Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
File: PP7M1r9kBrDPRPaCuTzYbjNGUko.mft (raw, json)
Hash identifier: ClYgP4kCrq+B/UIIdojQZnhkxOlfLMNYhHtquXMnrfI=
Subject key identifier: FD:9C:94:5C:3A:DE:43:7A:51:C7:02:10:1F:7E:D7:BD:4F:1C:97:59
Authority key identifier: 3C:FE:CC:D6:BF:64:06:B0:CF:44:F6:82:B9:3C:D8:6E:33:46:52:4A
Certificate issuer: /CN=3cfeccd6bf6406b0cf44f682b93cd86e3346524a
Certificate serial: 0194BBCEBBB1F5064BFCEF15FAC3986772A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
Manifest number: 0FA0
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: PP7M1r9kBrDPRPaCuTzYbjNGUko.crl (hash: 3wti0UmQRF+mVIDO6YBnf4BSZxo0yAx3KBdGKDJ4NNE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bb:b1:f5:06:4b:fc:ef:15:fa:c3:98:67:72:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfeccd6bf6406b0cf44f682b93cd86e3346524a
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=fd9c945c3ade437a51c702101f7ed7bd4f1c9759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:94:87:5b:29:a9:50:a5:67:c4:cd:5a:09:
82:fc:68:55:b2:4e:ef:39:d5:b8:82:0f:77:60:44:
9d:34:9e:4b:90:1e:71:8c:83:1a:95:f1:1f:e5:41:
ab:76:65:1a:d4:a7:25:13:61:36:6b:b3:13:0f:25:
8a:d5:56:23:93:85:c9:5e:85:60:91:e9:b3:fc:62:
e2:12:21:a3:8a:e0:d5:83:c4:b6:d2:6a:af:77:41:
c0:cc:78:64:3c:98:45:07:df:56:71:92:4d:71:00:
df:75:60:37:e1:d3:4b:ad:26:64:3c:25:e9:06:d6:
a8:5f:c8:b0:6c:ad:f7:10:1a:d1:38:65:cd:54:6a:
28:a4:ca:12:cf:03:78:48:2a:f4:d3:3e:1a:1b:17:
c6:15:06:02:56:89:cd:fe:21:ba:dc:1a:2f:bd:a6:
31:81:5b:43:7d:72:e8:27:23:aa:f0:11:a2:ba:92:
45:4f:b6:77:cb:b0:de:5f:40:1a:36:e0:5b:5c:31:
73:a4:8a:d3:ce:52:2d:6d:24:3b:7a:ce:45:f1:47:
89:bc:27:0f:ff:31:9e:35:78:ae:f7:ae:83:5f:0b:
c0:cb:40:e3:29:79:41:6f:3c:3c:34:ea:15:d4:03:
55:34:f2:50:8e:36:76:b5:41:63:bb:b3:70:e5:af:
7c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9C:94:5C:3A:DE:43:7A:51:C7:02:10:1F:7E:D7:BD:4F:1C:97:59
X509v3 Authority Key Identifier:
keyid:3C:FE:CC:D6:BF:64:06:B0:CF:44:F6:82:B9:3C:D8:6E:33:46:52:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ef:d8:24:9c:57:80:ff:07:9b:9f:2e:d5:2d:d2:ac:6e:a1:
1e:ea:44:9f:38:e7:7e:e8:8f:99:ed:f3:fc:c3:9b:fd:1c:22:
76:a7:f6:f8:25:93:51:61:6e:94:38:a3:34:de:ae:ce:0b:4b:
f3:92:8c:20:41:8f:62:c5:2e:eb:ec:f1:3f:5d:86:35:f9:1d:
f1:cf:8c:4c:4e:47:a5:06:4f:5e:06:93:87:fe:30:bb:67:71:
8c:57:bc:6d:7b:a3:62:80:54:ed:72:b5:4b:51:81:40:0e:3d:
c4:1f:4b:a8:c2:c6:69:de:47:9b:58:50:b3:a5:9d:f6:9d:20:
e2:07:71:8d:dc:3b:50:6d:57:6b:9f:08:31:7e:1b:fa:97:c8:
c6:2c:8d:68:47:fa:bc:91:0c:a6:32:66:f0:16:46:f7:b7:82:
2c:f1:ef:da:92:d7:05:dc:18:8e:88:6d:36:8d:30:87:18:5d:
1f:e3:60:0e:eb:b3:ba:ff:fb:5c:9f:aa:01:df:bf:6f:ca:bc:
43:cf:6d:36:c3:af:ee:ae:52:87:fc:92:8d:7e:c9:7e:d2:41:
b6:96:c6:dc:00:84:a2:f5:87:42:9d:6f:a6:1a:e7:55:ee:a9:
5f:7b:ef:9f:c4:eb:96:29:7a:29:7a:84:d7:7c:0e:b3:71:e6:
f1:de:96:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:06 2025 by rpki-client