Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier: qYdf03/qeIvA/DAE/MVTZtuftZDwmz3r85biPPkZGbk=
Subject key identifier: F6:BE:B1:AC:6F:8C:17:B0:AB:5D:51:53:35:4D:4B:18:BE:C5:32:2F
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial: 0194BCAA06E4AF6A4B4D87056DC33AD094BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number: 1000
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: C5gDD33t0oqHAqsUeFNy5ZGYyxaVP2O9+4uWXvtKjc8=)
2: W_v27Hupk3RRQBILYKusMtNhoAc.roa (hash: yWY4EAVlw3dwpD2kqQElXOLSvOEEYUa61TWmAID32CM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:06:e4:af:6a:4b:4d:87:05:6d:c3:3a:d0:94:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=f6beb1ac6f8c17b0ab5d5153354d4b18bec5322f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c6:d9:6d:75:5a:d2:6e:24:7d:8a:6a:e9:09:
e9:ec:ba:c0:b4:b8:a5:69:f4:c5:82:ad:77:0e:63:
e9:e1:36:62:08:fb:d8:72:bf:62:8d:a2:e2:95:e8:
0e:df:58:65:ff:49:95:3c:5f:ed:da:86:62:80:7f:
3d:72:cd:35:0d:5e:ea:ff:d0:39:79:64:95:6b:69:
ba:c9:51:8f:61:81:a2:27:b4:6c:21:64:b6:6e:2e:
77:e1:fd:e8:98:e9:f3:e4:9a:77:96:e3:b3:f8:5c:
1b:9e:45:a2:0e:9e:e9:77:95:4e:b9:47:c1:2f:a9:
d8:de:c9:0a:a5:0d:b4:5b:29:c3:f3:4d:53:29:8e:
b5:18:e0:34:3d:3c:cc:6d:24:ce:62:3b:90:40:f5:
e5:9a:76:00:84:71:cd:3f:b9:ab:c7:66:33:b3:75:
14:43:83:c0:24:3e:81:e1:ff:a7:24:6f:a8:5b:52:
79:96:5d:8f:a4:50:06:30:82:38:47:41:c5:51:e0:
17:d5:5f:9d:2d:a0:96:1e:6f:90:97:5f:0f:e7:03:
10:b7:21:50:50:8d:ca:83:c9:e3:27:a5:19:38:80:
ec:e9:6f:1b:2f:36:d3:40:89:b7:5a:eb:d2:ac:72:
cd:f8:b7:41:08:ce:6d:e7:cc:61:f3:24:b0:a6:f6:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BE:B1:AC:6F:8C:17:B0:AB:5D:51:53:35:4D:4B:18:BE:C5:32:2F
X509v3 Authority Key Identifier:
keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:85:35:7c:e0:2a:9b:cd:a8:49:3b:b7:e4:3a:e6:d0:2c:dc:
da:fd:39:1f:8b:3d:54:af:ed:a0:48:9e:23:0c:d6:16:01:6a:
e1:8e:b5:b9:6e:a3:cb:20:55:d8:de:2d:d9:bd:54:94:a3:22:
4a:12:0d:f2:14:76:a2:73:da:c7:58:08:ce:4f:1c:e0:d6:3e:
a2:3f:4e:d6:4e:0f:d0:e4:0a:35:ba:c6:7e:ff:62:61:27:0e:
c5:45:e0:1f:fe:37:1b:08:82:a5:a2:05:97:ea:65:84:ee:f4:
5d:3b:01:17:3e:e7:7a:6a:c3:30:fb:45:fd:1d:b5:da:75:a3:
81:5c:c2:eb:37:a3:9b:4c:e4:be:63:b7:58:19:9f:3e:29:e7:
cb:bc:12:b1:28:42:e3:11:4b:eb:ea:d2:8e:bf:14:7b:2e:6f:
c4:6a:26:cc:d1:a0:76:58:4d:76:03:94:bb:73:ac:ae:ff:ff:
61:fc:fe:23:b3:8d:d9:80:c3:70:e5:fe:02:73:1a:34:eb:b5:
34:e8:70:64:c0:62:71:b6:40:6e:e5:13:24:ea:f8:c1:70:f3:
35:7c:c1:03:9b:0e:f8:93:a4:0f:e0:2f:72:92:34:31:8d:66:
af:2e:e3:0e:98:65:af:05:b2:b7:2d:98:ea:f4:00:09:d6:c2:
fe:e2:1a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:00 2025 by rpki-client