Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
File: PBC7uXtTnGv4MFlZhVZloOeqbZU.mft (raw, json)
Hash identifier: t6Sj1O7cOxaa4czk+q5BmmzK+Ey9tuRcGU80tUBOdeg=
Subject key identifier: 7C:BF:CD:F9:A5:3D:B6:5B:96:AB:4F:0D:5B:83:6D:DD:72:88:8F:84
Authority key identifier: 3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
Certificate issuer: /CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Certificate serial: 0194BBCEE443A5E82E15EFF5E06CC7A5FF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
Manifest number: 0830
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: PBC7uXtTnGv4MFlZhVZloOeqbZU.crl (hash: MSYTp71FbJX5ol6pi2qmHcCAYt4XDrNYX6NHx1aSvKw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e4:43:a5:e8:2e:15:ef:f5:e0:6c:c7:a5:ff:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=7cbfcdf9a53db65b96ab4f0d5b836ddd72888f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:93:53:fd:6e:1a:1f:c9:2f:6c:93:44:86:
83:25:cc:a9:f8:80:30:ba:54:c4:b8:ac:31:6b:94:
28:71:d1:0c:40:48:3f:8e:55:a0:86:17:ef:50:1d:
30:ee:1a:80:e5:f3:77:dc:17:b0:ac:ce:3b:69:3d:
cf:17:2d:8d:b2:10:af:34:35:43:55:29:95:f7:ba:
f5:af:a8:07:6c:e9:7f:06:7e:c9:04:5a:2d:f8:7b:
fe:d4:1d:26:3c:4d:5e:af:c0:f5:03:b9:11:1b:53:
f1:0b:30:fc:95:34:b1:fb:e5:6e:85:8c:37:be:3e:
48:9a:19:79:b4:ca:ce:73:26:30:7b:db:99:a5:13:
6a:d4:01:8f:8d:b6:e5:57:46:78:da:74:f9:c4:3c:
03:dd:eb:de:93:2f:ad:d0:d2:18:55:43:4e:32:17:
53:cc:a0:35:41:f3:db:c7:e4:e9:00:fc:0a:f3:0a:
f2:dd:fa:76:09:a0:38:ee:d1:38:92:88:7f:ab:11:
43:66:ba:54:5b:45:17:95:5a:16:72:d5:9c:3d:33:
e0:02:e0:f1:7f:46:99:28:ea:ec:52:fb:18:c6:eb:
e6:56:7e:d3:0f:25:bc:47:05:5d:62:6b:d2:d2:c3:
44:f6:1d:60:d0:7b:6a:98:c2:5e:f3:0c:cb:34:0c:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BF:CD:F9:A5:3D:B6:5B:96:AB:4F:0D:5B:83:6D:DD:72:88:8F:84
X509v3 Authority Key Identifier:
keyid:3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6d:ed:90:ec:ab:33:79:c5:81:30:d5:94:57:b8:ca:67:06:
dc:7e:bf:6e:22:4a:69:cb:9b:87:21:67:60:4a:63:34:6e:a0:
8f:0b:80:f5:88:07:00:43:05:70:a4:75:03:71:48:f8:a3:53:
26:e8:f7:b4:f4:df:45:28:e1:da:a1:da:79:1f:9f:94:4f:9f:
91:78:8b:d6:5e:67:3d:90:62:9e:68:59:f3:a6:90:21:6e:6f:
7e:af:56:8c:c2:2f:7e:a2:cf:bf:e7:5d:ee:10:46:03:3f:1c:
f5:07:c9:30:b5:79:1b:3a:5b:a6:00:48:e8:9d:bc:7b:e2:c0:
23:55:b2:5a:4d:2b:67:7c:78:2a:5a:f7:2f:34:99:82:b0:d7:
b6:e0:7c:32:df:6c:e1:2c:bf:6d:20:92:b2:0f:1f:82:f2:d3:
b9:ef:a0:e6:31:d3:55:92:d1:63:53:61:18:b9:3f:59:8e:bf:
b0:84:fc:e7:79:6d:e5:44:89:2a:29:45:20:75:93:42:bf:25:
9c:20:9c:b4:5a:c6:b4:bb:41:88:ac:9f:52:6b:90:c8:e0:75:
88:3c:34:d3:db:51:27:17:62:78:ee:b4:1d:d0:f6:29:63:2f:
8e:de:a5:ab:4c:01:a6:8a:db:4e:48:ee:e2:68:1b:00:ab:06:
57:35:d9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:38 2025 by rpki-client