Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
File: pKgNKvhhtwo37AUOAT5t-6lMiz0.mft (raw, json)
Hash identifier: xuOYqHT/buN8J1yv0PdSVTJt31nYYetwG+Ql4Y6QviY=
Subject key identifier: F6:ED:2A:8D:FB:EA:B5:2F:67:85:A8:0D:1D:A5:6A:64:64:3A:BB:E1
Authority key identifier: A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D
Certificate issuer: /CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
Certificate serial: 0194BBCDDB6A78D7A14B3B0259D909358E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
Manifest number: 0CCE
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: pKgNKvhhtwo37AUOAT5t-6lMiz0.crl (hash: ZKW4AsKcgDhBIR1oXB1yhY/uTQnbaDseG+FRguuuKQc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:db:6a:78:d7:a1:4b:3b:02:59:d9:09:35:8e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=f6ed2a8dfbeab52f6785a80d1da56a64643abbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:11:3c:3d:9a:5c:9f:a9:27:34:37:fb:13:bd:
6c:15:54:f5:1b:8a:a2:c0:65:7d:0f:fa:e8:82:e7:
08:fb:72:e5:02:52:b5:9a:a2:94:a1:f3:09:e4:65:
90:57:57:b7:b1:38:aa:3c:8a:b3:1e:0c:91:3f:3c:
e3:79:fe:65:74:42:ba:3c:84:75:e1:4b:0c:98:da:
33:a7:c3:17:48:51:87:7e:1d:4a:9d:36:4b:66:1c:
ac:75:79:ee:32:9a:8f:c9:c3:2d:42:ce:a6:98:e7:
7a:21:7a:05:31:2c:9d:94:d9:eb:04:1c:71:76:7c:
ef:10:49:3d:92:99:13:1b:f6:63:51:09:5d:7a:d5:
31:43:9f:b4:14:4a:02:0a:1a:69:56:cb:07:a5:7f:
ed:a0:a6:46:3d:5d:18:02:5e:f0:c0:55:45:15:5c:
6d:56:4c:28:a7:9d:90:9c:87:b5:83:a0:3c:29:de:
47:85:78:4e:5d:0c:b1:7c:93:7a:45:42:a5:5e:39:
0e:c9:aa:fc:d2:d2:ee:03:70:ac:83:6a:82:b8:29:
f3:e2:11:c5:03:19:74:c8:65:8d:e1:8d:50:2f:3c:
3a:29:2f:22:23:29:69:db:60:65:e4:42:27:bc:4b:
25:fa:06:e7:fd:1f:82:9f:36:22:0e:07:48:00:97:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:ED:2A:8D:FB:EA:B5:2F:67:85:A8:0D:1D:A5:6A:64:64:3A:BB:E1
X509v3 Authority Key Identifier:
keyid:A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5b:29:46:55:93:12:ae:bf:62:60:98:c3:11:bc:0f:38:95:
50:e8:c9:b6:b0:93:12:05:db:2c:88:26:67:7c:31:38:c8:8e:
da:73:fa:67:19:40:1a:98:2a:ae:14:a0:5d:b7:0a:fe:0b:fd:
7d:27:16:83:50:71:fa:88:88:58:0c:38:60:5f:16:36:8d:69:
10:b4:93:8b:e2:0a:20:16:26:9b:55:c9:ba:89:d1:84:01:89:
d5:3b:4a:95:cd:70:ff:73:de:9b:c1:74:3b:19:b2:f7:1f:60:
3e:2b:fc:1b:f2:ed:0c:72:4b:7e:05:06:ad:5c:cd:15:8a:cd:
71:a6:a9:b0:d8:ef:f4:45:68:8a:f6:9c:90:35:13:37:2b:ba:
d2:14:d5:75:e7:d8:49:0f:af:61:ec:c1:09:74:59:a7:79:d3:
7e:1a:1c:4e:40:dc:62:88:41:a6:0c:eb:37:8d:3a:54:dc:3b:
c9:ec:a2:9e:3d:52:3b:24:21:08:cd:c1:a5:fa:e1:f6:d4:2c:
3e:a1:62:a9:d5:22:5e:f6:ec:4c:f4:cc:46:ba:97:e1:6d:11:
92:49:7e:f6:5c:94:dd:cd:79:89:df:f8:ea:c8:a6:5a:f1:a2:
5d:44:54:6c:78:3b:85:d9:3a:63:2e:5b:2c:ef:f5:a4:a8:f6:
c8:49:49:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:18 2025 by rpki-client