Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
File: PwbJ3z-o-T2e8O0EscoENduLxlA.mft (raw, json)
Hash identifier: fCZ6iS+pQ+T7ALssJf217upLATbRI4sPhgKXinypj6o=
Subject key identifier: 21:A3:A7:67:2D:A7:1F:CE:40:E0:7D:7F:AE:0B:AF:D6:4D:74:0D:10
Authority key identifier: 3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
Certificate issuer: /CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Certificate serial: 0194BCA9BEFC56CEDF8FA454E8F7983CDEE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: PwbJ3z-o-T2e8O0EscoENduLxlA.crl (hash: 3ag4zks/GTTFLkr/JfmR2j6YgJ7Q1CoxZkODSCUpz4U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:be:fc:56:ce:df:8f:a4:54:e8:f7:98:3c:de:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=21a3a7672da71fce40e07d7fae0bafd64d740d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:98:f9:34:12:43:0c:af:5d:39:ae:1f:59:
de:65:b3:22:a3:9e:bb:aa:79:ec:86:aa:c6:5f:79:
1d:6f:6e:b2:80:70:ee:bf:5e:76:2a:39:3e:69:8f:
2e:80:aa:07:76:53:5f:32:07:5f:9a:01:63:26:36:
bc:dc:d4:79:3f:c7:4a:b0:8f:0f:54:6d:be:2e:e0:
34:81:35:9b:2b:f2:26:59:e4:3b:9e:31:c7:0d:0a:
6f:e6:78:cb:8a:ce:b4:31:07:35:0b:5f:53:7d:5f:
78:f4:89:b8:44:12:1a:a6:ee:92:e5:4f:14:c2:0e:
fc:30:ae:e0:b1:f1:b8:ee:5b:90:dc:14:04:8c:16:
00:ed:de:83:26:8d:c9:76:09:03:cb:0e:4e:7a:a6:
b1:59:5a:ef:d8:84:36:4b:f6:16:80:e4:57:45:f4:
9b:99:b6:51:18:eb:17:26:9c:53:a2:b8:6f:df:5c:
81:e9:85:ae:e2:9b:bf:cd:e1:45:bd:0f:94:57:c7:
9b:a6:80:60:61:f3:94:4f:25:44:99:7b:ab:d8:bd:
10:4e:d8:63:45:34:46:6b:31:e1:3b:bf:86:fc:8d:
f4:71:2b:b7:a9:4b:c0:36:c2:eb:8c:2c:b4:87:c6:
61:7e:11:50:86:6b:5b:70:8d:f9:cb:4b:02:1c:4e:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A3:A7:67:2D:A7:1F:CE:40:E0:7D:7F:AE:0B:AF:D6:4D:74:0D:10
X509v3 Authority Key Identifier:
keyid:3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ae:71:b5:1a:6d:9d:c2:44:fc:f8:cf:57:19:cb:e6:4d:be:
71:7d:4b:d1:dc:89:48:bc:66:79:02:2a:6a:67:37:cc:e2:72:
55:46:18:a1:bd:c2:cc:f9:fc:cc:80:7d:ad:b0:f3:3d:b1:a6:
71:01:fb:37:52:fe:70:f6:aa:b7:e0:00:31:c0:96:80:c9:a4:
0b:8b:62:c2:44:45:5d:ef:65:ea:f9:32:dc:a1:e8:92:d5:1e:
ae:a6:7a:75:22:90:fe:12:b1:4e:2e:d3:2f:ca:1d:6c:be:b3:
77:e1:0a:da:e2:db:67:3f:26:5f:39:52:ec:09:78:39:20:9a:
ed:b5:78:c9:4f:da:f6:70:3a:c4:7d:ba:13:a1:0c:cb:82:fc:
a0:c3:45:de:7e:67:5d:33:1f:8e:5c:97:2c:9f:f2:60:9b:5f:
fb:b9:98:a8:44:a4:d8:88:65:b5:53:f9:ae:58:3b:4a:ec:41:
cf:b7:58:8b:cc:c9:89:73:37:02:be:d6:46:a8:f8:1a:32:3c:
e4:c8:8a:33:bf:86:55:f2:64:0b:77:1b:12:f0:6c:df:3d:a8:
20:ef:fd:a4:ae:b2:4d:a8:a3:50:5c:e0:79:98:ce:76:3b:3c:
9a:bf:f9:d9:4b:e9:7e:3e:95:47:b2:de:2c:59:af:9a:19:a9:
dd:b0:cd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:30:40 2025 by rpki-client