Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
File: PqlK-DEYyT_-izYnXtU0mU1not0.mft (raw, json)
Hash identifier: dL0HuZUKOR2fMFiciJZrUeUv4jjck+DJj1dxH8TqWIo=
Subject key identifier: 71:9A:8B:1F:F9:B9:B8:50:76:CD:3C:CD:F7:E6:27:11:AD:3F:2C:89
Authority key identifier: 3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
Certificate issuer: /CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Certificate serial: 0194BD17832E74F58AE75E0608C2E44641BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
Manifest number: 101B
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: PqlK-DEYyT_-izYnXtU0mU1not0.crl (hash: 2Y5zrZ+2r4Rdsnghhc2xJ7YV3WRHD+4k4HZdqXuCaDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:83:2e:74:f5:8a:e7:5e:06:08:c2:e4:46:41:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=719a8b1ff9b9b85076cd3ccdf7e62711ad3f2c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:1d:07:dd:3f:d0:71:60:58:5c:86:a3:5f:
5c:c2:dd:08:c1:5a:80:01:f0:c1:f1:bd:d9:a6:68:
b9:58:de:40:9e:57:af:7d:dc:46:45:50:03:e7:50:
97:cb:2a:ae:53:ad:46:ff:86:0b:28:ca:1f:21:35:
12:98:ab:f2:35:d9:46:27:b7:d0:94:4e:25:6c:03:
2c:1c:e6:fd:dd:59:5a:2e:0a:e5:fa:7a:de:9d:47:
a5:82:dd:98:06:35:4e:5b:d3:7d:9d:07:fe:6a:e0:
49:71:01:f3:00:ad:38:88:73:a4:0f:92:f8:c6:26:
5d:93:52:8c:03:fe:55:c2:54:ad:bd:e1:1c:00:4c:
73:56:51:07:d3:c7:9f:fa:0f:2b:b7:f3:ee:67:8a:
30:01:62:20:e7:c8:a3:5b:7e:a8:39:80:6d:ac:c5:
f6:95:12:8c:06:8a:76:d0:5c:03:82:3f:f2:eb:92:
91:2f:7d:b7:01:32:e6:22:02:63:d1:fd:54:96:25:
7d:e2:fc:34:c9:ea:4b:69:00:81:ff:c1:96:55:5c:
10:b9:20:8e:11:74:95:a2:f2:70:6b:c1:51:4a:78:
ef:d4:2d:c8:18:0d:ca:ce:7b:5a:90:0a:ee:98:43:
d7:78:17:21:58:61:4e:da:e0:2a:09:3a:c5:b2:74:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9A:8B:1F:F9:B9:B8:50:76:CD:3C:CD:F7:E6:27:11:AD:3F:2C:89
X509v3 Authority Key Identifier:
keyid:3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c5:00:bc:5c:7c:43:53:1f:a5:d4:d5:81:6b:3d:00:3a:49:
5f:24:fd:40:36:db:f2:d8:4e:4c:5f:21:79:18:5b:0e:f4:7b:
fc:12:76:06:71:eb:09:7d:88:7f:80:82:18:33:8f:e5:02:b9:
5b:d6:b9:a7:9c:0d:ab:13:52:16:b1:a0:87:f5:f0:91:d6:fc:
48:da:dd:33:14:8f:24:18:83:99:64:11:2b:6f:5b:2b:62:f2:
e5:54:55:f6:32:1e:29:47:09:32:d8:4c:40:f8:a7:83:85:4a:
9e:a8:cc:e1:82:36:d2:58:b1:45:47:49:f1:b2:82:84:d9:06:
ad:f3:46:bd:16:64:de:40:e3:30:50:ea:5a:93:4c:f5:16:7e:
a7:27:b7:96:1f:a9:27:16:17:f3:78:cc:db:c2:1c:0e:c4:31:
65:13:94:28:b7:7c:06:6f:4c:3e:0e:ee:d4:35:a4:9f:25:c2:
42:b5:f9:16:a0:95:7c:fe:a7:f1:39:41:40:d2:5d:99:9b:3c:
c0:6d:39:67:a0:24:b3:f1:b1:25:7a:1d:1c:b9:62:27:66:14:
ff:57:00:f3:95:ff:97:0c:07:bc:7c:e1:10:4c:30:45:5f:2a:
ee:ad:ea:f3:c6:ee:d2:f3:c5:b2:59:7b:d3:25:77:f8:b8:ec:
89:36:4c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:51:52 2025 by rpki-client