Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
File: Pn1HTATkiliTr3HDWnfN1oJv0zk.mft (raw, json)
Hash identifier: Odo1blDeF3Nzf1h+NzkWXNojmeRdWxHQADn3ofTp3R4=
Subject key identifier: 5C:3A:E0:10:6A:8C:0B:AE:66:D1:4E:20:DA:34:12:94:60:89:D7:DC
Authority key identifier: 3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
Certificate issuer: /CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Certificate serial: 0194BD4EC45670BB9DAA85FA3D17BC60162D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
Manifest number: 02D6
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: Pn1HTATkiliTr3HDWnfN1oJv0zk.crl (hash: NoSmu2E7LdSEguQZ02lDdPrJ+wHF0k6ODArwsTgMN2w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c4:56:70:bb:9d:aa:85:fa:3d:17:bc:60:16:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=5c3ae0106a8c0bae66d14e20da3412946089d7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:32:37:fe:e9:98:ce:ac:f6:77:22:b4:f3:a6:
81:ea:be:98:8a:9f:07:f6:05:e9:cb:e2:0c:3b:71:
38:a4:9d:fe:65:a0:4b:fb:57:62:c3:c3:7c:90:05:
ac:02:0a:3b:5d:be:fd:15:cd:26:e6:c5:ac:4d:aa:
66:a9:b4:4a:6d:47:d9:2a:7c:4e:0a:53:cc:3a:51:
e9:dd:2e:0f:3f:f8:86:49:b4:47:d0:d7:62:ea:d9:
8e:ee:a5:d1:61:33:f5:c5:51:35:d2:09:c2:71:34:
25:0d:5c:a1:a8:86:81:f6:10:73:e4:83:a6:3a:49:
c3:08:8b:4e:db:4b:97:f9:10:ab:ae:1e:72:ac:f2:
f8:de:c4:8c:81:e2:3e:38:1f:36:5e:74:75:1c:26:
d5:e9:82:9d:e0:f2:2c:b0:e0:ab:d8:ef:74:3c:ee:
79:ab:fc:77:f2:07:af:f3:1a:06:61:2d:79:ba:7c:
ac:83:96:db:90:3e:1b:f4:c3:0e:57:bd:90:e2:00:
f9:e4:b2:7e:6a:ef:d6:aa:24:14:01:09:5d:b8:7f:
b2:26:42:ce:41:38:e0:51:1a:7e:85:6f:49:8e:91:
d0:ab:0a:d5:94:1e:97:0a:12:92:77:b0:df:dc:8e:
8f:9c:33:59:ab:be:2b:f0:9e:12:8c:24:7f:99:4c:
6e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3A:E0:10:6A:8C:0B:AE:66:D1:4E:20:DA:34:12:94:60:89:D7:DC
X509v3 Authority Key Identifier:
keyid:3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6f:ab:a9:34:ee:a9:66:0d:dd:93:0b:0d:9c:c8:f3:ce:94:
bb:63:46:e7:40:3c:13:50:1f:1a:10:fd:ef:6c:08:eb:23:60:
7b:bc:ff:8a:50:26:a3:87:4f:b1:2f:6e:31:7c:aa:6f:43:0c:
9a:9e:58:33:19:78:81:6d:3f:7b:e1:b0:26:81:8c:1e:23:b3:
cc:85:2f:ad:91:68:46:e3:65:e4:71:70:24:e0:42:d2:0d:ed:
fc:42:7b:5e:7b:3a:a7:80:27:02:88:d3:a3:fe:ed:6b:a8:89:
70:af:b2:c5:59:fe:23:b7:ca:36:c8:3f:e1:a4:88:d4:2c:47:
9b:26:f3:3e:24:6b:63:a7:69:b0:83:2b:c4:9a:aa:d1:9b:f2:
62:4b:ce:38:4f:db:55:87:de:d5:f3:45:f8:05:91:c3:dd:0a:
c4:25:75:ed:ce:de:af:bd:c7:8e:ca:c0:e2:d0:8d:ed:e5:af:
25:70:60:1a:cf:c2:eb:25:e9:80:3d:50:b3:0d:a7:62:69:4b:
1e:e6:cd:d0:a8:3a:f5:c3:42:1a:72:23:50:77:ff:82:db:99:
f5:e6:ce:44:14:79:ee:6f:d4:60:53:f5:e7:3f:9c:3b:01:61:
00:48:bf:b9:4a:5f:58:6a:ee:61:5d:1f:73:6a:cb:bb:b5:30:
74:a9:93:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:35 2025 by rpki-client