Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
File: PlfO-uaTAP31A15pfFrsLenIXa0.mft (raw, json)
Hash identifier: DgI/4MZ/PsMlV5nPh6gqlr0WHGL8b/oFdvXoqz68Yuw=
Subject key identifier: B2:C4:96:8E:AD:36:8B:3F:6C:A6:B5:28:7D:2F:C7:65:33:55:BB:DE
Authority key identifier: 3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
Certificate issuer: /CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Certificate serial: 0194BCA9DFECFFABE2CCFE6D3340153A17B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
Manifest number: 0381
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: PlfO-uaTAP31A15pfFrsLenIXa0.crl (hash: CbxWGByDu97BpVoz+OTRBJIxzCwuyds5V4bqY38FHiY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:df:ec:ff:ab:e2:cc:fe:6d:33:40:15:3a:17:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=b2c4968ead368b3f6ca6b5287d2fc7653355bbde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:2a:11:91:1c:22:44:03:cc:cb:2d:56:0c:
a1:f7:f9:14:f3:b6:47:24:80:8a:e1:f8:b9:df:23:
83:91:09:43:72:12:7b:d7:44:a8:6a:c0:2f:84:d8:
23:79:a1:01:82:80:f0:ba:cf:02:2a:a7:28:2c:aa:
04:59:ac:d2:54:fb:68:9e:87:23:55:b7:99:fe:f5:
44:aa:bf:18:8d:ab:2d:4c:28:bc:30:c0:b8:4e:ec:
a4:98:1e:2a:09:ed:62:79:c4:4c:af:e7:6f:24:7e:
b7:77:e0:e8:6c:d6:68:f8:56:43:00:5b:0c:9b:ed:
b5:fd:03:d0:22:6f:6a:56:8f:08:0e:f2:1d:02:84:
5a:c7:d7:74:94:86:17:10:6d:b3:64:b1:a5:04:7c:
89:b2:db:85:01:a8:ab:43:67:8c:77:0e:bf:b8:87:
bd:1b:4b:b2:76:91:dc:ca:14:01:6a:9c:f4:10:81:
49:42:0a:35:55:52:65:fd:17:9b:85:bd:9e:2a:9b:
c7:e6:45:eb:03:29:1d:6f:41:fc:f5:b3:36:5c:62:
d2:d5:b9:ac:8a:77:8d:23:c3:23:7a:41:8d:48:11:
09:6a:e6:1d:18:09:c6:21:b5:93:97:d6:94:5e:c5:
d6:de:15:67:f3:fd:fa:07:a7:81:0d:3d:6d:2a:52:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C4:96:8E:AD:36:8B:3F:6C:A6:B5:28:7D:2F:C7:65:33:55:BB:DE
X509v3 Authority Key Identifier:
keyid:3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d1:4c:ce:df:3d:a3:a1:40:07:a1:9c:1c:b4:11:96:bb:72:
bb:d0:06:c4:67:56:5b:82:e6:ea:d3:71:38:b7:7d:01:1c:0c:
8d:62:58:d5:03:95:cd:3b:f7:2e:6c:f0:4b:80:1d:0b:a4:6a:
3f:53:d7:63:32:e6:48:20:2f:87:7d:ca:5f:a5:0f:65:ce:78:
1e:d0:9e:99:6f:66:21:4f:52:94:d7:3c:72:b2:cc:18:54:14:
f5:21:7c:c0:44:6f:11:85:ea:f0:d3:c6:d8:43:b4:76:af:a2:
bd:1d:8e:48:a8:79:5e:03:a0:5f:98:2e:28:a8:3f:04:b7:4b:
f6:0d:60:ec:db:f2:cb:02:16:a8:a8:bd:d4:52:71:b6:4b:a2:
2a:c0:7b:64:4a:e6:77:b6:d1:0a:54:e2:dc:0b:cf:42:66:50:
42:ce:87:63:f6:76:67:52:d3:0b:3a:f9:8b:ba:41:74:a5:6e:
fb:f4:20:4f:a8:e1:af:55:e0:06:47:22:79:70:d4:aa:1d:5a:
42:1c:31:a4:5b:ad:7e:53:65:a0:f0:93:97:fb:7e:30:27:dd:
79:81:3e:54:22:c2:30:23:fc:d9:4c:41:03:c4:f3:03:da:e5:
eb:24:ba:4d:26:03:5e:71:2b:22:2e:ca:83:5a:e9:39:b5:0f:
84:94:8a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:22 2025 by rpki-client