Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/pcrmoB2FSr35JW3MJClhfVXwO9k.mft
File: pcrmoB2FSr35JW3MJClhfVXwO9k.mft (raw, json)
Hash identifier: T6iy6TbPgR+Nnj8fCZYNmyHW5fc3/gxF5nkzZTG6d8A=
Subject key identifier: C9:1B:7C:C6:D0:09:FE:0F:7D:3C:26:CA:AA:61:AB:03:67:85:07:0D
Authority key identifier: A5:CA:E6:A0:1D:85:4A:BD:F9:25:6D:CC:24:29:61:7D:55:F0:3B:D9
Certificate issuer: /CN=a5cae6a01d854abdf9256dcc2429617d55f03bd9
Certificate serial: 018D62D3C084BB6483DDD29021693A079FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcrmoB2FSr35JW3MJClhfVXwO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/pcrmoB2FSr35JW3MJClhfVXwO9k.mft
Manifest number: 0850
Signing time: Thu 01 Feb 2024 04:01:00 +0000
Manifest this update: Thu 01 Feb 2024 04:01:00 +0000
Manifest next update: Fri 02 Feb 2024 04:01:00 +0000
Files and hashes: 1: W-mdYXyGyNG56mn9a6N3pMEBwMY.roa (hash: ZHcNO2c/fN/AnSX7blHMQMDMfSdNie9N27X+awey9kI=)
2: pcrmoB2FSr35JW3MJClhfVXwO9k.crl (hash: yMoqmuuwk7mmZv+0RIzyFjRW0XLPvx1FKJHPgZ0k6DY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:62:d3:c0:84:bb:64:83:dd:d2:90:21:69:3a:07:9f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cae6a01d854abdf9256dcc2429617d55f03bd9
Validity
Not Before: Feb 1 04:01:00 2024 GMT
Not After : Feb 2 04:01:00 2024 GMT
Subject: CN=c91b7cc6d009fe0f7d3c26caaa61ab036785070d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:c6:88:63:69:0a:2b:84:16:89:92:82:d7:
be:b3:b0:df:6c:46:58:03:e3:51:bf:4f:de:3d:b9:
06:2f:b2:3e:87:09:91:1d:71:5b:7e:50:76:2f:cf:
2e:35:cf:43:a8:ce:b3:39:ac:12:78:fa:ed:43:86:
8d:db:43:42:64:8d:03:c7:82:38:67:92:44:6c:65:
a5:96:c1:aa:f4:79:1f:b9:28:eb:c8:13:39:5c:f2:
3d:42:c8:a1:f0:9d:8a:9b:c0:7f:2b:48:0c:40:f7:
d3:ae:42:91:af:0f:cc:4f:05:d4:ca:3f:86:a6:51:
e2:fa:96:26:75:69:c7:b0:b7:60:62:8a:a8:b8:31:
c5:fc:11:1e:87:55:eb:70:82:bc:75:b1:6f:cd:ac:
82:34:1f:b8:43:51:a1:d6:9a:68:6c:e1:d8:67:6d:
8c:eb:ef:4e:09:4d:88:a1:9b:fa:f9:0d:4b:f5:80:
34:7b:5b:cc:fe:cc:97:54:88:61:8b:08:82:2e:62:
75:d8:f9:6a:6d:05:b1:51:a2:86:d4:d0:56:57:eb:
19:2d:94:fa:38:03:72:a3:10:6d:9c:93:43:53:4e:
a2:fb:f2:45:54:20:04:99:05:8a:99:73:b2:c1:b0:
fb:7d:87:e3:d3:e7:f5:bb:d9:e8:3f:d3:b2:9b:a6:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1B:7C:C6:D0:09:FE:0F:7D:3C:26:CA:AA:61:AB:03:67:85:07:0D
X509v3 Authority Key Identifier:
keyid:A5:CA:E6:A0:1D:85:4A:BD:F9:25:6D:CC:24:29:61:7D:55:F0:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcrmoB2FSr35JW3MJClhfVXwO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/pcrmoB2FSr35JW3MJClhfVXwO9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/pcrmoB2FSr35JW3MJClhfVXwO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a9:a6:6f:55:ab:41:46:51:4f:01:b4:a9:48:a6:bd:09:92:
4e:af:f1:fd:ef:c4:41:12:3a:30:d8:46:03:aa:61:64:68:c2:
23:84:99:1e:50:1c:0f:d2:4d:74:d3:40:54:4b:34:ca:c3:38:
05:57:63:d3:8c:00:c6:a0:77:4f:d1:18:0c:69:43:86:d3:ee:
09:56:61:a8:f9:8c:12:f7:eb:4a:86:be:d5:90:ef:49:c2:3c:
74:ff:fa:e7:7d:84:72:2f:d6:c4:1b:4e:8e:f2:6c:bc:fe:b7:
57:b7:13:2b:95:cb:f1:bb:a8:e1:f3:d7:c2:06:9e:a9:a0:5c:
ee:7d:d4:8e:4b:f6:69:64:47:02:81:c9:09:62:c4:bf:16:19:
1a:e3:4f:da:b9:0c:42:6a:60:8b:46:00:95:ea:ed:a5:c2:f5:
5b:23:6b:d2:82:a6:47:8e:ec:4e:6a:07:ed:a3:68:9a:20:2b:
23:2a:62:6c:48:72:1b:0f:d4:23:93:70:d4:c1:c3:04:65:20:
99:76:7f:2d:c5:02:fa:6b:ab:37:f9:9b:87:a7:64:1d:bd:71:
42:92:94:28:82:08:32:34:57:c6:bf:da:e2:f3:5c:5d:df:0b:
fa:c6:44:b2:ae:59:be:05:7e:58:b6:e6:08:da:3d:4f:4b:85:
a5:3f:30:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:08:45 2025 by rpki-client