Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
File: P2LKnF7__TIKvS2Px-j4Nee70es.mft (raw, json)
Hash identifier: RVYo5R86Y9zsNehgeNMU/kChdU5od16h2z066mp+x2E=
Subject key identifier: 48:B9:18:BF:9B:9F:B7:F6:FE:D0:F1:99:70:2F:37:00:8B:77:58:14
Authority key identifier: 3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB
Certificate issuer: /CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
Certificate serial: 0194BBCDC4E6D7ACC6DDA2B10B7289553917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
Manifest number: 0823
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: P2LKnF7__TIKvS2Px-j4Nee70es.crl (hash: vzdgDKhKtGNDoHg0JfX1dsaAdrC5kdIhcaOSoJQOQsU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c4:e6:d7:ac:c6:dd:a2:b1:0b:72:89:55:39:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=48b918bf9b9fb7f6fed0f199702f37008b775814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f7:53:57:24:56:a2:fa:e6:f7:84:5b:b3:ea:
e1:c4:09:07:5b:01:27:13:e1:28:b7:0c:96:5d:84:
4a:3d:97:95:08:a2:c0:22:e6:69:16:b7:24:c5:25:
db:c0:9e:29:e2:1b:a1:25:4c:92:af:29:7b:37:4c:
8d:ce:fe:17:c1:61:be:d8:e5:ca:5f:13:58:07:d2:
ea:88:6b:52:c2:d9:a8:22:b3:c0:ff:29:72:7d:f9:
37:cd:75:1a:21:1f:b4:3d:c0:49:73:58:20:74:dc:
de:0e:b2:67:e1:cc:63:b3:36:77:91:d1:40:68:31:
29:2f:42:7e:11:6a:04:5a:8d:15:18:9e:32:58:70:
46:e3:d4:b7:23:90:44:72:80:8a:d6:81:cd:4c:75:
68:26:c1:4a:89:21:c0:8d:1e:33:41:fd:49:71:91:
41:56:c6:f9:79:b4:81:95:90:a4:ea:3f:1f:b4:a6:
a1:b9:d1:d6:87:bc:d9:48:fe:b4:90:36:d4:38:5a:
6e:e6:ad:7c:35:01:f3:ef:7c:51:df:6d:25:7e:a4:
ea:e7:d2:41:f8:06:77:c1:2d:ac:46:b8:a7:3f:21:
e9:6f:03:34:dd:c2:eb:f2:15:29:d2:e2:08:96:78:
e7:5c:e6:5b:12:02:c6:14:32:d3:9f:6a:64:e0:62:
cc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B9:18:BF:9B:9F:B7:F6:FE:D0:F1:99:70:2F:37:00:8B:77:58:14
X509v3 Authority Key Identifier:
keyid:3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:13:69:46:47:79:3d:50:cb:6d:1c:1e:fe:45:44:31:21:4b:
fa:7b:72:71:19:0b:18:df:1a:66:a7:31:15:17:37:33:c5:14:
ff:12:fd:3c:75:fe:65:a8:f7:8a:3a:4d:b1:dd:13:eb:be:b7:
d6:25:55:cc:5b:76:51:07:a4:c9:77:62:c3:90:e5:63:ae:84:
66:25:46:db:f0:f3:14:eb:eb:a7:fd:9d:58:7c:6d:6a:34:cd:
4e:64:f5:6e:7f:d1:60:c8:e1:bb:ac:16:33:e3:b8:6b:7d:96:
07:a3:d1:70:50:80:6d:9f:e1:74:ea:b5:3b:e7:46:51:b0:87:
cb:be:75:2d:cd:87:62:06:d7:a3:23:67:84:07:29:f9:40:29:
50:bf:34:77:f4:72:47:d5:32:7a:95:c4:75:51:b6:6b:87:6c:
f0:14:da:95:41:77:68:eb:2d:01:20:24:af:76:bc:32:47:b7:
31:49:57:5f:3f:04:19:3c:f5:4a:87:08:29:56:f5:97:d6:49:
61:29:01:87:c6:60:5f:4b:cf:0a:2c:65:59:3f:36:75:5e:43:
30:dc:d5:88:41:96:95:69:97:a9:e5:e6:b7:b4:3d:02:4d:0c:
94:34:37:b6:48:f5:f4:8d:f9:79:82:ac:85:c0:c6:b9:93:e8:
31:87:5d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:19 2025 by rpki-client