Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
File: pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft (raw, json)
Hash identifier: P84i8P6gu3A8jicOH5s9akCqfKgYGa9pIN4aypOMJt0=
Subject key identifier: 06:CF:CF:6A:57:6A:18:4D:07:BC:13:68:F7:96:16:A2:93:A3:90:AF
Authority key identifier: A6:AD:5E:70:01:3F:4D:F8:45:5F:A0:6C:93:E6:00:12:C2:99:73:D5
Certificate issuer: /CN=a6ad5e70013f4df8455fa06c93e60012c29973d5
Certificate serial: 0194BBCE11F615C75E8097A3BD11E2E3264F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl (hash: XvZhnl0qkn+dfXQAmEbyfK9cYuds3aNjwvx+w0voA9o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:11:f6:15:c7:5e:80:97:a3:bd:11:e2:e3:26:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ad5e70013f4df8455fa06c93e60012c29973d5
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=06cfcf6a576a184d07bc1368f79616a293a390af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:a1:95:88:dc:f9:b9:c4:21:85:21:73:00:
0c:62:3e:9e:19:11:ba:6e:e6:be:ae:64:08:98:e4:
bd:f5:62:5e:b4:df:6e:6a:b9:e2:c3:4a:f4:22:f5:
e9:5b:c6:51:e7:21:61:03:95:02:2f:c7:6e:8d:03:
71:f9:7c:a7:9e:a8:2f:74:de:0c:f0:7c:8c:5b:d9:
e1:f2:4d:ea:ae:8e:ae:34:61:85:58:9e:31:7d:a6:
8a:17:18:ed:69:ca:e4:fa:4d:58:83:0d:35:91:6b:
4d:f5:83:93:fd:72:a4:d1:0a:a1:3a:fb:77:9e:6e:
01:47:eb:a8:d7:97:4c:45:33:00:75:1e:fa:72:d5:
f5:b0:2d:3c:2f:aa:39:78:ca:0d:1f:e7:8d:d9:60:
3f:73:93:46:1a:49:e0:cf:ea:50:56:b9:b4:9a:95:
40:94:70:d4:2f:2d:3e:d5:a6:ab:c2:22:16:84:19:
14:c4:77:a0:c7:80:62:7e:9b:ad:a0:18:66:d3:60:
2b:b3:df:0d:51:f7:4a:c3:99:56:81:f2:ed:42:cb:
43:db:25:05:58:3f:10:4f:e7:ec:88:8b:f1:a1:aa:
8b:c6:01:d5:c3:cc:92:f2:9f:92:e7:62:20:af:ac:
2b:62:8a:b5:79:66:50:1a:cf:54:4b:b4:b6:8d:d6:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CF:CF:6A:57:6A:18:4D:07:BC:13:68:F7:96:16:A2:93:A3:90:AF
X509v3 Authority Key Identifier:
keyid:A6:AD:5E:70:01:3F:4D:F8:45:5F:A0:6C:93:E6:00:12:C2:99:73:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3b:90:34:b2:d4:dc:69:bc:61:dd:16:f8:d9:fa:0c:14:d8:
7a:8e:17:86:6b:88:d7:3b:42:f6:20:91:cb:42:b1:c3:15:a8:
bd:0c:93:fb:62:de:13:bb:78:17:40:47:b1:b3:71:93:95:25:
cc:71:e7:10:1d:17:66:de:cc:ed:96:c2:d0:18:d0:a7:9f:0c:
e1:9a:f3:5c:72:c8:02:f9:40:cf:a3:51:56:b4:ae:37:fa:a6:
6c:2f:f6:1b:77:f2:47:ed:e3:00:c4:f0:45:c5:a8:d5:c3:52:
91:25:f3:e7:8b:7f:f6:9f:b4:4d:72:a8:4a:90:de:20:98:7a:
ef:30:2f:2b:37:b5:11:6f:e6:99:d7:d1:a9:91:3d:c4:da:db:
08:f6:c7:57:f0:12:c9:e2:a4:f1:48:31:e2:e0:66:b5:75:e8:
55:54:79:e3:9c:11:13:10:7b:7c:f9:ff:0d:e0:b8:fc:0b:da:
22:ed:74:03:b2:10:c8:80:38:1e:2e:ab:ce:be:72:db:90:ef:
97:4b:af:79:1c:e2:63:bf:1a:67:a0:35:14:11:95:72:20:89:
03:5d:b9:70:9a:b8:10:eb:91:73:fb:52:81:88:eb:11:4b:bf:
e8:c9:a4:5e:68:4a:ef:aa:b7:1e:33:f8:4c:b3:2e:45:0b:0c:
95:72:f5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:03 2025 by rpki-client