Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
File: pHFXAbAK3kiVo5p2oNgQDsleq-M.mft (raw, json)
Hash identifier: rqCEDZPkBtgIYGMDMK1NqRIgiP3yMhuE37zx/sewYoM=
Subject key identifier: 6C:2F:65:20:E9:A2:E0:E9:EF:98:4D:FE:C2:BF:DD:E6:12:E8:67:AF
Authority key identifier: A4:71:57:01:B0:0A:DE:48:95:A3:9A:76:A0:D8:10:0E:C9:5E:AB:E3
Certificate issuer: /CN=a4715701b00ade4895a39a76a0d8100ec95eabe3
Certificate serial: 0194BD4E38E44525B944C59E844E4F044DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
Manifest number: 7C
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: pHFXAbAK3kiVo5p2oNgQDsleq-M.crl (hash: AQXzl9d6TwLKrwATeqWS8JZH+R2X7EtYr62ADjg1A/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:38:e4:45:25:b9:44:c5:9e:84:4e:4f:04:4d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4715701b00ade4895a39a76a0d8100ec95eabe3
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=6c2f6520e9a2e0e9ef984dfec2bfdde612e867af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:06:67:7d:65:8e:54:ee:c8:f5:d1:c6:dd:
ca:13:88:5a:97:a3:47:30:60:4f:fd:38:c0:b7:29:
62:d6:32:ec:2b:95:d0:61:8e:88:ef:07:75:bf:87:
23:85:c1:27:8b:21:72:e1:eb:a9:e8:bb:55:7b:11:
66:b1:d0:35:c3:26:34:5d:cf:8a:20:0c:88:ed:83:
c7:cb:3d:cd:f7:21:fd:29:7d:d2:7c:98:b3:71:84:
17:bd:0b:bf:e5:b5:cd:18:d1:99:5d:f9:1b:07:18:
68:ed:3f:a9:6e:3a:80:1a:f6:86:17:29:94:9b:89:
0c:24:a6:66:44:9f:18:ac:92:81:21:a8:a7:5e:86:
22:9f:b6:e8:85:f3:06:e0:f1:9e:cf:17:b1:3f:1d:
89:9d:39:ce:6d:b9:a5:45:82:72:8c:e1:fe:6f:dc:
b1:0e:b2:c7:6c:76:c1:f2:0e:43:89:cb:a4:4e:3f:
61:8c:cd:a3:ce:c6:a1:35:f4:d2:a8:3a:c4:d5:70:
b7:95:61:c0:70:e9:58:6d:77:25:7d:57:60:68:88:
5a:7a:25:91:5e:c6:a0:3b:af:fc:a8:07:52:a0:00:
cc:d0:02:63:f6:b2:09:34:a1:09:91:04:7f:b6:03:
c0:c2:dc:2a:2e:a5:d1:a3:1f:8f:fa:9b:a6:e5:92:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2F:65:20:E9:A2:E0:E9:EF:98:4D:FE:C2:BF:DD:E6:12:E8:67:AF
X509v3 Authority Key Identifier:
keyid:A4:71:57:01:B0:0A:DE:48:95:A3:9A:76:A0:D8:10:0E:C9:5E:AB:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0e:7c:03:b8:4b:17:ac:21:f1:35:48:f3:b6:54:ec:95:fa:
84:fd:9f:61:0e:79:41:2e:bc:3e:b6:72:bd:e1:8f:98:6c:0a:
b0:ea:28:4a:24:30:08:3f:be:7a:b8:88:2c:d5:65:9b:fd:62:
f5:01:3b:81:d9:8d:7f:60:38:be:59:69:78:31:1b:c2:ce:13:
16:e0:f7:f1:18:91:a9:3b:05:67:f5:5a:d0:8f:b0:64:1a:69:
93:2d:f5:a0:42:42:51:6c:47:8e:30:44:78:30:6f:23:08:67:
37:5b:8b:ac:34:c3:57:e3:8a:f3:44:5c:24:3f:85:c6:c4:57:
b9:cb:d2:bb:48:e7:a7:c8:af:a0:79:8a:e7:f6:7b:61:7b:b6:
dd:27:6c:53:50:5f:6c:06:e0:7f:12:ab:7f:5f:c8:0e:fd:3e:
d5:54:f7:f1:c5:63:c7:e9:f6:4c:54:9c:df:22:e0:77:6a:44:
29:9a:fb:b1:5c:4c:73:74:bb:5a:46:21:a9:04:55:3c:40:8a:
c9:b7:93:bb:e8:10:3b:ac:81:0c:ce:1f:aa:d2:5e:9a:56:8b:
47:61:0d:1c:d3:be:72:5e:64:bc:55:34:96:dd:21:a0:07:31:
01:1c:71:23:f2:48:82:06:ed:98:7f:fc:4b:1f:d5:52:c9:f5:
4b:45:d3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:14 2025 by rpki-client