Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
File: Pk1h9w-8mJgzsvOA9SzulBHk26k.mft (raw, json)
Hash identifier: desjXAsV9z2OM+99wT3N/ktuKTvWyfN31ZZ0RB3IMsM=
Subject key identifier: 50:9A:9C:25:EA:61:EF:F6:A0:36:03:87:89:E5:2E:6B:C1:8D:92:F2
Authority key identifier: 3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9
Certificate issuer: /CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
Certificate serial: 0194BC72E13018A5F10768B69692D26CDB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
Manifest number: 0446
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: Pk1h9w-8mJgzsvOA9SzulBHk26k.crl (hash: AQ+/apAFyvO3qGXHCyNsInbe4+Am2PkUhdVNd9CVMnk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e1:30:18:a5:f1:07:68:b6:96:92:d2:6c:db:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=509a9c25ea61eff6a036038789e52e6bc18d92f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:52:2b:23:64:0d:89:fd:41:50:1e:7e:60:
59:6a:af:5a:0b:3d:98:c5:8d:55:89:66:54:83:1c:
10:38:9b:18:7f:2b:56:de:63:b3:9b:4a:d7:d9:20:
0a:87:fc:ef:07:b0:9f:b2:e4:0d:38:69:dc:a5:d5:
53:30:54:d6:89:5e:e1:2a:02:5a:91:71:b9:5e:79:
f4:18:1c:41:f2:ea:5f:6a:a5:dd:a2:0f:31:c2:85:
ce:5b:6c:92:b0:ac:d4:f9:80:c5:00:38:02:88:be:
e9:5b:27:d0:db:90:cb:d1:0b:f9:c9:07:ec:ef:19:
b1:78:97:6a:fe:12:1e:d3:0d:fa:a5:a0:70:f6:8d:
14:fd:b9:42:d0:32:96:78:76:10:a9:56:7c:07:1e:
4d:93:8f:11:d5:0f:13:b4:31:cc:14:2b:29:26:d3:
b1:d2:18:fc:da:2e:41:fb:83:70:96:35:19:0f:49:
31:f2:b8:77:19:32:72:08:10:cc:a6:00:bd:e6:2a:
4e:ef:6e:00:5d:28:a1:b5:c5:97:9b:05:03:7f:91:
82:44:d9:71:4d:49:a5:b6:5a:8d:32:c8:e0:ea:15:
d9:d0:82:ac:dd:f3:96:d6:c9:dd:d2:79:6d:99:bf:
1c:a0:2e:e0:ab:47:07:93:18:e8:dc:aa:5f:c0:6c:
44:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9A:9C:25:EA:61:EF:F6:A0:36:03:87:89:E5:2E:6B:C1:8D:92:F2
X509v3 Authority Key Identifier:
keyid:3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5d:a1:6d:bd:aa:3c:ab:a1:7d:e3:7b:83:ce:9a:e8:2a:b5:
15:37:8a:94:51:96:a2:ad:f5:82:de:ea:a6:e1:1b:63:a6:36:
04:9e:74:7c:ac:6c:fa:3c:20:28:91:30:b1:7f:97:d0:2c:6b:
ad:f5:2d:9f:45:90:17:61:d2:79:c8:d6:d8:9d:cd:ca:16:a2:
fb:9d:83:c2:f0:da:62:6a:d5:15:80:fe:78:67:fb:6c:aa:8e:
f6:77:df:7f:72:57:08:87:0a:b0:9c:20:46:30:24:fd:04:fd:
3f:74:79:ba:ac:da:05:2c:53:12:b9:7c:c0:34:cf:a0:a1:d5:
12:26:87:eb:df:b8:3f:6f:01:98:0d:10:0f:b4:79:94:92:b5:
03:06:54:72:3c:9c:82:2d:5b:1e:70:d4:7d:99:44:ae:c2:9a:
66:ec:06:85:d8:7e:11:9f:5e:bd:26:c0:32:2f:96:63:4b:3a:
bd:18:0f:58:61:b7:ea:7b:88:8a:d9:e2:e5:66:14:b7:ab:3c:
fe:80:7d:37:1f:3f:c1:06:ea:87:fc:0a:b5:54:1e:07:98:8e:
0b:1d:50:1f:0e:27:14:02:ff:e4:ff:cb:3a:ec:32:06:65:02:
1d:a0:e3:3c:41:2a:a4:48:11:6a:38:59:7f:6b:63:a7:00:28:
9d:67:bf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:53:27 2025 by rpki-client