Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6f0cb6-ab28-4e49-8b2d-8b0cb4432ac6/1/PDeEQD2GsthbPR0eAtPcAKBBPUE.mft
File: PDeEQD2GsthbPR0eAtPcAKBBPUE.mft (raw, json)
Hash identifier: +5oTklc36qQKCQZWbdjNCNCvPSNNE9HWA2q682PsJ0U=
Subject key identifier: 86:4C:9D:52:C0:75:8D:63:08:61:56:00:1E:B6:D4:0F:8D:33:91:78
Authority key identifier: 3C:37:84:40:3D:86:B2:D8:5B:3D:1D:1E:02:D3:DC:00:A0:41:3D:41
Certificate issuer: /CN=3c3784403d86b2d85b3d1d1e02d3dc00a0413d41
Certificate serial: 018BCB22103E2226B979FAF618A5A44F25A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDeEQD2GsthbPR0eAtPcAKBBPUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6f0cb6-ab28-4e49-8b2d-8b0cb4432ac6/1/PDeEQD2GsthbPR0eAtPcAKBBPUE.mft
Manifest number: 087D
Signing time: Tue 14 Nov 2023 00:01:29 +0000
Manifest this update: Tue 14 Nov 2023 00:01:29 +0000
Manifest next update: Wed 15 Nov 2023 00:01:29 +0000
Files and hashes: 1: 2l_gh3FY-Th1GhgxpxX96oqcONs.roa (hash: X8aSDqmMhvpVXu6eNfXL8j2E2t3lb/hXsG5pj8mKkck=)
2: K5CI0B6T2peEbDJt7LjOoVJEyUQ.roa (hash: rXXEXR/V0Z/ZMJykZrWGYvf2fCE6pJda1b/mIx8psB8=)
3: PDeEQD2GsthbPR0eAtPcAKBBPUE.crl (hash: vONH5gQ8dEOt3NUKumnqQMWjhuDrNDumffRCKrwgNTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cb:22:10:3e:22:26:b9:79:fa:f6:18:a5:a4:4f:25:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3784403d86b2d85b3d1d1e02d3dc00a0413d41
Validity
Not Before: Nov 14 00:01:29 2023 GMT
Not After : Nov 15 00:01:29 2023 GMT
Subject: CN=864c9d52c0758d63086156001eb6d40f8d339178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:fb:38:22:f7:f4:9f:7d:48:6e:ae:d6:59:
a2:fc:dc:8c:8d:e3:5b:9f:9f:f8:49:06:0e:50:7f:
35:d3:f5:d9:07:36:e9:8a:37:62:f8:ce:35:0e:f7:
c2:15:cd:78:27:8c:22:a8:58:4e:be:55:99:ae:ed:
bc:ab:37:49:12:09:4f:db:df:fc:1c:1c:10:17:4b:
24:54:9f:e8:f4:60:04:84:c8:89:f7:e4:f6:ee:e2:
3e:e1:14:7a:b6:0a:65:92:bc:a1:c6:cb:b0:e7:95:
de:a2:15:95:37:15:2d:3d:0e:2a:cf:fe:af:da:0c:
d1:2f:92:0e:f4:b7:bd:02:b1:52:dd:de:2b:3c:0b:
1c:ee:2f:d8:99:b7:28:0e:04:f2:86:41:86:f4:d7:
ba:cb:7e:f1:ba:0a:49:d6:04:8a:b5:ce:4d:04:dc:
9b:4d:7a:f1:71:6f:df:44:20:f4:b7:3f:3d:29:6a:
ef:52:8a:07:71:88:33:3c:b4:ac:4c:37:0c:94:5c:
ab:9a:b0:64:b9:cb:21:93:cc:42:3e:36:8d:01:a5:
7c:57:b7:6e:69:3f:23:3e:ca:71:6c:59:f0:26:0c:
61:3b:e4:73:6b:e2:69:c4:ca:9e:b4:98:1e:7d:8b:
14:76:39:6a:bd:ae:6c:af:11:6c:fe:ee:87:f5:9d:
b9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4C:9D:52:C0:75:8D:63:08:61:56:00:1E:B6:D4:0F:8D:33:91:78
X509v3 Authority Key Identifier:
keyid:3C:37:84:40:3D:86:B2:D8:5B:3D:1D:1E:02:D3:DC:00:A0:41:3D:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDeEQD2GsthbPR0eAtPcAKBBPUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6f0cb6-ab28-4e49-8b2d-8b0cb4432ac6/1/PDeEQD2GsthbPR0eAtPcAKBBPUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6f0cb6-ab28-4e49-8b2d-8b0cb4432ac6/1/PDeEQD2GsthbPR0eAtPcAKBBPUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:12:1a:d1:8f:92:a5:40:7f:dc:58:ae:3a:ca:e6:ae:c8:95:
ae:41:e8:48:6d:8e:ef:42:34:1e:78:dd:5a:b5:7d:23:3a:72:
f2:8f:1e:02:5c:1f:60:52:1b:09:de:f3:cc:23:da:42:a6:05:
26:01:6a:08:11:f0:61:ad:80:55:f2:d0:38:a2:a5:16:33:16:
0e:9f:8d:c7:4b:f0:c4:96:e1:00:f4:6f:0d:fd:f1:27:97:2b:
66:b9:83:6a:44:f3:9d:1a:de:e4:13:92:11:08:d3:01:f3:b2:
47:6c:9f:e4:77:6a:4a:f3:4d:f7:da:26:fe:fd:6b:2e:17:86:
2f:8f:3d:ac:5b:68:57:0c:95:b1:53:e7:1b:df:e9:f4:66:b3:
84:f0:b7:26:ca:fb:28:6d:16:3a:f7:7f:1e:19:55:11:9b:fe:
58:51:54:a5:df:92:14:21:79:ed:bc:44:26:95:1f:2e:8b:a2:
78:22:4e:44:eb:be:4a:0d:45:94:8e:95:a4:01:03:ba:a0:8e:
9e:b4:0f:4d:a9:88:47:bf:91:23:6e:b4:c2:68:25:16:23:5d:
3d:f1:00:6c:bb:7c:44:ef:51:16:66:ae:95:05:82:e6:31:67:
5f:29:4c:9d:36:aa:f1:23:26:51:c4:20:72:95:79:39:6d:26:
88:23:e9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:24 2025 by rpki-client