Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier: L3hBWFakg6+IEm89XIhT2SLK6KQnweX7XdpE6AASRtE=
Subject key identifier: DC:34:DD:7E:29:31:1C:1A:F5:25:65:1E:C6:B1:23:EA:AA:0B:06:55
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 0195E07D62C4237318F3188579E3FD61EA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number: 042E
Signing time: Sat 29 Mar 2025 06:01:08 +0000
Manifest this update: Sat 29 Mar 2025 06:01:08 +0000
Manifest next update: Sun 30 Mar 2025 06:01:08 +0000
Files and hashes: 1: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: wneLZgSGxusEFfthVrLu40IoNQy4GeP/xjdBTSai1Rg=)
2: PweX4vwdfn9m5okxz1-m9fnVzPg.roa (hash: inDGjN940P413XtKXQDTJWRDwaRCjen3viJxigT7ZkA=)
3: muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa (hash: jKjX1d7d/0G+03C98NXHCEAoyfWh+WswSpMoPmRptVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:62:c4:23:73:18:f3:18:85:79:e3:fd:61:ea:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Mar 29 06:01:08 2025 GMT
Not After : Mar 30 06:01:08 2025 GMT
Subject: CN=dc34dd7e29311c1af525651ec6b123eaaa0b0655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:9a:57:7f:a4:70:54:4b:73:4d:91:3d:2f:
64:9b:2a:90:0f:fe:a1:73:07:73:2a:56:72:d7:a9:
c8:30:f7:18:9f:ee:ef:2b:9e:4a:7e:2a:df:d5:71:
49:98:ed:bd:a7:da:9a:45:73:da:60:76:f6:21:39:
33:89:89:a8:5d:0a:e8:d8:5f:d2:69:84:1f:72:36:
07:7d:84:fb:94:19:a2:3f:b1:77:cd:cc:99:09:16:
a4:54:fd:73:ea:88:5b:5a:b0:d4:d3:cb:53:52:72:
e3:d1:c9:12:23:3c:5c:28:3c:09:36:19:3e:db:84:
f2:9c:7f:43:32:6c:90:d9:5f:86:74:b6:f8:fe:28:
3a:fc:fc:b4:84:64:1d:12:5d:47:38:c2:13:91:7a:
00:0f:26:b4:ca:aa:39:9a:e9:05:6d:b6:08:44:be:
05:77:49:1b:02:d7:c4:76:9b:11:95:a4:34:3a:f9:
6d:67:e3:5e:f9:55:32:44:9f:26:c6:4f:d3:c3:f8:
7c:8d:ad:fe:5f:3c:b4:0e:05:e2:17:99:29:03:ab:
da:eb:24:ce:b2:3b:51:3d:fc:61:7e:36:95:3e:10:
a2:ec:44:a9:8d:8b:ff:40:cb:d0:c4:cd:c0:1e:58:
98:e8:c6:cb:61:8a:4e:d4:b4:e7:e1:90:48:22:52:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:DD:7E:29:31:1C:1A:F5:25:65:1E:C6:B1:23:EA:AA:0B:06:55
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7c:a3:c2:74:df:dc:7f:84:fb:e8:d1:ba:4c:b6:4f:9c:86:
89:4c:8e:af:03:1c:40:24:b1:2f:92:8e:5a:c4:27:4f:0b:e5:
b6:1e:1f:f0:5c:9b:f1:00:4c:32:ec:2b:0d:6b:54:ec:36:a1:
22:25:82:ec:c9:77:2c:46:25:b2:eb:d4:aa:22:3a:1b:42:5d:
e4:94:4c:a7:29:66:ea:76:dc:cd:40:03:96:49:0b:0f:1f:27:
b0:e1:0b:a2:d7:80:d4:9f:c2:80:b5:bd:98:0e:9a:99:3a:66:
bd:59:bc:77:71:4f:df:b9:bf:92:93:f6:c4:ff:02:01:4c:ee:
7f:80:59:43:54:46:e4:2f:e8:14:18:71:6c:44:ad:13:e7:51:
0b:7e:0d:f8:d7:24:08:cc:8a:ea:19:1f:71:2f:b8:85:d5:c1:
45:ce:f8:f1:1d:ce:aa:6e:98:d5:a3:c7:23:3e:be:71:c4:80:
5d:5b:13:6c:81:05:41:08:26:16:e0:ac:2a:47:b0:af:7b:c6:
a9:ea:69:91:f4:43:6e:42:b0:f5:6e:24:4b:3a:8f:0a:8a:93:
44:6a:63:0e:f5:44:58:e0:ef:dd:5b:3a:2d:48:9c:e4:71:b1:
a1:28:e1:9c:f7:e1:81:51:fb:e0:2c:7d:4b:fe:9b:a7:68:f3:
47:b9:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:39 2025 by rpki-client