Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
File: pgkmXYlPp5_NZUL6zAujiXOMhFk.mft (raw, json)
Hash identifier: rhbSvJBSuNuWkdfn9YfEqBtP7YSqP5h/9+LM26E+duQ=
Subject key identifier: CA:CD:AB:54:9B:51:B7:6C:88:5B:38:A5:A2:AD:F1:35:17:91:B3:E0
Authority key identifier: A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
Certificate issuer: /CN=a609265d894fa79fcd6542facc0ba389738c8459
Certificate serial: 0194BBCE45EE870ED3EA0FA42CC28DE7B7F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
Manifest number: 0742
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: pgkmXYlPp5_NZUL6zAujiXOMhFk.crl (hash: O18YOvtfSIjFTlCp9IQhrLgdbsddbmJ0KY5CLhus/Oc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:45:ee:87:0e:d3:ea:0f:a4:2c:c2:8d:e7:b7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a609265d894fa79fcd6542facc0ba389738c8459
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=cacdab549b51b76c885b38a5a2adf1351791b3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:08:92:03:44:8d:c4:1a:2c:01:7d:d2:db:
dd:e9:6a:dd:e2:21:73:37:76:6c:a2:ea:1c:b5:ed:
94:31:1f:54:fc:21:9b:85:4c:98:f4:61:e9:5d:a0:
96:b9:cf:d5:6a:58:4f:01:30:43:bb:08:46:74:7d:
34:c5:cc:92:0f:4d:56:a5:2e:d1:59:74:3f:63:de:
ed:54:e3:11:ce:de:07:08:a4:a9:a0:8c:55:78:33:
de:24:dc:ef:ab:04:3c:ed:77:c7:b4:55:94:eb:7b:
09:7a:ef:4a:3e:57:c6:2c:ff:d5:63:d9:3b:22:8b:
55:82:63:fa:d7:9e:e8:0c:b8:58:c1:07:b0:4a:9c:
f8:16:4f:6e:fa:ab:1f:c6:56:df:e3:16:8a:ab:66:
9b:65:e8:d8:79:1b:4e:75:42:0b:fa:42:0c:bb:31:
e0:cd:c9:84:8a:51:47:0f:00:07:67:09:97:30:09:
fa:ae:69:33:ef:f3:7d:76:6a:06:cf:0c:dd:6f:4e:
04:59:30:bd:11:6f:fe:a4:7e:48:d2:56:ab:3a:b1:
a7:de:ee:b2:c5:3b:f7:ff:4a:2f:9b:cb:de:b3:d9:
dd:5d:1f:e4:e7:a9:8f:a7:dd:fd:5f:8e:58:ca:2a:
d7:cd:86:e2:6d:9c:92:da:75:ec:f7:03:14:bb:4b:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CD:AB:54:9B:51:B7:6C:88:5B:38:A5:A2:AD:F1:35:17:91:B3:E0
X509v3 Authority Key Identifier:
keyid:A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:98:83:9f:72:ec:be:29:c3:ac:39:8a:c3:28:b4:93:e4:72:
53:c3:30:24:93:1f:39:55:a7:83:43:c5:e0:6c:bf:af:33:fc:
dc:23:25:d0:9b:f4:4e:39:05:ea:7e:b4:aa:56:41:98:e3:e8:
e3:5c:40:9e:24:c3:f3:92:ad:42:79:b4:28:4b:f8:7d:c9:df:
d5:7d:35:2d:5e:e5:ad:86:8d:aa:6a:bb:b2:6c:73:1f:50:69:
6b:3c:2a:9c:91:d2:d6:73:b8:7d:d5:1d:62:63:10:09:89:21:
fb:7b:36:03:6b:bf:9c:86:b9:f8:1c:e7:1f:a5:8b:bb:67:7d:
4e:e7:6b:ef:31:7d:eb:cf:38:42:62:fe:56:63:05:f6:37:96:
26:69:4c:38:a8:db:14:40:f1:42:23:53:2d:6c:cf:f4:6c:42:
1b:b3:d0:5f:63:15:c1:16:4e:06:e6:20:30:e6:af:a3:a9:98:
da:63:66:49:03:a9:8a:60:32:c1:13:a1:c1:97:93:f3:c7:ae:
c5:4c:6a:c9:20:b4:96:a5:9b:7e:eb:a2:e5:7f:b4:c4:f7:99:
1a:ec:83:32:49:c3:e4:67:22:1a:d1:47:6a:28:9f:f3:1a:76:
bf:c7:ab:44:3b:4a:b3:a0:cf:54:ad:ca:f7:f3:13:5e:59:89:
01:63:80:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:59 2025 by rpki-client