Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
File: PflufaVJi3Djuxe24YoxE3EtMrY.mft (raw, json)
Hash identifier: DfBkCtpqsrawoeT01rDOdIvIgWp2Dikd76gOtZunNCk=
Subject key identifier: A4:25:EC:0D:F7:0F:DA:38:19:1E:28:69:E5:5A:51:F5:21:D2:03:63
Authority key identifier: 3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
Certificate issuer: /CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Certificate serial: 0194BBCE539296BBE5955ABE7470B1D4EDD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
Manifest number: 0E10
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: PflufaVJi3Djuxe24YoxE3EtMrY.crl (hash: hob+prPDsyigU7Kb2hmJGkDbBLzI9ANO9p1kKf7Ky24=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:53:92:96:bb:e5:95:5a:be:74:70:b1:d4:ed:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=a425ec0df70fda38191e2869e55a51f521d20363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:00:01:6b:0c:6d:8f:a3:e5:b1:cb:68:41:ec:
57:00:ca:d0:a1:f3:4b:ad:ba:f0:4e:8c:f3:05:0c:
68:12:9b:00:96:1b:69:46:00:c3:a3:2a:d1:d0:7c:
bc:58:c7:ba:60:9d:66:ad:17:a5:45:f7:6a:af:4b:
ee:b5:56:e7:45:eb:4c:ed:8d:5b:f3:05:28:9d:23:
58:34:a4:3a:d4:f6:db:fb:2e:7b:f8:cd:58:b0:76:
eb:22:6d:be:47:de:c3:c7:50:58:23:f5:28:72:b7:
6e:94:3b:00:a8:e9:db:9e:b8:5a:3f:79:73:8d:55:
50:8a:21:fa:40:1c:72:c1:a1:2d:fd:04:2c:a6:97:
06:91:a3:c0:d6:19:5e:6a:4d:27:00:44:e8:66:02:
08:12:a7:14:5a:17:90:31:cc:26:c3:d6:51:fc:2a:
0e:a4:1d:c2:a2:0e:0d:04:a7:59:d8:80:27:ce:8f:
8c:71:23:bc:fb:d7:b7:74:85:03:6e:fc:73:61:aa:
5b:4f:7b:85:07:86:43:94:36:9a:83:fd:b0:96:fb:
42:8a:f7:a0:d6:ef:a3:7f:d1:ce:19:2f:74:76:0a:
95:47:80:d0:76:56:fe:9a:0a:4d:f2:ef:48:28:09:
ec:43:66:6e:35:9f:8c:6b:04:37:17:ab:68:a0:49:
ab:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:25:EC:0D:F7:0F:DA:38:19:1E:28:69:E5:5A:51:F5:21:D2:03:63
X509v3 Authority Key Identifier:
keyid:3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ba:f3:60:9f:72:68:41:0c:51:ce:2b:5a:2c:38:ea:07:3c:
f6:1e:43:a1:f6:ab:56:26:ba:a3:65:79:5d:85:2f:e8:ee:16:
2d:fa:d8:87:85:4f:4b:42:5c:92:a9:00:da:f0:49:ab:42:2d:
ce:8f:db:46:b7:30:85:16:e8:73:17:54:1c:b5:37:25:ff:12:
36:ed:e5:bf:a8:34:f7:89:3e:de:87:9a:ac:ad:20:71:2d:30:
fd:18:f9:c8:29:4d:aa:a5:fc:e0:c5:a1:6b:43:b1:21:16:da:
d7:ad:6b:b9:a6:ea:fb:32:0a:b6:15:47:af:5e:cf:05:11:f9:
83:97:87:b2:0a:37:72:e4:69:b6:f3:1c:b5:38:7b:01:15:23:
6e:85:e8:5f:3d:76:00:80:3f:bf:9f:ee:41:1e:7b:fc:53:3c:
c9:1d:ea:35:a0:2c:8c:3c:6f:8a:6a:c1:e5:4b:fb:66:6c:8d:
06:d2:ff:40:53:9d:6e:6d:a1:46:5f:67:95:e7:54:34:92:26:
f8:0c:c9:37:aa:41:b6:20:e3:5c:2b:39:f5:bc:2c:5a:bd:96:
27:c6:42:1c:59:7c:29:f8:46:8e:ee:c5:b0:43:4f:1b:d3:7a:
1c:64:b7:63:90:5f:91:b7:b6:58:50:e1:88:ef:10:eb:3f:5c:
33:fa:ba:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlOSlrvllVq+dHCx1O3WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZjk2ZTdkYTU0OThiNzBlM2JiMTdiNmUxOGEzMTEzNzEy
ZDMyYjYwHhcNMjUwMTMxMTAwMDQ4WhcNMjUwMjAxMTAwMDQ4WjAzMTEwLwYDVQQD
EyhhNDI1ZWMwZGY3MGZkYTM4MTkxZTI4NjllNTVhNTFmNTIxZDIwMzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwABawxtj6PlsctoQexXAMrQofNL
rbrwTozzBQxoEpsAlhtpRgDDoyrR0Hy8WMe6YJ1mrRelRfdqr0vutVbnRetM7Y1b
8wUonSNYNKQ61Pbb+y57+M1YsHbrIm2+R97Dx1BYI/UocrdulDsAqOnbnrhaP3lz
jVVQiiH6QBxywaEt/QQsppcGkaPA1hleak0nAEToZgIIEqcUWheQMcwmw9ZR/CoO
pB3Cog4NBKdZ2IAnzo+McSO8+9e3dIUDbvxzYapbT3uFB4ZDlDaag/2wlvtCiveg
1u+jf9HOGS90dgqVR4DQdlb+mgpN8u9IKAnsQ2ZuNZ+MawQ3F6tooEmrzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQl7A33D9o4GR4oaeVaUfUh0gNjMB8GA1UdIwQY
MBaAFD35bn2lSYtw47sXtuGKMRNxLTK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGZsdWZhVkppM0RqdXhlMjRZb3hFM0V0TXJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84ODMxZDktMzkzMy00ODNhLWI5YWYt
MzZlODg1MDY2ODBlLzEvUGZsdWZhVkppM0RqdXhlMjRZb3hFM0V0TXJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC84ODMxZDktMzkzMy00ODNhLWI5YWYtMzZlODg1MDY2ODBl
LzEvUGZsdWZhVkppM0RqdXhlMjRZb3hFM0V0TXJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7rzYJ9y
aEEMUc4rWiw46gc89h5DofarVia6o2V5XYUv6O4WLfrYh4VPS0JckqkA2vBJq0It
zo/bRrcwhRbocxdUHLU3Jf8SNu3lv6g094k+3oearK0gcS0w/Rj5yClNqqX84MWh
a0OxIRba161ruabq+zIKthVHr17PBRH5g5eHsgo3cuRptvMctTh7ARUjboXoXz12
AIA/v5/uQR57/FM8yR3qNaAsjDxvimrB5Uv7ZmyNBtL/QFOdbm2hRl9nledUNJIm
+AzJN6pBtiDjXCs59bwsWr2WJ8ZCHFl8KfhGju7FsENPG9N6HGS3Y5Bfkbe2WFDh
iO8Q6z9cM/q6Rg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:52:14 2025 by rpki-client