Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/55de90-bcf6-41a6-a9e8-408229f0baf1/1/pukanXyu9IGGdMXWJigTYVyJ3lY.mft
File: pukanXyu9IGGdMXWJigTYVyJ3lY.mft (raw, json)
Hash identifier: gDlMTCg3RTWG7lv73hjZrwnurIuuQVWavuP4G50DbJE=
Subject key identifier: B4:51:C8:66:5F:18:9D:D3:32:2C:E3:9C:C3:F3:3C:4E:3F:61:F6:1B
Authority key identifier: A6:E9:1A:9D:7C:AE:F4:81:86:74:C5:D6:26:28:13:61:5C:89:DE:56
Certificate issuer: /CN=a6e91a9d7caef4818674c5d6262813615c89de56
Certificate serial: 0194BBCEF921B0644E569E09E18852FFF5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pukanXyu9IGGdMXWJigTYVyJ3lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/55de90-bcf6-41a6-a9e8-408229f0baf1/1/pukanXyu9IGGdMXWJigTYVyJ3lY.mft
Manifest number: 0D9D
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: pukanXyu9IGGdMXWJigTYVyJ3lY.crl (hash: aqqBTd10AEgmaH+XG45SXTr538+FmzZzJWi5nIJv2aM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f9:21:b0:64:4e:56:9e:09:e1:88:52:ff:f5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6e91a9d7caef4818674c5d6262813615c89de56
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=b451c8665f189dd3322ce39cc3f33c4e3f61f61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:82:60:65:14:f4:02:ce:29:6f:37:a6:e4:
9d:9a:f8:bc:ca:d5:16:5f:bd:ce:12:a4:1d:8b:b3:
e6:0f:e7:86:1a:5d:26:94:44:21:4e:18:1c:9e:ac:
da:95:5e:d2:96:fe:60:91:04:e3:63:f3:10:76:97:
3d:05:e2:49:38:7c:dc:c2:72:c6:a2:5f:60:33:97:
e0:5e:48:21:6d:54:6b:8c:72:cc:04:2d:d8:c6:c7:
29:ff:1a:09:20:e2:10:d2:cd:d9:ff:c5:03:e1:c2:
fe:7f:ec:3b:88:06:2f:15:ef:57:83:ba:96:f8:69:
1a:91:6f:ab:61:74:73:26:22:20:6b:3a:61:ea:37:
57:d7:aa:2d:4e:01:5a:89:6c:fd:11:91:80:28:70:
2c:41:fc:54:0c:e7:80:51:a5:8f:52:15:ed:06:51:
25:ec:53:d2:94:77:fc:6a:55:e5:8d:d3:63:a7:63:
b6:c4:70:ac:c1:10:04:66:c7:18:97:15:0f:d6:7d:
50:0b:6f:87:1b:8c:ac:9d:ec:9e:75:4c:90:c5:c4:
3b:19:6e:57:a7:d6:4e:a8:19:a5:e3:d8:ee:fb:cb:
e6:48:0d:d8:4d:d1:34:da:cd:e6:18:d3:43:5a:01:
47:f5:1b:fa:a8:5b:e6:0c:f5:96:1a:11:9b:05:ca:
23:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:51:C8:66:5F:18:9D:D3:32:2C:E3:9C:C3:F3:3C:4E:3F:61:F6:1B
X509v3 Authority Key Identifier:
keyid:A6:E9:1A:9D:7C:AE:F4:81:86:74:C5:D6:26:28:13:61:5C:89:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pukanXyu9IGGdMXWJigTYVyJ3lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/55de90-bcf6-41a6-a9e8-408229f0baf1/1/pukanXyu9IGGdMXWJigTYVyJ3lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/55de90-bcf6-41a6-a9e8-408229f0baf1/1/pukanXyu9IGGdMXWJigTYVyJ3lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2b:6f:dd:09:8e:78:9a:e6:b8:aa:6a:b7:4f:56:83:e3:f0:
b9:9b:e0:31:8f:1a:8d:32:e1:06:88:fc:96:d5:9a:a4:4a:21:
92:5b:74:cc:ea:86:df:fe:20:d5:15:8d:28:9a:8a:5f:9b:75:
31:36:84:f4:9e:61:10:21:89:69:a4:c1:5a:a7:eb:64:0d:77:
b0:b5:dd:6e:f9:31:a1:ee:94:7c:39:d5:29:2e:9d:ba:81:42:
b5:7d:27:e3:31:85:f8:a2:91:d4:b2:16:e0:ad:1d:76:5a:42:
04:59:1d:64:66:ce:35:f9:0d:d3:14:73:f3:ac:9f:62:20:a9:
de:45:11:38:0c:47:e3:f4:0b:b4:a0:d1:fb:9e:db:03:61:08:
7a:bd:23:ad:3a:dc:46:e6:e3:44:90:6e:20:dc:1b:fa:e3:1e:
62:05:23:f7:52:a1:e2:4c:51:ed:99:b7:46:e1:e7:33:e2:61:
43:8b:d3:4c:ad:e0:dd:53:de:d6:62:f1:01:03:8f:71:a7:a1:
32:52:b9:4e:68:0d:24:d0:f9:f9:15:db:51:23:73:ef:82:2d:
b9:e4:20:5a:f3:08:93:d9:52:82:64:a5:a2:6e:c8:22:c7:58:
3a:dc:e2:68:35:9a:bb:0e:02:6a:2d:0b:8c:2d:ba:a4:90:45:
f9:22:8d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:36 2025 by rpki-client