Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e31f78-68bb-4729-bd65-60d255be0479/1/pnUQ3cUswCV-TCVS9b1XVURUxgs.mft
File: pnUQ3cUswCV-TCVS9b1XVURUxgs.mft (raw, json)
Hash identifier: pNlTvE9GwgAI6CLlMECYqXatZj8fCqCpTikuk8KWpr0=
Subject key identifier: 0E:AF:D6:CE:A8:3A:2D:3A:B9:83:1C:FE:C4:AC:1E:2C:25:CC:57:E1
Authority key identifier: A6:75:10:DD:C5:2C:C0:25:7E:4C:25:52:F5:BD:57:55:44:54:C6:0B
Certificate issuer: /CN=a67510ddc52cc0257e4c2552f5bd57554454c60b
Certificate serial: 0194BC72D3A9FEF347E85FE26A099187C3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnUQ3cUswCV-TCVS9b1XVURUxgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/e31f78-68bb-4729-bd65-60d255be0479/1/pnUQ3cUswCV-TCVS9b1XVURUxgs.mft
Manifest number: 03A8
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: pnUQ3cUswCV-TCVS9b1XVURUxgs.crl (hash: Oiw6gJdOWBltkC+YChXVq6Hz+YQ7O4QU3mUJCatXY44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d3:a9:fe:f3:47:e8:5f:e2:6a:09:91:87:c3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67510ddc52cc0257e4c2552f5bd57554454c60b
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=0eafd6cea83a2d3ab9831cfec4ac1e2c25cc57e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:10:f3:9f:7e:e9:ff:c1:66:ef:12:83:f1:
95:c4:d3:74:6b:c2:0a:09:65:6d:85:07:dc:bb:a1:
36:94:cb:ab:68:b6:23:2d:57:a2:1c:76:5d:92:04:
d6:24:0b:3a:5d:0a:86:2e:48:7a:6e:ab:ee:e5:5c:
25:32:ac:2b:2d:7a:0f:f6:64:73:fa:b9:8e:8e:45:
d7:53:87:e9:88:f1:53:41:29:e5:08:6d:ad:9a:14:
2e:e4:97:aa:90:7f:4e:0e:e4:e2:91:20:0c:e0:7f:
31:53:f5:e1:f6:dd:cd:f7:dd:d7:a9:fb:13:4f:87:
9e:1a:a0:77:03:4a:dc:7b:e2:2a:fc:9e:33:69:d4:
f3:4f:9a:11:a8:2d:d3:89:3b:65:fd:fc:35:7f:56:
b6:cd:3d:c9:64:9c:a8:a9:b2:08:af:84:00:a7:d4:
10:5a:8a:46:a4:e9:2e:3f:2c:10:7b:58:7a:c3:6a:
12:3d:2d:48:1b:7f:6e:88:b0:47:e3:df:2d:0a:98:
9e:41:90:41:ac:74:12:5d:54:c4:c8:ba:84:8b:b7:
cb:e4:b5:8a:6e:f2:4e:5c:f8:98:44:fc:d1:26:a4:
7f:68:b3:f8:f3:01:ea:6a:30:67:6a:c9:09:73:87:
ca:31:ab:d8:ae:7e:4a:95:a4:c1:b5:ff:5a:68:23:
70:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AF:D6:CE:A8:3A:2D:3A:B9:83:1C:FE:C4:AC:1E:2C:25:CC:57:E1
X509v3 Authority Key Identifier:
keyid:A6:75:10:DD:C5:2C:C0:25:7E:4C:25:52:F5:BD:57:55:44:54:C6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnUQ3cUswCV-TCVS9b1XVURUxgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e31f78-68bb-4729-bd65-60d255be0479/1/pnUQ3cUswCV-TCVS9b1XVURUxgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e31f78-68bb-4729-bd65-60d255be0479/1/pnUQ3cUswCV-TCVS9b1XVURUxgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5f:2c:72:95:05:c2:52:4e:57:1b:62:70:77:81:be:83:60:
52:6f:76:70:18:82:89:32:8d:a7:4f:67:3d:db:0d:2c:51:07:
03:cb:00:d1:27:3e:7a:80:32:dd:51:86:7a:ae:4b:15:5c:d5:
7d:fb:4c:4c:13:a4:39:e2:69:c0:6d:ed:5d:de:7f:3f:3f:22:
fb:d4:c0:ef:41:a6:4d:6f:75:a7:f2:1e:0e:cf:8e:cb:95:77:
f9:60:da:ae:9e:71:e0:8f:f4:43:14:ce:48:82:0e:01:ed:e5:
f6:22:e3:6b:4e:9b:7b:85:9d:66:ac:22:08:d8:1e:dc:66:93:
f2:5a:c1:88:2f:9b:ea:10:88:56:95:2b:b2:36:87:44:45:ec:
03:d1:7f:77:48:3a:fd:2d:ea:30:a3:de:a9:d9:b1:28:32:54:
77:c3:e2:a0:00:6f:61:74:6a:68:95:17:cf:23:04:b8:60:9d:
ba:38:6b:c1:c8:b1:a0:2e:c5:dd:34:35:02:41:60:86:ed:51:
55:b0:0e:47:22:70:30:73:a7:62:f7:69:c7:c0:c3:75:fe:60:
28:16:de:94:73:2c:e5:9c:23:e4:ff:b8:19:f6:78:f2:3b:e9:
2b:d4:b5:fd:d3:6c:12:bb:10:86:0e:f3:2b:d2:a9:14:03:63:
ec:1f:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:12 2025 by rpki-client