Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier: Uv9iv9lyMojDR4fHH54MgJGS9KCKrHQwg7BucQ4TiKw=
Subject key identifier: 77:C7:BF:A0:E5:50:D9:1E:51:9D:89:4F:86:80:26:90:A4:00:D9:D1
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 0195DFD8A4C47B67B190BF131F6B17150DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number: 7C
Signing time: Sat 29 Mar 2025 03:01:11 +0000
Manifest this update: Sat 29 Mar 2025 03:01:11 +0000
Manifest next update: Sun 30 Mar 2025 03:01:11 +0000
Files and hashes: 1: U1MjiCIlA4iup3pmxAEZWYySCK0.roa (hash: CY8U+Rijm/vkTU6wtdBserg6/x2jbw4gd75rjk7KN38=)
2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: 4/47PTHT11tziCr96ny47aEcFLsVbjsfonVDjvCFFVg=)
3: uEmfMDAf7ndLhvyEumt6iyeInuk.roa (hash: cWvTSGjdUJf9j1h6XvUS9k6glAbDowTB0xsZoL31rwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:a4:c4:7b:67:b1:90:bf:13:1f:6b:17:15:0d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Mar 29 03:01:11 2025 GMT
Not After : Mar 30 03:01:11 2025 GMT
Subject: CN=77c7bfa0e550d91e519d894f86802690a400d9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:f0:54:bb:37:49:2b:1f:7f:62:d3:b2:18:
b4:05:fb:ed:2e:86:e8:64:87:67:1c:e2:8d:ac:3b:
fb:68:98:05:d6:86:01:e4:42:65:ca:c0:88:fb:1a:
de:da:e1:64:58:26:30:08:ce:ef:47:98:39:f7:6c:
6c:ef:6b:67:34:a1:6b:e9:d1:48:77:01:16:87:9e:
e6:77:08:04:c4:5b:11:cb:82:5c:c0:0c:ec:b2:10:
f8:a3:4e:57:86:db:ba:b9:22:43:a8:88:46:e7:d1:
f5:9b:3c:de:7b:7e:66:cd:cd:f9:28:c0:1e:35:8a:
37:75:de:e7:95:1f:51:71:3b:eb:cc:26:3e:27:6d:
1d:28:7b:5f:fe:26:fe:4d:82:b5:3b:bf:06:45:e6:
61:6c:a0:fd:43:47:91:0d:0f:29:06:31:b0:b0:3d:
4e:ca:c0:32:0f:a7:38:9b:34:d2:19:be:52:c1:1f:
6a:02:67:35:8e:01:b4:a8:fe:ba:02:00:9f:ef:bc:
9b:75:65:96:3b:84:f8:b4:ff:ad:03:9d:1d:d7:ff:
49:1b:08:1b:6f:52:ad:22:4e:6d:33:9e:89:81:53:
a4:7f:13:b9:59:11:66:b6:db:69:d1:a3:66:7c:2f:
f4:b4:51:39:e9:44:74:ce:4d:37:06:83:fd:a4:e0:
7c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C7:BF:A0:E5:50:D9:1E:51:9D:89:4F:86:80:26:90:A4:00:D9:D1
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b9:4d:51:38:cc:b4:ab:9b:b7:89:d2:5c:15:e9:d8:1b:01:
50:2d:27:59:50:1d:76:09:36:2b:f5:69:d6:f7:99:98:42:b7:
cc:7c:c0:a2:60:8f:0c:e9:7a:ad:54:36:44:84:99:05:f2:ab:
4f:6c:70:eb:a3:af:76:67:6c:45:2c:b8:0a:0d:0b:ba:89:2b:
8d:ac:72:f8:40:c3:94:ba:45:3b:95:68:c9:39:60:3c:06:bf:
01:e5:a2:e4:8b:a4:cd:d4:07:19:51:dd:08:62:b4:6c:fe:0d:
9a:71:1e:84:67:77:24:b8:99:d2:91:bc:3e:4d:95:6f:d2:65:
76:f6:38:fa:0b:c8:54:db:ea:ed:f4:38:41:71:19:30:cb:dd:
97:1b:24:73:c2:30:b3:ba:9c:e5:e1:5b:1e:a2:fa:78:80:40:
0e:21:b6:4c:52:e9:47:c8:70:99:ff:84:ce:ee:fc:ee:f0:3c:
8e:ef:cd:61:4b:fe:d3:4f:5a:f0:fe:e3:c1:ee:3a:01:e2:28:
c4:4b:d4:96:35:00:50:f4:d9:f1:7a:ed:10:ff:be:89:4c:4b:
24:dc:ea:a7:77:94:f4:4e:a6:17:8b:6a:05:d3:50:6e:ef:f7:
60:6a:50:12:27:4d:73:13:4a:0b:32:e9:eb:b2:8e:42:94:63:
bc:82:c1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:46:14 2025 by rpki-client