Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.mft
File: psP-xo0utonX0ElSISvQrWOdkA8.mft (raw, json)
Hash identifier: 3HdFQpd3nOp+SHvnTAMXwSfiVogmH4noTzhg04PwOfs=
Subject key identifier: 70:59:3B:01:12:4A:8A:8B:F7:36:EC:25:8D:F9:80:14:FD:64:C5:F6
Authority key identifier: A6:C3:FE:C6:8D:2E:B6:89:D7:D0:49:52:21:2B:D0:AD:63:9D:90:0F
Certificate issuer: /CN=a6c3fec68d2eb689d7d04952212bd0ad639d900f
Certificate serial: 0194BBCEEE9B96EB1BB0057C3AE4524A0E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psP-xo0utonX0ElSISvQrWOdkA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.mft
Manifest number: 0259
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: psP-xo0utonX0ElSISvQrWOdkA8.crl (hash: bgqzjg3gpY52xy2nBuOxmB/8tSp3gGVkKFGDyiRWwlA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ee:9b:96:eb:1b:b0:05:7c:3a:e4:52:4a:0e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c3fec68d2eb689d7d04952212bd0ad639d900f
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=70593b01124a8a8bf736ec258df98014fd64c5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cb:31:47:ca:91:c9:57:48:1f:60:00:32:59:
47:10:88:f6:ec:f2:97:87:93:be:d3:13:42:54:83:
ad:20:f8:a2:13:f7:00:91:d7:58:18:87:ea:b3:13:
2f:37:c0:40:39:a9:41:f8:36:ce:13:0f:f6:64:0a:
c6:03:74:12:e3:a7:c5:cc:8c:c9:eb:63:01:c9:11:
e3:b1:7b:45:ea:98:c2:fa:f1:7b:a3:ca:ce:05:2d:
2c:3d:e5:45:9e:be:5d:c8:61:1e:25:b6:8b:04:ad:
34:cb:9b:18:2a:6a:5e:61:9d:ea:62:f2:3a:de:33:
c5:f6:2e:d1:e9:2d:65:34:f8:13:3f:77:0f:ee:c5:
49:0b:7e:d4:8f:05:2c:85:12:2a:7a:5c:48:60:bf:
3b:b0:84:45:53:fd:43:56:a6:4b:6f:52:fc:d1:5b:
ad:e0:78:7a:82:b5:f9:09:3c:05:70:90:c2:19:51:
65:9c:1e:c3:22:e7:36:75:c5:ef:ba:8d:af:d0:36:
89:bf:fc:b8:fc:c2:ad:85:8c:17:2e:fc:95:79:59:
20:00:0b:7d:8e:ae:7e:a7:21:0e:ec:b5:0f:09:17:
68:76:fb:b7:5b:fb:c7:52:b2:b9:cd:c6:9e:08:6e:
06:9f:28:bc:f2:3b:a7:34:68:5a:54:2b:59:dd:c2:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:59:3B:01:12:4A:8A:8B:F7:36:EC:25:8D:F9:80:14:FD:64:C5:F6
X509v3 Authority Key Identifier:
keyid:A6:C3:FE:C6:8D:2E:B6:89:D7:D0:49:52:21:2B:D0:AD:63:9D:90:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psP-xo0utonX0ElSISvQrWOdkA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4b:af:f7:81:7e:74:ba:f3:e3:b0:31:eb:e3:18:44:f6:5d:
07:2d:b6:11:1b:ae:38:8b:b0:96:f9:39:80:4e:c7:bd:6e:05:
09:87:fa:ba:f2:8c:a0:17:f9:0d:14:76:52:bc:82:4a:fa:d3:
0f:ed:f4:42:a5:ba:74:ab:a3:4d:eb:79:57:12:63:31:76:bb:
50:73:aa:0a:35:ac:35:83:cd:07:9c:66:0b:af:33:2b:ab:81:
59:d2:8f:e4:de:93:f8:b5:ce:d5:83:8c:00:74:86:53:8a:7c:
f7:ed:27:95:08:f4:d5:f7:59:9f:de:18:2f:c9:8c:86:6b:2b:
bf:b2:dc:26:51:19:ae:d3:00:36:34:20:b8:79:9f:ac:3b:7d:
36:dd:83:48:d6:1a:5b:75:59:60:f3:ce:d1:fa:86:2c:10:49:
3b:6e:36:9e:aa:e7:73:d5:4c:b0:54:65:47:2d:b8:41:f5:dc:
87:b5:7c:69:01:93:e1:2d:2a:a3:e5:c3:1e:ca:12:84:1e:fc:
21:72:78:1f:5c:44:0b:8b:7c:b6:ab:7e:39:15:19:14:d5:62:
88:40:ed:5b:59:0c:5a:0e:78:72:16:0a:bd:07:35:28:32:e3:
5c:a2:ce:52:82:f8:e6:de:b0:c6:eb:c3:02:54:2f:cb:80:08:
e8:89:f8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:17 2025 by rpki-client