Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/105981-5524-4745-a8fc-884c4d4db657/1/PKxqaB9tMonhxFAqHxXHuuMfktw.mft
File: PKxqaB9tMonhxFAqHxXHuuMfktw.mft (raw, json)
Hash identifier: xJTBp1L68gYJuXLPhq+0aWLDt6F58FckE219O1sJFa8=
Subject key identifier: 60:CF:31:3F:AE:C9:86:17:7C:AC:7E:AE:F7:32:FE:46:1D:A4:A5:A7
Authority key identifier: 3C:AC:6A:68:1F:6D:32:89:E1:C4:50:2A:1F:15:C7:BA:E3:1F:92:DC
Certificate issuer: /CN=3cac6a681f6d3289e1c4502a1f15c7bae31f92dc
Certificate serial: 0194BD174D1EDA85241264EE1B42ECD877DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKxqaB9tMonhxFAqHxXHuuMfktw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/105981-5524-4745-a8fc-884c4d4db657/1/PKxqaB9tMonhxFAqHxXHuuMfktw.mft
Manifest number: 0F9D
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: PKxqaB9tMonhxFAqHxXHuuMfktw.crl (hash: 4dPNwpWyilEbkZtm5T5UOe7DvKMRrv0L30mzZw3K/iw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4d:1e:da:85:24:12:64:ee:1b:42:ec:d8:77:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cac6a681f6d3289e1c4502a1f15c7bae31f92dc
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=60cf313faec986177cac7eaef732fe461da4a5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:34:3f:6c:bb:47:c4:e1:42:62:9a:28:f5:
aa:19:ee:d5:c1:b1:5e:4f:ac:e5:5f:8a:36:d1:2e:
0a:d2:e5:1e:53:ef:2a:0f:78:23:bf:1a:e4:3d:21:
be:3c:49:69:02:80:32:8b:ca:7f:d1:16:ea:06:7b:
d0:0e:86:4b:e7:ce:2d:c2:55:0c:28:4f:b1:88:c9:
9b:92:f3:44:f8:d5:c0:c5:28:c4:c0:81:26:54:b7:
9f:46:db:d0:73:95:54:38:e2:e9:94:96:47:75:a3:
47:bc:d8:7a:3e:96:d7:84:e6:30:2d:a5:72:8a:49:
cf:ca:70:8f:3b:0f:89:6e:a4:98:4d:76:e9:dc:29:
84:0c:d2:a6:92:1b:5d:3b:7f:a5:ee:d6:01:a9:43:
5c:5b:95:78:bb:ab:6f:d9:62:1a:92:4e:70:45:ea:
24:10:87:c7:cf:c2:47:0d:9d:31:a0:1a:81:03:fe:
06:49:bc:50:b2:c4:09:cb:e7:ca:c2:11:fa:6b:b3:
52:38:08:1c:69:37:3f:73:57:ac:54:0d:9f:08:a8:
c4:f5:b5:93:79:1f:c9:16:ba:04:6d:40:bf:b7:f9:
a4:c5:ad:dc:54:ef:10:1a:3a:34:5f:51:f9:3a:af:
0d:d4:d9:69:fd:c4:9f:7d:62:9b:7b:38:23:f1:c0:
63:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CF:31:3F:AE:C9:86:17:7C:AC:7E:AE:F7:32:FE:46:1D:A4:A5:A7
X509v3 Authority Key Identifier:
keyid:3C:AC:6A:68:1F:6D:32:89:E1:C4:50:2A:1F:15:C7:BA:E3:1F:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKxqaB9tMonhxFAqHxXHuuMfktw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/105981-5524-4745-a8fc-884c4d4db657/1/PKxqaB9tMonhxFAqHxXHuuMfktw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/105981-5524-4745-a8fc-884c4d4db657/1/PKxqaB9tMonhxFAqHxXHuuMfktw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:af:2b:9b:52:64:ac:2e:83:68:6a:5a:4f:98:86:74:4a:3d:
58:4b:f1:1a:5c:49:4f:85:c0:15:4c:f8:1d:98:81:99:74:72:
d7:fa:11:74:81:b8:0a:03:b4:12:6d:26:63:48:17:05:ae:d6:
c2:7c:69:c6:54:51:80:79:d1:36:37:ca:8e:b7:00:22:37:23:
09:c1:f5:94:03:c5:3a:77:98:26:d4:fc:92:05:5b:71:87:c1:
f1:91:f7:2a:8d:b7:13:60:34:dc:57:fa:d2:ef:3b:59:30:f6:
9d:89:4f:ba:df:76:a7:3c:e7:49:20:09:8c:fc:cb:a4:20:bf:
85:fe:0b:64:12:6e:e9:17:ec:39:94:00:da:a6:42:86:18:33:
b2:b6:4a:78:7f:2e:bc:d9:e3:6b:2f:76:f6:4d:29:2b:6d:c1:
b0:85:cb:f0:86:65:07:0d:c7:99:48:2a:f4:b7:7d:83:97:3d:
02:60:d0:b6:32:ef:50:7e:f1:94:ba:25:08:bb:4b:c6:91:bd:
e0:5b:f0:94:e4:43:56:60:48:e0:27:a5:0c:a8:a9:e3:12:86:
6c:f7:94:13:83:84:db:cd:28:4a:cd:10:8a:8d:0a:97:35:ca:
3c:4c:c5:25:c1:ff:79:6f:14:c2:25:12:03:a7:c3:fb:43:cb:
b9:7d:1e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:22 2025 by rpki-client