Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
File: pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft (raw, json)
Hash identifier: FV97TnLHAizfRf3LT+IMelZ0cw/c4sw41mGcBCO3FcY=
Subject key identifier: D1:F5:DF:82:89:64:F4:D6:59:53:9F:77:FC:E2:62:1E:28:FE:25:19
Authority key identifier: A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
Certificate issuer: /CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Certificate serial: 0194BD17DFD10E3803B9FB1C71BCA7CBAAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
Manifest number: 125A
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl (hash: u3C9nj5eqbU5E8PnNp0DNLe8MyZsvq1maSC+LM/kVRE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:df:d1:0e:38:03:b9:fb:1c:71:bc:a7:cb:aa:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=d1f5df828964f4d659539f77fce2621e28fe2519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:43:ed:a7:00:08:df:ce:e9:e9:13:f2:00:
79:56:27:1a:d6:f1:a8:46:81:bb:d4:a9:42:98:a0:
c6:96:57:56:76:8e:6d:24:4c:7f:49:6e:07:44:55:
5b:d3:61:ba:e2:77:29:18:9a:39:92:35:b0:61:04:
2b:99:d6:82:a6:5f:64:92:02:c8:ca:a2:9e:8e:75:
95:49:63:a9:d6:11:56:18:22:5d:83:e4:85:af:ee:
88:eb:30:67:dc:68:12:b4:b2:da:ba:fd:61:63:6e:
28:f7:9e:7b:8e:c0:01:52:6d:af:06:58:96:31:8a:
ed:8d:ee:14:a1:5b:1c:49:8e:6b:16:a9:a6:a9:92:
83:ba:ca:e8:33:18:e2:75:b5:76:55:32:57:c0:8d:
43:e0:4a:25:d6:7c:50:30:9c:f9:fa:8a:84:b6:a6:
4d:22:13:92:f3:ee:00:a5:ba:e5:22:5d:7b:ee:92:
c6:a3:57:27:3e:29:03:36:8a:ed:95:60:56:d1:af:
d4:66:5e:7a:38:02:55:9a:36:a6:6a:dc:8e:02:0c:
e3:03:ac:69:a0:ea:31:1a:cc:d2:e8:8c:a3:32:3a:
ac:85:ff:d5:59:35:c4:aa:c1:41:e1:db:d3:2b:cd:
13:5a:be:b8:b3:d0:70:1c:7b:26:f2:77:b8:bb:16:
72:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F5:DF:82:89:64:F4:D6:59:53:9F:77:FC:E2:62:1E:28:FE:25:19
X509v3 Authority Key Identifier:
keyid:A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:61:a1:2f:a9:5a:bc:7f:ec:bb:84:4f:3b:97:08:0f:72:4d:
ce:7e:2e:89:26:36:7b:38:f7:71:dc:57:bd:aa:3b:9d:19:c7:
a1:2e:f3:7d:1e:26:4b:dc:75:37:b0:a6:46:65:e1:ab:f4:c9:
24:ee:3a:fe:38:b5:34:64:cc:86:d6:3d:58:f1:c7:46:01:bd:
29:40:b8:7b:40:7f:d1:73:26:8c:a3:ff:ce:9f:d4:d2:12:7d:
71:21:2f:2e:76:9d:23:05:7a:e9:b8:26:cd:ff:f5:b2:78:ed:
48:77:d3:56:e8:56:cc:c3:e3:87:45:0f:d2:ad:57:6c:b9:f0:
9d:07:2a:cd:c3:3a:ea:e1:4e:d7:08:f8:a9:f5:67:85:a6:b2:
a7:66:35:a1:c0:83:da:9b:d0:de:6b:8b:9f:cb:4d:26:5d:8f:
b6:c7:78:8d:9b:98:b4:cc:d8:a0:65:59:e2:28:63:e6:d7:18:
5c:0a:c2:a6:b5:c4:10:72:a2:33:5b:4f:65:c6:7d:c9:3c:41:
23:6f:c4:88:5a:bd:78:11:c1:96:20:a6:6c:29:58:62:54:fa:
a5:7c:bc:22:54:43:a4:46:f6:25:b9:65:54:43:4f:b9:8b:62:
c1:15:f1:ba:20:37:24:a4:91:92:41:60:1b:20:7f:e4:0d:94:
60:73:88:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:52 2025 by rpki-client