Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft
File: PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft (raw, json)
Hash identifier: WCMiHc9VIi0qzY4vLweUQe1hW9pMUmjIc2HN4ENRIFc=
Subject key identifier: 7F:A7:CF:14:A4:12:E0:FD:08:E2:AF:2F:7D:E7:FE:59:98:78:39:B0
Authority key identifier: 3E:09:A5:4C:C2:24:AD:7B:3C:A0:C5:75:31:7B:81:84:E2:AC:E2:16
Certificate issuer: /CN=3e09a54cc224ad7b3ca0c575317b8184e2ace216
Certificate serial: 019541EA5302454F622A6F5170B78D1DCF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgmlTMIkrXs8oMV1MXuBhOKs4hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft
Manifest number: 1347
Signing time: Wed 26 Feb 2025 11:00:30 +0000
Manifest this update: Wed 26 Feb 2025 11:00:30 +0000
Manifest next update: Thu 27 Feb 2025 11:00:30 +0000
Files and hashes: 1: 4aKaPeuKkFGP9DkxcB8DOClWpKg.roa (hash: m9nL9aDr5NjXaEfCOc4RkIAjrxKiWL1MukDMMkDw9YE=)
2: PgmlTMIkrXs8oMV1MXuBhOKs4hY.crl (hash: zb5/Zq4faaLdfbspC9WRh2nidK7KJ0/emG7MLxgQrBs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:41:ea:53:02:45:4f:62:2a:6f:51:70:b7:8d:1d:cf:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e09a54cc224ad7b3ca0c575317b8184e2ace216
Validity
Not Before: Feb 26 11:00:30 2025 GMT
Not After : Feb 27 11:00:30 2025 GMT
Subject: CN=7fa7cf14a412e0fd08e2af2f7de7fe59987839b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:93:68:2d:2c:8b:c3:a3:f0:e0:e4:3b:7b:af:
3a:e5:f8:54:b1:1f:df:f7:57:0c:23:b7:a5:43:f9:
5b:09:67:9f:9c:1c:51:2c:db:e9:4f:97:db:71:42:
93:8c:0d:c0:6d:c3:bc:e2:f5:2e:bf:01:28:7a:01:
c4:a9:03:39:af:8f:a1:4c:b2:ee:13:9e:e4:1e:ac:
68:a9:d6:f5:f9:5c:b0:0c:4a:fb:77:5a:04:87:37:
d4:fb:bd:4a:fa:86:44:69:78:21:40:36:b3:be:8b:
ca:e4:92:c8:64:2a:11:91:52:1d:1a:05:72:ec:94:
aa:d2:08:9b:a0:3b:72:4d:0d:f6:f2:f8:94:83:f6:
8e:02:a5:1a:3e:74:9e:0a:5d:59:41:68:90:e1:38:
41:27:be:35:68:cd:d3:b5:08:0c:71:a3:ec:cb:a8:
09:39:c7:35:be:c3:2b:4e:ed:8e:0a:bc:33:6f:a0:
e7:b4:1d:76:1d:22:48:bd:57:da:b2:6b:a9:44:73:
1f:18:c7:56:ee:66:f7:40:f8:e7:8f:2f:73:e7:15:
fb:97:d1:64:04:ad:cc:17:6d:39:d2:05:ce:2a:af:
d0:04:65:13:0f:a3:a8:1d:1b:9d:39:84:7a:f8:7b:
6d:26:3c:bc:a0:10:dd:49:aa:8d:92:69:fe:3d:6d:
df:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A7:CF:14:A4:12:E0:FD:08:E2:AF:2F:7D:E7:FE:59:98:78:39:B0
X509v3 Authority Key Identifier:
keyid:3E:09:A5:4C:C2:24:AD:7B:3C:A0:C5:75:31:7B:81:84:E2:AC:E2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgmlTMIkrXs8oMV1MXuBhOKs4hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d4:18:05:27:4d:a0:f0:8a:f3:e0:0f:52:d1:0a:08:b7:60:
bd:3a:c7:4c:3e:6d:08:5e:f9:9b:90:9e:27:d9:22:57:3a:ba:
78:bd:ad:61:9a:4c:9e:75:a2:11:ef:53:62:3d:7c:92:9f:ef:
79:3f:a1:1b:a6:fe:78:4e:57:c3:4c:1f:bf:30:f5:9e:4e:80:
73:82:18:33:29:d6:b7:75:e8:8d:66:1f:bf:7a:fb:d3:c5:31:
06:58:94:75:53:1e:94:c1:3f:cd:fd:5e:99:5d:1b:05:2c:ee:
53:c8:76:45:27:ab:1f:d8:a3:d3:18:25:71:c6:bb:c4:a6:6f:
fd:49:52:51:c6:06:ff:eb:85:e4:af:3f:75:10:8e:1e:7c:6c:
c0:8a:20:39:07:55:96:30:a9:ef:f4:e2:db:7d:0f:51:bb:32:
3c:aa:c4:da:c4:26:65:76:27:0e:0d:a9:22:50:d2:53:15:d8:
50:65:48:6b:f0:24:9e:37:06:4c:6a:fc:8d:32:63:e2:27:c0:
b3:b2:74:30:61:1b:ee:a2:62:a7:d2:b7:e3:e2:91:82:0a:0e:
88:19:86:4d:a1:77:07:17:e0:f3:9a:b8:67:e1:59:f3:ff:dd:
aa:66:47:3d:fe:48:1a:f2:4c:fc:a0:38:5e:6f:d2:bc:40:b6:
15:c4:d2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:19:13 2025 by rpki-client