Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.mft
File: 0PncQczPGwp4tNaiRk59u8YhwCE.mft (raw, json)
Hash identifier: 1Wa/CjpqLfPYhhlyIxwKp3UOG1m4nXFon79K4iAx0dc=
Subject key identifier: 00:AF:37:DC:DF:20:53:CC:8D:19:38:FB:AB:F2:26:6E:1B:DA:80:D5
Authority key identifier: D0:F9:DC:41:CC:CF:1B:0A:78:B4:D6:A2:46:4E:7D:BB:C6:21:C0:21
Certificate issuer: /CN=d0f9dc41cccf1b0a78b4d6a2464e7dbbc621c021
Certificate serial: 0194BBCE336F1C4817E46F0CB9F154562182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PncQczPGwp4tNaiRk59u8YhwCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.mft
Manifest number: 03BE
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: 0PncQczPGwp4tNaiRk59u8YhwCE.crl (hash: EYiSNTuBLEVBlJFoUV2ezt3E/yw7tYebLbPigwfj1Kk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:33:6f:1c:48:17:e4:6f:0c:b9:f1:54:56:21:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f9dc41cccf1b0a78b4d6a2464e7dbbc621c021
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=00af37dcdf2053cc8d1938fbabf2266e1bda80d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:b1:59:2b:01:53:51:63:be:88:cb:ba:6e:
d3:e5:ef:d6:7d:44:fc:f9:5a:ba:b1:2c:ee:06:c8:
c7:a1:0a:1a:37:97:15:20:05:9d:5a:b3:88:bd:d9:
cf:f4:fc:3f:fb:33:c8:28:45:fe:88:ca:e2:a4:0f:
18:da:ca:c1:68:00:33:61:7d:4a:9c:9e:af:28:bb:
2b:65:2a:8f:77:4d:e7:d5:7e:3a:99:08:a2:bb:ee:
08:62:e2:cd:16:ee:49:42:82:a9:6c:a4:d3:05:33:
40:4d:dc:cb:64:e2:fe:e5:4c:64:6d:ff:3d:6b:40:
2d:2c:b0:ec:ae:56:92:04:09:b5:f4:47:75:e6:85:
f5:07:88:17:6f:74:cd:b4:b2:57:b1:21:8a:d4:00:
9e:8d:a5:62:a1:e2:5b:88:3d:87:b5:f5:0a:06:b0:
00:01:35:cb:d1:3f:df:4d:19:76:10:69:b5:70:5d:
db:91:1c:0b:fa:76:41:ea:62:17:fd:ca:f3:76:1f:
2b:fc:f9:13:99:ae:9b:9e:ba:a5:5c:d9:64:48:ab:
5b:0d:55:4a:87:ae:4b:c9:c2:4c:a0:dc:7d:4f:79:
b6:7a:d7:90:a9:2d:ed:49:37:cd:15:70:e3:72:2d:
40:a9:cc:0c:4d:d0:9b:5f:a3:79:55:6b:1f:ac:0d:
5a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AF:37:DC:DF:20:53:CC:8D:19:38:FB:AB:F2:26:6E:1B:DA:80:D5
X509v3 Authority Key Identifier:
keyid:D0:F9:DC:41:CC:CF:1B:0A:78:B4:D6:A2:46:4E:7D:BB:C6:21:C0:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PncQczPGwp4tNaiRk59u8YhwCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0f:bb:c2:f0:02:5d:7e:74:6f:68:26:0b:fe:71:57:47:77:
9b:6a:db:6e:1e:a1:74:17:32:6c:2e:e8:9b:cc:db:bb:27:f8:
02:4c:08:b7:29:7e:7d:16:34:5a:4e:b6:dc:68:1e:72:b2:04:
7d:54:fb:d6:e3:7c:d1:06:39:7c:fa:95:65:9b:f4:24:72:f6:
88:cb:c1:cc:37:6b:dd:80:08:d2:9c:fd:1b:cc:21:b8:c5:c0:
4c:2a:dd:2b:79:98:db:31:bf:20:04:74:68:76:ae:12:f3:ed:
3a:58:ab:38:35:e2:1e:dc:03:d6:74:a7:9d:c8:7d:9b:8b:00:
ba:73:ff:f8:b2:0a:6d:22:35:4a:c9:fa:3b:d6:23:04:c5:9b:
51:6a:87:14:86:ea:29:1e:ca:72:5d:bd:5a:a4:98:b9:b5:94:
25:88:16:4e:33:01:d5:dd:81:94:b6:b5:1b:94:a4:fe:7a:98:
6f:71:73:86:d4:5e:df:02:4d:f8:51:8c:21:3e:91:50:b6:33:
f2:e2:94:f0:cd:bd:d8:e5:d0:ab:d7:6c:fd:d9:5b:02:ef:e0:
82:64:f0:fd:16:dd:b2:01:e2:17:e3:c4:ba:3d:19:32:9c:7d:
af:c4:52:4e:00:7b:86:ee:72:cc:65:e3:de:43:9c:21:78:48:
3b:10:21:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:55:53 2025 by rpki-client