Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
File: PJUbD8U6RlditFJfyY3_AskMHpc.mft (raw, json)
Hash identifier: D6BQA6U29Prd7fA+rHmIgH0URmt6/90eWbYC1Y3pkAU=
Subject key identifier: C5:FA:C9:9D:64:E2:96:6E:24:55:A6:84:F5:BD:79:19:28:A7:AB:AB
Authority key identifier: 3C:95:1B:0F:C5:3A:46:57:62:B4:52:5F:C9:8D:FF:02:C9:0C:1E:97
Certificate issuer: /CN=3c951b0fc53a465762b4525fc98dff02c90c1e97
Certificate serial: 0194BC3C71B641FA5506AF27BEAD82168BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJUbD8U6RlditFJfyY3_AskMHpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
Manifest number: 0AB8
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: PJUbD8U6RlditFJfyY3_AskMHpc.crl (hash: yQcQCpPFNtX/+xNywulds44iX5miGA66EEWupCvIhyY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:71:b6:41:fa:55:06:af:27:be:ad:82:16:8b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c951b0fc53a465762b4525fc98dff02c90c1e97
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=c5fac99d64e2966e2455a684f5bd791928a7abab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:07:cd:c4:f4:d2:af:29:8b:c3:d8:8f:ee:
32:8d:c7:27:f3:38:88:e2:ba:0d:83:13:79:88:f7:
59:98:9f:fa:ee:d9:b1:8b:12:9d:03:3a:e1:c6:05:
ba:85:76:37:75:87:b7:7a:3f:3f:ba:35:71:4a:58:
8c:b3:e9:fd:a7:da:b1:af:f8:3e:2e:58:83:f5:59:
a1:96:58:83:7e:55:24:0f:61:d6:bb:52:b2:53:ee:
e7:1f:cf:b4:13:7c:43:c4:d0:a2:a0:f2:d3:45:b7:
bd:b0:d1:47:b1:31:d2:d7:35:41:bf:dd:2b:bc:a2:
9e:8a:99:04:72:31:d0:5c:86:cf:d1:52:f0:79:d5:
0c:a5:1c:38:ef:9d:f4:14:2b:2f:ed:b8:33:04:98:
fa:09:60:87:f2:d1:6b:70:ad:b5:32:aa:f6:ae:3d:
e6:97:5e:1e:5f:d1:c6:02:d6:d4:0f:fb:76:ef:4a:
1c:bf:2a:07:10:5a:69:03:1f:89:89:7b:16:be:21:
3e:77:02:f0:d2:b8:3e:5e:75:41:83:36:07:07:59:
bc:9c:e4:ff:70:93:50:ee:d9:b6:fe:b5:bb:c1:17:
21:b5:e8:51:59:0d:f7:5e:43:1b:21:27:c5:c9:a6:
d4:f0:4e:45:f9:43:cd:82:b9:7e:8d:6e:fd:16:4c:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FA:C9:9D:64:E2:96:6E:24:55:A6:84:F5:BD:79:19:28:A7:AB:AB
X509v3 Authority Key Identifier:
keyid:3C:95:1B:0F:C5:3A:46:57:62:B4:52:5F:C9:8D:FF:02:C9:0C:1E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJUbD8U6RlditFJfyY3_AskMHpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:53:83:91:f9:09:d1:92:6a:2e:04:5c:88:71:ad:2e:08:ca:
81:f9:c5:ab:54:ae:85:d5:84:d3:4b:3c:65:8e:d9:2a:7f:be:
8c:a3:bf:1c:8f:b6:cd:8e:65:e6:09:fc:e1:e4:55:80:b2:50:
d0:80:f6:62:7b:4f:cc:04:31:3d:6e:8c:4a:3a:07:ff:bb:bd:
4b:c0:04:72:8c:56:e6:ba:a2:74:fa:ed:7c:6f:6e:78:ac:7c:
7b:a1:6b:75:39:63:b7:db:4c:cd:2b:bb:92:1a:ac:59:9f:af:
c9:5f:33:8e:63:de:fd:73:c8:47:b6:b2:01:87:3c:82:a5:10:
a9:a9:46:3e:5c:de:e1:66:36:16:bb:d8:b6:f5:fc:12:1d:80:
41:0a:a5:65:65:a9:a3:ef:4a:c9:ae:ed:18:c1:e5:62:ba:48:
9c:ee:47:f6:5e:9a:39:b2:f7:6e:56:93:34:26:b9:ee:d5:d2:
ea:51:b7:3f:09:ee:6a:b1:e2:d1:83:ee:97:8f:5b:ae:06:8d:
81:41:fe:75:de:75:b0:42:ec:43:43:be:13:8f:32:92:52:be:
57:ac:01:9d:23:f8:3f:60:f6:9c:44:01:4e:ea:c6:82:da:1d:
90:57:45:ba:55:f0:0d:54:e5:61:29:4b:0e:10:98:c6:68:ca:
f5:8f:80:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:09:59 2025 by rpki-client