50:cd:9f:1a:3b:49:ce:e6:c4:89:84:64:03:7c:
07:f6:4d:7f:41:06:d1:d6:3b:aa:af:27:81:61:99:01:8f:aa:
23:cb:79:9a:a7:6f:f9:b5:e0:1b:d7:54:20:d9:df:ca:24:d0:
de:89:a4:92:4b:92:bb:6e:e4:20:a3:3b:c4:4d:fd:a0:82:b1:
f8:e2:8a:c6:df:20:b8:e1:04:f6:46:1a:8c:5a:99:85:f9:ad:
8e:cb:3d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:33 2025 by rpki-client