Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
File: PYyo-vPO4aXlGlxc2_lIKgACe2U.mft (raw, json)
Hash identifier: SDgi9DjBErWGTY08unJTJrkMUU0bdzvlutgG/EfK7bE=
Subject key identifier: CA:43:D8:20:85:1E:06:B2:51:B1:D0:1B:95:F8:25:8C:74:B0:AA:D6
Authority key identifier: 3D:8C:A8:FA:F3:CE:E1:A5:E5:1A:5C:5C:DB:F9:48:2A:00:02:7B:65
Certificate issuer: /CN=3d8ca8faf3cee1a5e51a5c5cdbf9482a00027b65
Certificate serial: 0194BBCEB1B23FFEE44A7D4FC76E9B1C7D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
Manifest number: 0997
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: PYyo-vPO4aXlGlxc2_lIKgACe2U.crl (hash: 53nHdx/U9VJLr2OjLFhYqI7rrDDbknBf9hQg691lENk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b1:b2:3f:fe:e4:4a:7d:4f:c7:6e:9b:1c:7d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ca8faf3cee1a5e51a5c5cdbf9482a00027b65
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=ca43d820851e06b251b1d01b95f8258c74b0aad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a2:96:ce:25:e5:b2:a5:f4:1c:5c:33:6f:69:
ac:70:f9:85:56:10:1f:8c:22:2c:ee:e9:89:3c:ab:
58:72:27:cf:05:a2:14:45:ba:03:ca:69:c2:d3:ae:
a4:88:69:21:75:5e:be:81:5e:b1:fc:73:f6:e8:f9:
e4:7c:4a:3d:0f:93:aa:98:b8:84:b2:31:03:4e:aa:
d8:76:51:98:e2:f9:d5:d0:94:d5:e0:fa:85:b8:0a:
8c:d9:8b:b2:3d:71:89:22:b1:b2:aa:c9:39:27:1d:
b0:58:d1:88:ce:45:39:94:a0:a0:c9:66:c6:55:27:
57:f1:3e:bd:3b:7e:af:87:af:4e:4d:28:08:0c:0a:
5e:c4:4c:3b:7a:23:4a:86:37:73:3f:68:a3:b8:50:
43:ca:74:11:9b:d8:be:6f:1f:d0:4e:74:88:c7:8a:
5c:88:ba:a2:23:ad:5e:82:ca:88:7b:38:61:9b:c1:
76:1e:e1:4f:94:ff:ec:60:b2:3d:81:eb:57:28:49:
1d:e6:2f:95:ff:f1:a7:03:b9:3d:d5:f5:bc:23:fd:
45:b0:fe:2b:0d:29:d9:23:4a:2f:5b:da:56:9f:ab:
28:e2:c1:3c:c5:d4:cd:1d:53:0c:26:9f:0e:97:52:
e6:a2:c3:35:05:6a:eb:15:bb:cf:fb:90:54:00:55:
b4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:43:D8:20:85:1E:06:B2:51:B1:D0:1B:95:F8:25:8C:74:B0:AA:D6
X509v3 Authority Key Identifier:
keyid:3D:8C:A8:FA:F3:CE:E1:A5:E5:1A:5C:5C:DB:F9:48:2A:00:02:7B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ba:af:5f:ed:af:52:8e:1d:ab:72:0f:c5:36:93:5b:7c:a9:
49:bd:33:81:d4:d5:fc:bf:8d:b7:55:28:6a:54:5f:12:c8:b3:
d2:e2:89:35:f7:c1:2f:1d:ed:cb:01:4d:66:02:c6:68:67:52:
18:35:44:ca:c6:83:b7:91:d4:64:28:b8:a9:33:8a:1c:fb:3f:
f7:2d:0a:e4:30:fa:38:98:87:72:cd:06:28:c6:58:8f:87:b0:
e7:88:c5:91:76:d1:d4:74:4d:ba:72:e8:cb:6c:4f:d9:0e:6d:
27:96:1c:3c:7f:75:d9:e7:41:ba:ed:e0:b2:cc:08:2e:b1:ce:
ec:36:32:07:8f:90:ef:97:2e:29:83:57:16:a2:f2:b2:66:e4:
b2:2b:98:fa:36:14:0e:18:15:a5:54:8f:7b:cb:3d:b6:cb:26:
a0:6d:4d:3d:15:24:1a:e8:d7:5c:4e:eb:cb:a7:55:a8:44:fe:
e3:ff:32:26:f0:5e:2b:4f:a6:b8:14:5d:48:ed:cd:56:1a:5f:
c2:80:3d:f3:72:f6:c4:c2:eb:a0:57:ac:38:fd:1c:fb:a3:e3:
8e:79:4b:f2:dd:b6:04:43:a9:d3:5c:f8:4a:85:c5:fa:fc:82:
ee:40:97:00:fe:cd:91:03:52:a6:19:d8:b8:ad:c4:f4:d7:34:
a1:06:a2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:18 2025 by rpki-client