Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
File: PpeXKwFXszTha_kfKifuDi3BOag.mft (raw, json)
Hash identifier: jM4uk08YYJmYTh2IfvguZI6rX8EjkzxW23d12rBrzZU=
Subject key identifier: 6B:BF:70:3A:83:FF:35:35:BF:C5:3E:75:EC:18:4C:DE:D6:3F:1B:2C
Authority key identifier: 3E:97:97:2B:01:57:B3:34:E1:6B:F9:1F:2A:27:EE:0E:2D:C1:39:A8
Certificate issuer: /CN=3e97972b0157b334e16bf91f2a27ee0e2dc139a8
Certificate serial: 0194BCE06C05D1AA7CA92DE19FFD994CDABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
Manifest number: 98
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: PpeXKwFXszTha_kfKifuDi3BOag.crl (hash: SpQmD4A9T0uj5Q57yvpjS3LoQ8eDvV5FzUsdHSnNTcU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6c:05:d1:aa:7c:a9:2d:e1:9f:fd:99:4c:da:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e97972b0157b334e16bf91f2a27ee0e2dc139a8
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=6bbf703a83ff3535bfc53e75ec184cded63f1b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:59:36:67:bf:34:33:09:36:e6:40:03:96:
58:52:a3:b6:43:db:2e:7b:70:7d:69:ac:94:0a:3f:
32:9c:c3:03:b3:a7:49:a1:51:de:68:00:89:8b:5f:
d8:a5:a5:92:3a:8b:ab:77:66:50:cd:83:d1:31:69:
29:43:e8:9d:39:5d:50:4d:ad:1e:01:b1:5a:32:89:
f1:f5:ee:7c:a2:6f:e0:6f:1c:4c:1c:41:f9:ab:e7:
d7:e1:95:9d:cd:9e:b7:99:f4:52:f6:53:a7:66:fc:
05:fa:e8:f3:93:d9:74:7a:ed:6c:c4:3f:7f:7b:40:
d8:00:7f:95:5d:c4:18:aa:ef:89:a5:0d:c8:80:2d:
77:9c:12:dd:c4:77:18:e9:fc:7a:17:0a:52:6f:06:
62:5b:17:e9:3b:65:c8:89:93:bc:c8:e4:49:cc:91:
70:e4:3f:8a:6f:05:65:5d:7f:bd:29:4d:9f:dd:77:
93:58:54:fd:a8:23:3d:3a:1a:9a:c3:e6:8b:eb:69:
20:71:c3:7a:6b:f9:78:15:bb:c2:60:22:79:b5:42:
b5:2c:71:2b:44:fc:e4:9a:01:b4:dc:03:7d:31:43:
e5:1b:0a:43:80:bd:de:ac:6e:27:88:11:25:80:7a:
e1:51:71:43:6e:61:4e:89:48:0f:c4:25:0e:cb:32:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BF:70:3A:83:FF:35:35:BF:C5:3E:75:EC:18:4C:DE:D6:3F:1B:2C
X509v3 Authority Key Identifier:
keyid:3E:97:97:2B:01:57:B3:34:E1:6B:F9:1F:2A:27:EE:0E:2D:C1:39:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ff:16:60:cd:f7:73:f6:f8:ed:b9:09:f9:ed:93:bf:d1:fa:
1a:69:be:45:86:d3:26:0f:26:12:31:27:f9:dd:87:ec:17:35:
e2:47:45:70:e9:bb:70:32:0c:66:b1:98:c4:cc:fd:e9:7b:a4:
0e:25:a2:bd:96:12:ec:29:c9:52:8c:3b:70:15:cd:28:5a:5e:
3e:20:9c:ee:6e:23:45:39:67:ac:b1:f5:94:b7:8e:e7:0e:85:
b1:ed:80:9a:34:c4:26:15:32:30:26:98:1a:bc:6c:97:50:a5:
14:ce:b2:e5:ab:12:b3:4e:d1:80:b8:71:3c:a8:36:6f:a3:44:
9c:8c:49:5c:06:c8:99:f7:ac:ac:7d:85:d6:61:3a:74:2e:59:
bc:c2:21:94:7c:0f:ec:a2:e6:bd:0f:45:2f:91:32:1c:71:07:
e2:7f:22:e9:94:2e:6f:39:0c:5a:78:2a:9f:ed:1e:68:30:1c:
15:2d:49:47:65:d1:44:38:79:ae:24:20:6b:ef:df:a5:c5:74:
9c:f9:68:88:58:ed:1b:5b:c5:11:91:3f:e3:ef:35:a7:3f:7e:
a8:a5:32:0c:9e:8e:b4:f0:03:c9:ee:8a:64:ad:ec:7f:34:04:
4c:db:02:aa:6c:03:37:95:69:f6:10:dc:ae:f3:08:f5:18:53:
77:ef:05:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:16:19 2025 by rpki-client