Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
File: pkLcUMWwgtCc5unHvqeug3EHPvI.mft (raw, json)
Hash identifier: cFEDTEBPjN/R2+dOOTDhoRU+LP7a2XcA17TmNr29axM=
Subject key identifier: DA:67:6E:C6:6F:28:53:3D:4A:41:79:D2:05:F9:C3:EC:58:1E:4C:86
Authority key identifier: A6:42:DC:50:C5:B0:82:D0:9C:E6:E9:C7:BE:A7:AE:83:71:07:3E:F2
Certificate issuer: /CN=a642dc50c5b082d09ce6e9c7bea7ae8371073ef2
Certificate serial: 0194BBCE8E4DDD5F11F902C2DB0F9DCCBA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkLcUMWwgtCc5unHvqeug3EHPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: pkLcUMWwgtCc5unHvqeug3EHPvI.crl (hash: XBNJvJsVHuUZgwQMNkPrxuLXTpLOxJLAWYNihq5uzzA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8e:4d:dd:5f:11:f9:02:c2:db:0f:9d:cc:ba:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a642dc50c5b082d09ce6e9c7bea7ae8371073ef2
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=da676ec66f28533d4a4179d205f9c3ec581e4c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:81:d2:ac:65:14:65:64:e2:08:4b:71:7d:58:
2c:4a:6a:1e:18:cd:68:a9:b6:02:f8:50:d6:f8:4c:
75:59:da:93:1f:69:51:d0:8c:34:e1:85:d4:6b:8f:
d2:cd:b6:66:2e:c4:ed:17:91:d3:72:0f:c0:44:2b:
b9:a3:ba:30:82:ce:cf:1a:58:52:6e:d7:fe:f2:cc:
af:86:89:8f:60:46:13:00:2e:bf:4c:a3:8f:61:79:
77:70:44:c1:4f:86:52:6e:6a:16:44:47:d7:ad:66:
ba:e9:38:4b:d7:49:ba:9c:c4:37:0d:23:0f:6a:f0:
cc:e3:38:93:a9:41:20:fe:d3:59:df:21:83:85:c0:
99:64:d6:51:9e:34:88:fe:ed:c0:cb:b9:70:ae:3c:
0d:7f:a0:d0:29:8b:c5:12:dd:fa:56:7c:40:bd:6f:
a8:d4:65:ab:86:a2:46:23:12:6b:cf:3d:e5:46:f6:
65:e6:a1:63:33:ca:b4:4a:bb:df:ee:9b:b9:b7:23:
4d:4f:9b:34:93:69:05:98:4d:43:65:41:ca:9f:6d:
32:e2:76:c7:fd:bb:92:1a:df:9e:73:b4:db:27:f3:
63:d5:9d:6e:1a:34:06:30:70:a1:7a:a0:e6:97:df:
ba:ca:0e:c1:5c:44:dd:24:fc:76:35:59:e9:1d:f6:
8c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:67:6E:C6:6F:28:53:3D:4A:41:79:D2:05:F9:C3:EC:58:1E:4C:86
X509v3 Authority Key Identifier:
keyid:A6:42:DC:50:C5:B0:82:D0:9C:E6:E9:C7:BE:A7:AE:83:71:07:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkLcUMWwgtCc5unHvqeug3EHPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b7:41:8d:10:f0:8b:e9:eb:40:bc:9e:78:10:d1:36:bc:c4:
90:75:db:26:bc:ac:00:69:b8:81:a1:a1:03:02:66:2e:05:a6:
ef:1b:be:4a:79:c0:1c:c7:bb:99:23:d9:8f:f1:f3:8a:f9:02:
f5:85:6d:08:22:94:fb:bf:7c:e5:88:69:24:e7:a0:ea:19:ae:
f9:8a:6c:fa:7c:b4:e5:bf:d8:bc:c2:c1:31:bc:29:88:e2:a0:
b4:80:8c:10:f8:7b:99:02:2d:78:f1:5f:cb:34:80:fb:ca:42:
e4:40:02:3c:12:c9:06:17:2d:5c:64:39:7c:37:b3:10:02:ce:
05:95:8d:36:dc:0b:f6:e2:82:95:c6:a2:e2:77:5d:4e:5d:d2:
8d:ce:10:af:b8:9d:c1:4c:83:58:a0:a7:e9:0e:aa:97:f1:7c:
1b:9d:b3:5b:4f:47:18:3c:b1:95:e5:d9:69:99:2c:1c:24:49:
66:c4:80:a0:1d:a5:64:46:89:52:3d:7f:08:7c:ba:13:53:79:
eb:71:ed:f1:bb:9c:93:4e:49:2c:40:2e:59:d8:5a:40:62:6d:
b6:61:4a:93:2b:f7:18:05:ef:37:95:b0:23:95:9b:93:10:64:
d8:a5:d8:96:c5:37:b0:59:72:04:e5:f1:1e:17:67:9f:8b:6c:
13:e5:e7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:30 2025 by rpki-client