Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
File: pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft (raw, json)
Hash identifier: vLsGeslHr+bl+6au7z6bMlG9DMrZesGvCY+mybFz4ME=
Subject key identifier: A6:45:34:5B:87:21:55:A0:46:DE:19:01:7F:F1:DA:43:C4:41:42:78
Authority key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
Certificate issuer: /CN=a5c22864e3920e160ad9b84ff01da866aa409785
Certificate serial: 0194BCA9EF2E577C53FFE57271F1291F8BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
Manifest number: 02FE
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl (hash: 0DOeW2WLV/f1apbCGqwzRYecbZJOnUi6Sf4T0Wskovw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ef:2e:57:7c:53:ff:e5:72:71:f1:29:1f:8b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c22864e3920e160ad9b84ff01da866aa409785
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=a645345b872155a046de19017ff1da43c4414278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:f2:17:85:13:a5:07:e2:5f:38:99:9f:c4:
8d:40:a5:72:7e:d5:d1:6b:18:42:62:31:df:db:cc:
98:70:ac:fa:43:de:a8:55:0b:93:83:9d:c3:e6:d8:
10:98:e1:12:e5:7a:6b:ac:a1:ec:cd:fa:c4:35:d7:
05:f1:c7:ef:4b:47:d9:6a:00:c2:59:78:ad:d0:a2:
5c:36:27:3d:89:99:bc:89:f2:f4:30:13:20:02:5d:
25:25:9c:f7:3d:82:a0:55:6c:41:37:5d:8f:ca:4b:
5b:cc:79:c5:2b:bc:ab:18:e1:7a:c7:5b:48:52:b3:
6e:24:65:20:e9:bc:df:71:06:51:8d:b4:6a:c1:85:
63:cc:36:19:78:bc:f8:53:c8:65:11:1e:01:d0:ee:
ab:ec:69:d6:db:30:13:5b:cb:2e:e7:95:ff:9f:57:
04:11:68:0f:49:3c:1b:9c:4f:70:23:2e:35:cf:ad:
02:88:91:30:a8:75:02:ba:1e:f9:21:ca:53:58:2e:
31:27:4c:0b:0d:24:1e:bd:34:f1:53:e7:70:dd:2c:
06:e2:48:53:c6:84:2b:cc:2e:82:4b:0f:8a:dc:d5:
19:16:ec:86:50:1d:87:35:7e:3b:ef:3f:45:a6:2a:
70:e0:a3:43:bc:5f:24:87:e7:5c:f5:73:b2:33:ab:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:45:34:5B:87:21:55:A0:46:DE:19:01:7F:F1:DA:43:C4:41:42:78
X509v3 Authority Key Identifier:
keyid:A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:aa:90:c5:b7:3a:bd:8a:b6:be:ea:c4:df:ad:5b:93:ea:1c:
4f:4b:36:5a:34:5a:0f:29:68:68:f9:23:63:55:8f:1c:14:5a:
cb:84:82:58:59:e8:dc:6c:48:29:a9:91:53:84:e5:ba:69:17:
50:3d:cd:d1:44:ae:b2:e3:d7:8b:b8:2c:48:7c:54:50:f0:08:
b0:f0:ff:1c:88:d2:42:df:c7:a6:0f:fb:af:3c:bc:1a:cb:f5:
66:b9:f9:60:ff:5d:b9:ec:5a:16:a6:7e:91:01:39:87:94:2e:
bf:69:0d:9c:1f:14:cf:6e:e0:47:47:b8:fa:0d:6e:3e:ee:03:
9c:4c:17:a7:20:4a:0c:f1:c1:a0:cf:1f:c4:01:81:94:f9:f2:
3c:a4:4e:e7:bd:37:ea:b6:68:68:c3:4b:3b:f0:c1:b6:cc:20:
37:7a:57:ae:a5:08:a3:87:87:03:92:cd:11:0e:2b:ec:b5:e2:
b2:3d:f1:66:29:69:f3:8d:e7:c3:a5:32:ba:fb:82:8c:e8:38:
47:13:4b:17:49:30:ec:0d:52:c6:4a:39:b3:b6:d9:65:88:09:
0e:5d:fd:b2:0c:5e:f8:88:a6:9f:94:c5:b7:73:76:d0:73:7a:
1f:f7:2a:31:0d:13:bc:76:73:52:17:51:ff:98:8d:ee:90:c7:
e6:aa:ad:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:38 2025 by rpki-client