Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
File: pKN763_WXKqa_EbZ8kJzzSfA-WA.mft (raw, json)
Hash identifier: 27bD7CH+4fPjN8JilXGYITEjzwaQgVjEnB9boKVTS6g=
Subject key identifier: 94:81:4C:BD:24:82:B6:AE:4F:27:48:D7:F3:20:8E:45:78:B4:EB:6C
Authority key identifier: A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60
Certificate issuer: /CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960
Certificate serial: 0195E0465B4C0EF92D7A3EB29607222120CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 05:01:02 +0000
Manifest this update: Sat 29 Mar 2025 05:01:02 +0000
Manifest next update: Sun 30 Mar 2025 05:01:02 +0000
Files and hashes: 1: eZY2teiRCMuc8ordB3siE6vvyrU.roa (hash: eYVuxyQrp/ArDQADFzcG2OxANFHCCc8GbHzB/2LAyF8=)
2: pKN763_WXKqa_EbZ8kJzzSfA-WA.crl (hash: vaFEEZ1UYdXqcTb8UUR8PEvoyWxbpZCh5HEj6CDSMW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:5b:4c:0e:f9:2d:7a:3e:b2:96:07:22:21:20:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960
Validity
Not Before: Mar 29 05:01:02 2025 GMT
Not After : Mar 30 05:01:02 2025 GMT
Subject: CN=94814cbd2482b6ae4f2748d7f3208e4578b4eb6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:71:3a:9d:39:1f:8a:40:f5:31:0d:0c:79:
d9:7a:91:94:d5:61:ff:aa:6a:7a:5e:e8:42:e7:08:
1e:75:fc:6a:6c:b2:7d:75:c4:62:e1:96:53:99:d0:
39:19:b8:0b:2e:14:08:3a:5e:b0:f9:6d:3a:53:d1:
0a:27:9e:b4:4a:e9:9a:a5:aa:f4:f2:71:ac:48:d4:
c9:10:75:da:3f:10:1d:40:a2:f0:fc:37:0d:6b:3f:
2e:68:d5:d5:b2:4c:7c:06:6d:eb:e5:8d:90:ad:82:
21:fa:be:79:3b:42:73:8f:24:10:bf:ef:22:84:cb:
c5:21:03:d2:fa:ee:66:84:2a:d3:0e:67:63:c7:0f:
6a:3d:0d:e6:d6:71:bf:56:d1:90:bd:df:00:a0:ee:
28:8a:a8:84:a6:5e:8c:b8:55:1f:71:41:9f:87:68:
27:bb:04:35:66:9b:2c:56:12:75:74:70:55:29:92:
b4:9f:93:3d:09:1b:2e:d0:1b:41:5c:bd:03:44:55:
f6:a5:79:74:5c:b8:65:85:69:18:93:76:a0:3d:51:
e6:df:4d:90:53:4b:42:52:b8:e7:cc:4c:a8:52:e5:
5b:6b:15:2a:2c:a3:f1:6e:10:29:6d:05:38:58:93:
4c:6c:00:48:68:98:c2:5f:fe:d3:2f:f4:19:13:5c:
52:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:81:4C:BD:24:82:B6:AE:4F:27:48:D7:F3:20:8E:45:78:B4:EB:6C
X509v3 Authority Key Identifier:
keyid:A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2a:de:ed:00:da:98:e3:09:1d:8a:ca:11:c7:e7:0a:4b:91:
c1:8e:84:e5:dd:88:0f:32:b8:b8:f9:4e:6a:54:69:cc:05:58:
79:3f:5d:ab:a6:98:1c:fe:63:f5:d5:05:75:48:83:da:8b:58:
1f:a2:a9:44:55:97:cb:3b:b5:4b:16:d3:04:6e:30:eb:37:5b:
4a:a0:83:ef:ae:2d:cc:71:46:bb:5c:73:61:62:04:d8:5b:54:
5d:3d:24:57:29:da:1e:f5:1d:69:50:c3:80:31:b4:44:51:83:
dd:77:09:92:d3:26:ea:0c:98:a0:07:af:c7:43:65:2e:65:ad:
d3:31:14:2d:79:4b:1b:42:7a:b4:51:fe:f7:77:a6:e9:da:d8:
75:e8:22:92:e2:76:9f:e6:b5:43:d7:86:04:b9:57:1e:e5:b5:
e6:b9:6d:89:85:87:74:1a:db:b1:98:7c:5e:b6:f2:8c:ae:24:
0a:ef:56:aa:32:43:34:06:1b:ca:1d:47:3f:a7:82:3e:64:64:
95:bb:db:f4:12:11:36:75:30:32:28:d9:84:d9:84:23:ce:6d:
59:03:84:66:f8:18:23:55:98:e7:93:9c:f7:43:49:d3:16:7c:
b8:d8:99:d6:1b:c0:9e:d0:cf:a8:d9:af:83:f7:a9:3a:f3:79:
1d:e5:e3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:22:44 2025 by rpki-client