Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
File: PqGMkbK-KKB0uaOHSpC0RgE84b4.mft (raw, json)
Hash identifier: M76+lhBS9AMpdcXx2RQPfS4r0cbv+WvwbXzJQVnf/XQ=
Subject key identifier: DA:61:8E:7A:C0:4B:88:A3:C1:84:F0:AC:24:CC:EE:ED:57:6D:C7:0B
Authority key identifier: 3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
Certificate issuer: /CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Certificate serial: 0195E0EB1E0E3805AA699C678B5F2E79BE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
Manifest number: 0257
Signing time: Sat 29 Mar 2025 08:00:59 +0000
Manifest this update: Sat 29 Mar 2025 08:00:59 +0000
Manifest next update: Sun 30 Mar 2025 08:00:59 +0000
Files and hashes: 1: PqGMkbK-KKB0uaOHSpC0RgE84b4.crl (hash: ofJbYL29oUGXO6898Q8Ew78so3D1Y4u1dVSJLeUVHnk=)
2: w78-PkWjkmBWzXnYfu0GZ4j6LVI.roa (hash: BzBqUt4k6YCYPQ6Nn7PdPu+ICTIm/5kh0/Z+KfmEAhE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:1e:0e:38:05:aa:69:9c:67:8b:5f:2e:79:be:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Validity
Not Before: Mar 29 08:00:59 2025 GMT
Not After : Mar 30 08:00:59 2025 GMT
Subject: CN=da618e7ac04b88a3c184f0ac24cceeed576dc70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:96:e9:cd:ed:92:5f:79:ae:8d:e9:ee:d1:c6:
8a:30:40:dd:2c:f1:56:7d:66:81:27:f9:12:5d:4d:
95:fc:dd:29:28:32:28:31:7f:b9:d8:c1:9c:3d:e6:
66:d7:64:5a:8e:91:33:61:c8:ac:0e:12:42:de:08:
26:cb:23:2c:c5:34:d3:ff:6a:88:35:e2:f9:48:04:
8a:99:4f:1d:13:64:ef:eb:28:cb:77:df:a8:4b:a6:
b4:f8:e9:66:c2:6a:11:a2:07:64:24:95:b5:53:96:
0e:3a:eb:69:84:c4:a2:e8:fe:4f:83:05:9a:df:33:
35:70:c8:66:de:94:68:96:d8:d7:fe:96:d6:d3:d9:
32:78:53:a2:f4:21:69:41:d5:ae:0d:73:d6:de:09:
36:57:3d:c2:3b:d5:9e:ad:ed:5a:09:d1:82:87:4d:
a1:20:bf:1f:fd:0f:3b:33:2e:ff:41:ad:a1:7a:20:
17:f0:e6:fe:b1:07:6b:84:c8:92:ce:8a:f8:40:e8:
60:aa:52:a6:af:98:0d:5b:8a:1e:af:eb:5f:35:ee:
91:f1:f5:6a:c6:9f:45:e1:63:2d:f5:72:5c:ce:7e:
24:c3:0d:5d:11:64:ea:96:99:cb:01:12:40:01:27:
ce:b5:fa:be:6d:3e:ca:c3:5d:1c:e9:e0:39:7c:12:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:61:8E:7A:C0:4B:88:A3:C1:84:F0:AC:24:CC:EE:ED:57:6D:C7:0B
X509v3 Authority Key Identifier:
keyid:3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d6:b1:69:29:e3:66:7e:a9:76:d3:1d:1f:98:ca:9a:e9:0c:
f0:91:f4:8e:93:ec:ad:72:06:9c:37:70:db:e2:49:db:92:fc:
bc:20:a6:0a:2e:1b:e3:25:fc:0a:f9:ab:3b:ef:91:8e:81:16:
b1:7a:53:3d:ab:5e:39:1c:07:a8:32:1f:06:db:73:01:0f:47:
66:35:43:4d:ea:bf:1f:c4:64:e2:aa:ff:17:e8:63:f0:25:e6:
26:dd:43:2b:20:0e:54:28:fc:03:00:57:ab:38:76:1b:80:9d:
dc:8c:09:3b:38:6b:2e:b7:bd:79:79:c0:68:4d:37:a0:bf:48:
21:ec:a0:b9:a0:0f:13:37:48:b6:71:ed:2f:f5:b9:22:82:54:
39:d5:ac:fb:bd:b4:24:ef:06:1d:e1:c7:d3:dc:9e:09:93:2a:
83:51:5b:c5:b6:6e:a4:b6:85:77:b0:1f:ca:bb:e5:89:ac:22:
66:38:87:ad:3e:d6:fd:e5:44:c8:19:ce:16:a6:91:4d:00:a5:
2d:ca:b8:7d:e9:9d:15:ee:d1:f2:2e:2b:3f:91:95:29:aa:71:
73:e5:fe:6b:9d:3f:98:75:ce:b2:a8:fc:d9:40:d2:18:0d:28:
22:d0:95:cd:db:1f:3d:1e:ca:2a:f0:ae:0c:3e:da:1f:0b:a6:
2f:5e:8f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:01 2025 by rpki-client