Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
File: PuzIGOGpxqhRe81paldEKNbRekQ.mft (raw, json)
Hash identifier: gRgvJ99Q/nkUIdhVC2EisQlecgoTNhoVyfGyd9AHM1A=
Subject key identifier: 38:86:7D:98:88:B3:93:35:32:AD:AD:81:70:88:5B:83:2E:E1:F0:11
Authority key identifier: 3E:EC:C8:18:E1:A9:C6:A8:51:7B:CD:69:6A:57:44:28:D6:D1:7A:44
Certificate issuer: /CN=3eecc818e1a9c6a8517bcd696a574428d6d17a44
Certificate serial: 0194BC04F0C74492FB1E7480E6E159602BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuzIGOGpxqhRe81paldEKNbRekQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
Manifest number: 02D9
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: PuzIGOGpxqhRe81paldEKNbRekQ.crl (hash: sxGiRLvxYCSNGY5MVPfxaxOTC0eRL6lUlIDIie3cLL4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f0:c7:44:92:fb:1e:74:80:e6:e1:59:60:2b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eecc818e1a9c6a8517bcd696a574428d6d17a44
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=38867d9888b3933532adad8170885b832ee1f011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:a8:cb:14:5c:f3:d3:6c:b3:ad:cd:87:8f:
89:7a:49:a5:01:0e:2e:9f:d1:ad:0a:ce:3d:e7:e5:
84:ce:4d:d5:69:98:90:94:97:51:23:a6:0f:fb:9a:
db:7a:e9:e0:fb:8c:8f:03:ef:29:67:66:ec:50:9f:
72:ec:17:90:a2:a5:2a:16:b2:8c:8d:c5:81:00:7d:
60:6e:89:8f:95:c6:54:f7:2b:57:ea:28:56:7e:1f:
9d:b2:0a:41:74:cd:ca:9b:61:fd:e1:f1:86:b6:aa:
4b:00:d5:0f:c6:64:9f:59:99:f5:5b:77:cf:5e:b3:
42:6f:23:b2:12:de:13:23:bc:cc:2f:25:92:86:d7:
78:b6:af:09:af:1c:e5:0e:46:4a:ea:c7:7d:ca:09:
c5:4f:8b:d1:e5:5e:e6:c5:80:33:ec:e7:1c:a4:16:
11:21:d2:97:20:f6:d9:1f:cc:dd:d1:fb:cf:db:50:
d7:d7:7c:29:a3:7a:66:1b:d2:61:68:0a:64:f4:15:
66:2e:1a:e6:9b:82:40:59:4c:1d:ce:ee:46:92:b6:
25:a0:3c:f0:42:3f:03:ce:0a:34:c6:54:27:9c:a1:
75:73:5b:74:3f:c8:51:e2:a0:8c:4c:f5:71:ce:41:
fd:cb:eb:67:4f:12:60:f2:ad:21:60:ca:2f:9d:d5:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:86:7D:98:88:B3:93:35:32:AD:AD:81:70:88:5B:83:2E:E1:F0:11
X509v3 Authority Key Identifier:
keyid:3E:EC:C8:18:E1:A9:C6:A8:51:7B:CD:69:6A:57:44:28:D6:D1:7A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuzIGOGpxqhRe81paldEKNbRekQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e1:22:da:4a:35:dc:84:cc:e8:e5:df:95:5c:d1:41:b2:32:
e2:ab:ff:65:2d:2b:84:96:2f:c0:de:bc:a7:46:f1:94:e7:52:
7b:d8:73:23:d3:bd:f0:14:18:b6:24:c9:a0:ca:5c:ed:cc:17:
1c:da:ad:d2:92:79:cd:0b:3c:aa:56:3c:36:6d:d2:13:5a:53:
af:ae:84:a8:df:c0:91:c0:90:92:a7:4a:35:82:3a:c3:b7:0d:
a7:2d:e4:d0:6c:91:46:90:bd:df:66:df:06:69:fa:10:49:49:
ae:5e:1d:0e:32:8d:21:39:ff:84:ba:27:0b:ae:ba:3c:58:f8:
86:6d:f8:f5:00:2a:77:bd:2e:f8:86:bc:00:93:f0:2d:13:6f:
e1:04:60:0d:bd:6f:c7:3b:7c:8b:4d:02:73:23:c2:4e:07:c8:
78:ff:a2:15:ea:7d:84:9f:ce:7e:a4:7f:61:bd:1e:bb:eb:f1:
9f:0f:e4:14:12:23:02:cf:97:cd:b6:d4:07:55:b5:44:d1:61:
a1:5f:3c:ff:11:0e:88:4c:a1:1e:4b:a3:7e:8e:d4:e0:65:26:
8d:c8:b0:fa:69:c8:91:8d:98:f5:73:58:a2:7b:e4:6b:87:ab:
19:83:3c:c5:68:d6:33:3b:62:6a:df:13:8c:3d:ef:4e:ff:7d:
2e:55:b0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:19 2025 by rpki-client