
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.mft
File: PRtnzNpJyN5IkpNB9t6KK2Als6Y.mft (raw, json)
Hash identifier: h/61QgoOQnM3nKVaut3lxz2TV001hWxju58caBY33Yc=
Subject key identifier: 1B:A2:A5:6F:49:6E:B2:AD:0D:7A:21:E2:20:EE:95:AE:ED:15:1F:02
Authority key identifier: 3D:1B:67:CC:DA:49:C8:DE:48:92:93:41:F6:DE:8A:2B:60:25:B3:A6
Certificate issuer: /CN=3d1b67ccda49c8de48929341f6de8a2b6025b3a6
Certificate serial: 0194BBCED4830F2D61FF39C8E3F3525B514F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRtnzNpJyN5IkpNB9t6KK2Als6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.mft
Manifest number: 01AE
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: PRtnzNpJyN5IkpNB9t6KK2Als6Y.crl (hash: Qspx0nfOu1RWBrLUq6Q6iBHbPUM5JlLtV4/Ur5ep/v8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d4:83:0f:2d:61:ff:39:c8:e3:f3:52:5b:51:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d1b67ccda49c8de48929341f6de8a2b6025b3a6
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=1ba2a56f496eb2ad0d7a21e220ee95aeed151f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:c1:d4:e3:72:81:84:74:ff:c2:c4:f0:1a:
7a:35:17:ee:2a:56:b7:20:37:fd:da:0e:8b:aa:01:
38:36:4b:c5:c4:07:46:5a:9e:fb:82:ef:4e:13:f2:
e9:1b:11:39:d0:dc:d6:8d:2f:2a:dd:e0:49:12:a7:
93:91:5e:8b:1e:a8:2a:2f:a3:d2:90:58:5a:4f:71:
37:93:dd:50:8c:a8:bc:d0:34:75:fc:7c:26:2d:44:
71:e1:b9:bc:7c:14:69:ae:df:cf:aa:20:07:66:1f:
ec:0b:16:f0:ae:9c:0c:65:34:b1:0f:0f:c7:79:82:
7a:cd:a8:9a:87:47:89:97:92:1c:e1:37:91:ce:25:
2c:7d:83:58:6d:d0:9f:c3:98:88:53:a2:90:2b:35:
48:03:b7:db:97:37:af:85:18:fe:46:54:1d:b2:e0:
ab:cf:a6:74:bc:08:b3:f5:62:5f:a3:c8:40:2f:b1:
00:67:78:b3:cb:49:42:a7:1e:4a:1f:84:ca:5b:9b:
63:17:9c:00:70:d8:15:1b:7a:4e:4f:a9:7d:06:2d:
f3:d1:c5:f6:9b:90:ea:ee:1d:51:a4:81:ac:fa:84:
14:f8:50:05:af:82:da:7a:10:93:33:35:8e:1c:ab:
ed:c9:12:e7:74:dc:75:aa:1b:a5:4a:ec:17:ad:a8:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A2:A5:6F:49:6E:B2:AD:0D:7A:21:E2:20:EE:95:AE:ED:15:1F:02
X509v3 Authority Key Identifier:
keyid:3D:1B:67:CC:DA:49:C8:DE:48:92:93:41:F6:DE:8A:2B:60:25:B3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRtnzNpJyN5IkpNB9t6KK2Als6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cf:d2:db:d1:3d:6e:e9:7f:5e:67:3c:36:b1:c3:0f:40:24:
66:9c:b7:54:f9:15:96:4a:c2:b6:45:ff:6a:60:3e:25:ba:1e:
d5:70:27:2a:62:0e:ea:b3:05:7b:7a:90:ac:03:cc:6e:2a:42:
69:e3:fc:44:4c:b6:94:e4:1f:86:f8:19:db:8f:20:ff:b9:1c:
16:39:ee:ff:d9:ee:70:ec:43:bd:f8:01:97:b5:14:69:09:02:
6c:a8:a5:1f:4c:1b:16:87:9d:20:0a:6e:8d:25:52:b0:3a:b0:
e1:0b:89:6a:74:6b:d5:e0:bd:f9:64:72:3e:0d:45:c5:d0:55:
d9:c7:00:5c:4c:95:e2:cb:61:5a:c2:25:e1:4c:d7:3c:b3:05:
d9:f3:1e:54:d6:6e:f8:b8:cd:b6:b6:ea:80:5c:5b:78:55:53:
e0:f5:c7:91:ad:fc:a3:aa:08:6d:0d:24:d4:bb:14:82:18:bf:
ff:c6:06:1e:65:86:b6:e7:5c:88:68:97:c4:ad:a6:ef:aa:94:
db:7a:b0:06:a7:6a:01:2d:88:bf:1d:f2:86:a3:29:00:fc:c5:
49:95:77:95:47:29:2b:ad:1c:48:3e:8b:d0:b7:24:29:a5:07:
41:6e:88:d0:8b:43:83:92:48:80:1d:1f:66:f3:08:3a:5d:36:
c6:2f:86:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:39:45 2025 by rpki-client