Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/55b634-eed5-4e32-bb6f-6096931ffebe/1/P0wCam4nQwkwPOoMF-CUk2E8Hy4.mft
File: P0wCam4nQwkwPOoMF-CUk2E8Hy4.mft (raw, json)
Hash identifier: hGwdOpfVrR9dV/ybd/kh9dJAgFkvFzUdsugUBLryLwo=
Subject key identifier: F1:74:07:EB:E2:D6:B1:CE:E1:93:D3:57:B4:74:90:8C:28:E2:EF:8E
Authority key identifier: 3F:4C:02:6A:6E:27:43:09:30:3C:EA:0C:17:E0:94:93:61:3C:1F:2E
Certificate issuer: /CN=3f4c026a6e274309303cea0c17e09493613c1f2e
Certificate serial: 0194BC04F24834AB3D035332CB860A4406E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0wCam4nQwkwPOoMF-CUk2E8Hy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/55b634-eed5-4e32-bb6f-6096931ffebe/1/P0wCam4nQwkwPOoMF-CUk2E8Hy4.mft
Manifest number: 08CF
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: P0wCam4nQwkwPOoMF-CUk2E8Hy4.crl (hash: Mw5Os22oFEx6SB+rNjc+ZxBWSywgNLYOoktYcZb6iSo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f2:48:34:ab:3d:03:53:32:cb:86:0a:44:06:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f4c026a6e274309303cea0c17e09493613c1f2e
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=f17407ebe2d6b1cee193d357b474908c28e2ef8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:54:2b:b0:19:8b:0b:82:e2:e9:d5:e9:a9:
c6:9e:4a:ae:24:4e:cf:ed:b4:c5:67:b6:5a:e3:b0:
6e:0b:73:ca:d2:04:98:af:eb:45:6c:bc:8a:9a:de:
2f:eb:81:8f:bc:c9:6b:69:9b:93:dd:a1:c5:49:e1:
a7:32:d4:bf:de:16:87:33:7f:e3:23:f2:25:42:7f:
3a:e3:05:dc:b3:e4:2f:4f:c7:31:6a:0e:dd:55:5a:
4b:6d:a9:f0:bf:5b:3c:ab:20:1d:32:01:22:86:fe:
c2:54:e5:15:6c:0f:2a:b2:f6:5e:d6:10:21:34:90:
b7:d7:cd:69:90:c9:89:65:35:d3:ea:07:7f:e4:1f:
85:9f:14:11:4c:44:31:3a:e3:4c:7e:ca:8d:4e:9a:
07:ba:00:4a:be:c1:05:e6:af:17:b6:44:cb:4d:79:
43:a9:c2:8b:d7:53:58:ef:6b:66:9d:e8:a0:b7:d0:
a9:59:39:8e:30:0b:7e:ae:df:f7:18:a5:ed:d7:5e:
82:cf:2e:b7:c1:41:62:a1:bf:1a:2e:ef:b0:b9:8a:
4d:5c:df:92:f5:1f:e3:50:af:01:18:04:58:77:07:
6f:e5:86:ca:c7:01:14:cc:36:69:9a:ca:07:6e:53:
ca:7f:69:7f:08:49:9b:bb:b2:f0:ec:d8:31:5e:7c:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:74:07:EB:E2:D6:B1:CE:E1:93:D3:57:B4:74:90:8C:28:E2:EF:8E
X509v3 Authority Key Identifier:
keyid:3F:4C:02:6A:6E:27:43:09:30:3C:EA:0C:17:E0:94:93:61:3C:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0wCam4nQwkwPOoMF-CUk2E8Hy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/55b634-eed5-4e32-bb6f-6096931ffebe/1/P0wCam4nQwkwPOoMF-CUk2E8Hy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/55b634-eed5-4e32-bb6f-6096931ffebe/1/P0wCam4nQwkwPOoMF-CUk2E8Hy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:41:de:a4:84:69:70:2b:e6:20:ad:85:ef:bd:ff:48:45:df:
ab:49:55:c3:4e:83:64:2b:30:64:b6:b0:aa:ab:26:ba:fa:f6:
73:f1:b2:1d:8a:49:b0:65:97:2c:16:59:59:62:64:b7:f6:2b:
41:00:46:60:13:7a:5e:7e:f0:4e:45:11:d0:0f:ff:41:42:89:
b1:b9:25:17:e5:47:97:ab:26:c9:d7:06:f7:76:80:1b:9c:2a:
03:e8:0b:11:3b:d9:92:e1:09:a3:a6:b4:26:2d:c5:e2:3f:db:
d4:af:4d:fa:26:d3:af:ed:f6:47:58:a2:3e:ad:3f:b7:03:c9:
b6:b4:69:16:cc:29:03:73:4d:f1:8f:26:5f:96:f4:d3:26:01:
80:33:28:bf:a2:6f:44:71:22:e4:ea:7a:36:2f:42:59:41:fc:
c8:2c:89:f7:20:17:0a:f2:ab:62:d7:de:6a:86:ee:c3:32:41:
0a:91:58:59:b1:f4:2d:7c:f0:4b:2f:d1:f9:d5:b7:dc:e2:6f:
db:89:a7:c6:c4:44:1c:06:54:49:89:46:be:7e:42:55:d5:a3:
3c:c5:b1:8a:3e:ce:fd:ba:98:b2:ec:09:35:1d:bb:52:8e:ec:
b3:45:87:c8:57:79:cf:d1:d1:59:18:dd:9e:89:3d:2b:0e:f0:
76:6a:99:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:14:18 2025 by rpki-client