Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
File: PI0Z2SQBkcNql0ti35PCIUNtm90.mft (raw, json)
Hash identifier: wbhndgMkGg8BB9RfjbiwHRiWRKDJ6nxkj5MusykoKIk=
Subject key identifier: 40:1F:70:AD:A8:35:D4:27:E8:7D:E1:4B:79:43:C3:64:1A:0F:66:98
Authority key identifier: 3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD
Certificate issuer: /CN=3c8d19d9240191c36a974b62df93c221436d9bdd
Certificate serial: 0194BBCE295CF3278AA22AB641079F8F74F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
Manifest number: 0864
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: PI0Z2SQBkcNql0ti35PCIUNtm90.crl (hash: CvFnFcpZVQ/EMlnENlcOWRtysC6rJrykauRwaVCbOd8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:29:5c:f3:27:8a:a2:2a:b6:41:07:9f:8f:74:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8d19d9240191c36a974b62df93c221436d9bdd
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=401f70ada835d427e87de14b7943c3641a0f6698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:69:e5:39:af:0e:ce:ea:37:3b:1a:51:a0:2c:
71:5d:c1:70:38:1d:ef:33:c4:2f:fe:29:f7:bf:73:
c0:e2:db:e7:ba:31:05:ec:e0:5c:f5:58:5d:44:32:
16:e1:fe:57:3c:05:78:3f:2e:8a:70:81:56:ce:d2:
81:90:57:c0:9d:1a:ae:fe:aa:84:11:5d:82:34:94:
c8:c7:88:76:7c:20:a7:b5:6c:d0:d6:7d:11:9a:87:
e4:f6:2d:60:f7:c1:6a:24:b9:86:ec:9e:4f:bf:dd:
e8:b2:c6:0b:42:6b:21:63:93:79:de:17:e4:eb:91:
fd:3b:b9:ff:90:d6:6b:df:4e:2b:97:56:a9:37:8f:
59:11:fa:b6:bb:20:c9:fd:ec:4d:96:6f:c0:cf:f2:
67:8b:18:73:b1:1d:4d:4c:71:f3:51:46:af:a8:b3:
a6:b0:e4:fb:71:99:2c:f2:ab:a2:1b:fc:7a:86:32:
ff:3d:fb:64:42:90:5e:9f:92:9b:50:22:8c:02:ff:
da:fe:f8:3f:54:86:85:36:20:ba:8a:1b:04:1f:cc:
01:f5:5b:1e:ab:fb:be:fa:97:cc:d4:aa:37:3e:47:
e3:ae:09:c6:4e:37:4d:39:ba:85:a8:bc:c6:e5:58:
30:96:64:1e:a2:44:d7:29:97:63:3c:ac:f3:af:c6:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1F:70:AD:A8:35:D4:27:E8:7D:E1:4B:79:43:C3:64:1A:0F:66:98
X509v3 Authority Key Identifier:
keyid:3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:24:93:0e:f0:39:09:ec:01:6d:2f:98:c0:91:ac:fd:22:f2:
d8:ac:34:f2:86:96:c3:0a:22:0c:f7:d7:9f:ee:c6:a2:8c:45:
19:18:c4:3d:bb:88:4c:1c:ac:04:c6:e9:63:a7:e7:01:ad:8a:
31:01:28:3e:6d:39:cf:49:43:d2:53:2a:5d:71:4b:02:7b:c6:
17:d7:d9:cc:8e:79:95:49:1b:62:ec:48:d9:95:35:e2:2c:ee:
ab:ae:ec:96:8e:b4:c5:2d:6c:8e:09:10:28:8a:6d:23:cb:e4:
77:6a:a1:be:d8:e0:62:a5:cb:a2:44:09:1c:6a:77:1f:9b:de:
f7:88:4e:73:71:08:e6:7e:dc:4f:37:9d:d9:8e:b8:c4:2e:cf:
d6:a7:71:92:bf:98:14:3b:aa:4a:74:ae:18:8d:aa:f1:4a:09:
f4:60:bb:b8:ea:ea:a2:46:d8:7d:b7:0a:4f:cc:21:2e:ba:d4:
81:13:c6:b6:f2:ea:6a:34:40:84:c7:be:06:c9:46:af:b5:50:
28:e9:ec:81:61:03:74:c5:67:5e:2b:de:c1:64:63:3e:7f:e1:
ee:76:24:f5:1c:75:53:dd:8d:86:17:dd:50:3a:c5:8e:6c:c6:
54:fe:71:48:1e:33:1e:a0:0d:b8:ce:6e:85:7e:88:d6:a4:2e:
58:8e:81:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:39 2025 by rpki-client