Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
File: pcatcQWg6X4ZLw6I5mgYq2D33sg.mft (raw, json)
Hash identifier: 8BPWDcqrbJBDkPhOmxUnSbCnhV+gpVetfGI/pWIo2/c=
Subject key identifier: 53:78:5B:8C:12:78:C6:F7:E8:5F:24:B5:E5:43:3C:C8:0A:D6:ED:9D
Authority key identifier: A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
Certificate issuer: /CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Certificate serial: 0194BBCE366DD305B348A12D60BD3F587F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: pcatcQWg6X4ZLw6I5mgYq2D33sg.crl (hash: 4ciT/+HmXWhZ+9GbUvaQI02ieUoalP2/TcR+sREptfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:36:6d:d3:05:b3:48:a1:2d:60:bd:3f:58:7f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=53785b8c1278c6f7e85f24b5e5433cc80ad6ed9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:ea:70:b0:74:6c:18:73:f5:7c:ef:ee:76:
aa:36:ab:ad:c6:07:e1:c4:3a:52:4f:0d:ac:c2:55:
be:f8:ae:25:41:9f:86:43:67:29:7e:22:c4:a3:e5:
56:59:08:bd:d9:69:11:b2:b9:fa:d4:9b:84:1e:f7:
65:85:26:bd:cf:5b:58:2e:e7:31:06:dc:0c:32:18:
25:52:03:73:52:8c:f0:29:cc:07:30:46:a6:5e:78:
c6:1f:34:c8:21:f5:29:2f:ab:0f:68:f2:6c:78:5d:
56:53:aa:5d:06:3a:8f:20:70:14:8d:cb:5f:d0:d0:
b5:aa:44:4b:03:15:a7:3c:02:84:86:ef:27:43:ef:
51:33:aa:6b:ef:8a:64:e3:50:05:2f:4a:63:bb:4a:
dd:f4:8e:ec:9b:74:54:c3:4a:64:96:09:48:35:bf:
da:17:17:ba:c6:f2:84:d7:49:21:51:d3:9c:05:1b:
eb:ec:73:51:86:49:cf:e6:30:63:ad:1f:bc:af:3a:
ef:76:3d:0c:aa:c6:b1:c1:50:2f:8d:47:bf:44:39:
24:a3:95:78:06:59:55:37:62:7f:62:df:31:26:b1:
99:65:6d:f1:9a:ed:c4:08:63:96:82:f8:3d:6d:f0:
58:d6:59:36:13:79:c4:5b:b3:6e:1a:ad:ab:42:bc:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:78:5B:8C:12:78:C6:F7:E8:5F:24:B5:E5:43:3C:C8:0A:D6:ED:9D
X509v3 Authority Key Identifier:
keyid:A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c6:df:1a:99:e5:3c:bd:86:c3:c2:95:69:e1:55:ac:00:ba:
8d:d6:32:f4:71:3c:e7:fc:d0:07:60:db:2f:94:a0:0a:d2:1b:
eb:8b:7c:73:b4:2d:03:9d:6a:a7:be:fa:f2:2f:ce:84:11:62:
fd:64:9b:70:11:38:87:7f:a5:05:24:06:98:87:06:10:1f:9e:
8a:d4:58:08:6b:7d:76:2d:38:2a:0e:2f:75:03:fc:ca:86:68:
ef:75:09:26:10:a0:fd:bf:3a:b9:ab:27:7f:e9:9e:70:db:1d:
a9:23:e3:ea:3a:d2:66:f9:73:38:78:af:a2:3d:be:76:c8:65:
3a:77:3a:5f:80:14:09:15:26:5e:32:b7:db:87:34:df:8c:a9:
55:50:7e:cb:ff:ad:50:e3:f7:7e:b1:ce:a5:57:d6:c1:33:dc:
f9:cf:83:68:54:c7:f4:43:1e:89:ae:3c:45:05:5f:0e:a0:fa:
27:55:53:8c:a6:1c:d9:67:bf:f1:09:8c:99:83:21:20:79:a6:
8b:78:01:71:ab:fe:65:5e:f9:c7:22:e8:d8:14:bc:55:e0:7a:
0b:1f:2f:5a:0b:e8:85:b4:2e:a6:63:40:3a:e0:d4:11:f9:a7:
8b:3a:29:28:24:a2:f5:d0:13:f6:22:6c:41:45:53:29:20:66:
da:48:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:20 2025 by rpki-client