Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2acb71-3c3b-4a66-9700-cd2726114846/1/PNQrfxakRkXr2PObog8ZBxOxs7w.mft
File: PNQrfxakRkXr2PObog8ZBxOxs7w.mft (raw, json)
Hash identifier: g0GBDJzxo40SU2ddXpN16qe2hftGxaHD6wmSrfOMjCk=
Subject key identifier: 89:70:60:E4:8C:8D:F6:67:DF:FF:4E:59:5F:B0:73:5C:6C:B1:E7:69
Authority key identifier: 3C:D4:2B:7F:16:A4:46:45:EB:D8:F3:9B:A2:0F:19:07:13:B1:B3:BC
Certificate issuer: /CN=3cd42b7f16a44645ebd8f39ba20f190713b1b3bc
Certificate serial: 0194BBCDFA8B7C93515612008CF383ED62C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNQrfxakRkXr2PObog8ZBxOxs7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2acb71-3c3b-4a66-9700-cd2726114846/1/PNQrfxakRkXr2PObog8ZBxOxs7w.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: PNQrfxakRkXr2PObog8ZBxOxs7w.crl (hash: 44w5rEEoVWXztxYgdUore17lOPbLKpAJleWHMExRnZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fa:8b:7c:93:51:56:12:00:8c:f3:83:ed:62:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd42b7f16a44645ebd8f39ba20f190713b1b3bc
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=897060e48c8df667dfff4e595fb0735c6cb1e769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:00:af:00:18:e9:76:fb:b8:55:77:65:7c:8c:
9e:8e:fb:f3:86:1d:66:9c:07:27:28:c1:04:07:20:
e3:d6:33:ca:ea:38:d0:81:24:48:25:1b:35:44:84:
55:c0:c8:64:ef:db:d3:d3:06:23:95:a1:4a:1c:67:
9b:38:c9:25:3f:1f:c2:ee:8f:2d:31:97:85:de:47:
27:08:ed:3e:1e:da:8e:66:98:ea:99:33:63:01:f6:
88:92:0f:a3:6a:d6:45:fb:68:7e:73:17:73:e7:8b:
68:b8:21:e9:f7:05:5c:fd:39:5a:d7:af:57:20:cb:
ed:ee:83:43:2b:4c:94:c5:35:f5:1c:0d:55:00:bf:
a1:b6:ad:28:99:a5:02:d9:b8:d5:54:1c:a4:0d:83:
5f:67:7b:3b:67:f6:cd:19:7c:e7:74:2d:47:a6:41:
47:7f:e5:9a:a1:f7:d3:92:a8:6e:83:5a:00:f2:5d:
ce:a5:21:1a:db:a1:63:27:9d:23:d0:c1:76:46:d2:
15:57:05:c2:86:13:fe:e3:12:6d:48:16:e5:42:42:
2e:78:6c:fe:29:9b:10:3c:3b:e6:ba:84:98:59:cc:
76:d7:a1:2e:56:b3:b3:a1:2d:b0:3e:8c:04:05:69:
e0:c7:df:84:61:70:8b:4a:3a:e4:27:56:c6:3a:71:
ae:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:70:60:E4:8C:8D:F6:67:DF:FF:4E:59:5F:B0:73:5C:6C:B1:E7:69
X509v3 Authority Key Identifier:
keyid:3C:D4:2B:7F:16:A4:46:45:EB:D8:F3:9B:A2:0F:19:07:13:B1:B3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNQrfxakRkXr2PObog8ZBxOxs7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2acb71-3c3b-4a66-9700-cd2726114846/1/PNQrfxakRkXr2PObog8ZBxOxs7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2acb71-3c3b-4a66-9700-cd2726114846/1/PNQrfxakRkXr2PObog8ZBxOxs7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:35:27:6e:c3:b7:8c:0d:4e:0c:a8:8f:b1:7b:c1:3f:69:da:
cd:76:c9:d6:00:7e:14:88:b8:e5:58:cd:55:7d:fc:4e:26:17:
26:d0:03:c7:98:52:71:9a:0a:7b:25:d9:6c:3f:e3:cf:64:4e:
42:a5:90:29:f2:fc:3c:94:a1:2c:4e:e5:a6:8b:27:9c:f0:53:
41:03:6c:2c:cd:11:06:af:ea:ec:8e:d1:9f:8d:f2:a6:2f:c1:
c9:56:65:5a:4f:42:47:a0:7a:e6:a1:11:8c:8a:5f:fd:b6:68:
d4:9e:3f:1a:c2:54:d1:bb:bb:48:45:21:58:48:21:15:89:05:
c3:ea:65:5e:da:5e:92:f1:91:75:00:ee:ff:9e:4b:a6:38:94:
d0:e8:60:fc:c2:a0:3c:44:50:fa:f7:21:d6:e6:83:b5:48:14:
db:68:4f:87:a9:f6:0a:77:9b:92:02:5b:32:d8:a8:d3:bf:87:
12:c2:a2:b9:e9:f5:8b:4d:47:5e:d1:77:31:2a:b7:24:61:f8:
c4:7c:fc:84:33:5c:62:8c:b4:8e:cb:46:71:59:4b:81:26:12:
78:65:de:b7:90:74:1f:7f:7b:a4:6b:9b:6d:8a:00:d4:a7:16:
a2:05:59:04:8d:f2:ba:af:08:30:a2:fe:d5:c3:3b:20:5d:d5:
0c:77:91:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:05:42 2025 by rpki-client