Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
File: Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft (raw, json)
Hash identifier: opSK6NzdEus5xTqBH/iwxrkGUytrq3HlwXefs9OA2OQ=
Subject key identifier: AE:84:E7:1F:C7:D4:49:AE:74:0A:9E:59:55:9C:6D:DD:AB:91:6C:75
Authority key identifier: 3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
Certificate issuer: /CN=3e782de1b5d5292edd136d5278258c67b05be22a
Certificate serial: 01962F06D00D5F4E56A0B84F2510493B3593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
Manifest number: 022E
Signing time: Sun 13 Apr 2025 12:01:37 +0000
Manifest this update: Sun 13 Apr 2025 12:01:37 +0000
Manifest next update: Mon 14 Apr 2025 12:01:37 +0000
Files and hashes: 1: HsLH977Wr8CRqPeFRIsKeWuqNBQ.roa (hash: DfN2Ce+eFgUYzjRB1SnZEzwBexeV9U5bLQB9J92xhK4=)
2: Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl (hash: cqykKtL/nS4H4OWQmXk/prVX8ozKtp1dKw3uKf9WHss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:d0:0d:5f:4e:56:a0:b8:4f:25:10:49:3b:35:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e782de1b5d5292edd136d5278258c67b05be22a
Validity
Not Before: Apr 13 12:01:37 2025 GMT
Not After : Apr 14 12:01:37 2025 GMT
Subject: CN=ae84e71fc7d449ae740a9e59559c6dddab916c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:6a:2c:71:4d:6c:5d:26:72:f8:ba:13:46:
5a:22:b0:d9:74:1d:49:15:c5:fb:8c:40:26:c9:d9:
d2:64:02:bd:41:33:7e:bc:d3:35:ff:96:2b:b1:a3:
36:a8:59:97:62:eb:ff:ec:08:d8:65:0e:29:d5:14:
83:c8:93:00:21:07:31:64:eb:51:15:c3:f7:7c:28:
1f:15:b6:d9:c1:db:3f:ea:b0:7a:6c:76:67:63:7f:
4a:68:de:2f:eb:16:b8:c0:95:c9:76:97:1d:be:d6:
c0:2f:7c:63:d8:7e:35:34:fd:0e:1d:21:21:26:14:
8c:6c:31:f0:48:96:8c:de:6e:91:72:4e:54:34:7c:
de:c7:1b:b2:7d:29:79:94:48:2e:f8:13:b0:d2:35:
05:20:14:06:65:fd:d8:8a:9b:19:db:c7:58:7d:7a:
74:6e:c1:32:00:3e:b9:25:9f:67:df:7f:0e:a7:5b:
8a:65:3d:e2:0f:5d:83:68:95:7d:16:68:09:14:49:
1d:6b:11:29:a0:bf:74:ba:11:f4:28:6d:14:68:27:
2e:9b:c5:85:e9:19:b2:46:70:65:57:46:05:15:a1:
04:0e:c5:5a:a3:8e:ea:92:41:97:63:4c:55:b3:38:
93:e5:9d:e7:3c:17:b6:11:58:cb:3b:c8:b1:eb:79:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:84:E7:1F:C7:D4:49:AE:74:0A:9E:59:55:9C:6D:DD:AB:91:6C:75
X509v3 Authority Key Identifier:
keyid:3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ec:7e:e7:8d:00:2b:49:ee:3e:29:6d:33:93:59:90:0a:77:
7e:f2:9f:fa:cc:e7:0b:5b:72:2f:43:bf:bf:7c:e2:3b:34:84:
c2:67:b5:73:3f:c3:7e:4a:cc:32:b8:36:e6:eb:8c:c4:3e:58:
ef:8a:ec:9c:78:20:03:07:89:65:a9:4b:ab:dc:c6:58:00:f3:
1e:d0:3b:85:69:fb:88:07:18:74:6a:bf:cd:b9:ac:40:14:78:
97:bc:d6:dd:3f:53:7a:db:7b:11:94:08:e9:40:61:8a:74:03:
fb:87:b2:78:46:3a:73:c1:ea:1c:00:cc:99:94:4c:cb:6f:18:
29:9b:77:0d:b1:58:b4:90:2f:f1:80:0e:62:81:01:2d:a0:00:
ca:40:fe:09:6d:84:83:2b:c2:ef:65:9d:2e:83:0b:7a:36:08:
1f:58:9a:01:d3:da:1d:d6:6b:dd:5c:13:8a:e3:79:89:fc:3e:
be:85:ee:b4:6e:c9:60:3b:f2:9e:78:dc:39:81:5b:57:42:cb:
10:59:7f:66:40:fa:4a:0d:fe:10:14:38:48:aa:3e:74:1a:80:
44:da:2d:e9:76:60:f1:43:9b:fa:05:56:f4:c8:62:06:da:b3:
c8:60:45:d8:63:1d:90:75:4c:ad:74:9e:c4:78:c6:a0:b8:be:
e2:62:2e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:39 2025 by rpki-client on console.sobornost.net