Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7858a4-2e33-43c4-b33d-1e04b20d8567/1/PHQZW9u2a2A65joVGPBm-gsRUfU.mft
File: PHQZW9u2a2A65joVGPBm-gsRUfU.mft (raw, json)
Hash identifier: mHJPXuLweo56f8aghoutoXvJz2UXFONZuxF03V5kBTA=
Subject key identifier: 8A:4A:F3:6A:15:1E:41:58:A7:89:82:61:51:BB:6B:F0:0A:BA:52:7B
Authority key identifier: 3C:74:19:5B:DB:B6:6B:60:3A:E6:3A:15:18:F0:66:FA:0B:11:51:F5
Certificate issuer: /CN=3c74195bdbb66b603ae63a1518f066fa0b1151f5
Certificate serial: 0194BBCE441FBF9CD7550FAB421BBB7343D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHQZW9u2a2A65joVGPBm-gsRUfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7858a4-2e33-43c4-b33d-1e04b20d8567/1/PHQZW9u2a2A65joVGPBm-gsRUfU.mft
Manifest number: 075C
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: PHQZW9u2a2A65joVGPBm-gsRUfU.crl (hash: P4WhCgZHUHOEBlwZ57DsrsFg6fIAUUOMQbftfhKUtNU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:44:1f:bf:9c:d7:55:0f:ab:42:1b:bb:73:43:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c74195bdbb66b603ae63a1518f066fa0b1151f5
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=8a4af36a151e4158a789826151bb6bf00aba527b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:45:04:44:bd:56:85:33:71:97:46:a6:d9:
b8:96:66:f4:ba:68:37:87:40:77:23:cd:c7:db:91:
ae:32:95:70:76:34:94:86:2f:f5:bd:67:69:20:58:
e8:16:13:6d:6d:f2:8a:d7:3e:08:da:c7:87:04:2b:
e2:6e:67:5f:cf:0a:c7:84:1f:b8:7d:85:e9:2f:88:
a5:99:15:c6:97:76:5e:a3:a5:60:01:15:5d:83:72:
4b:3a:1f:ef:41:84:48:f0:8d:4b:d6:c0:eb:03:bf:
19:22:84:4c:7e:5c:2d:04:a2:a5:3a:b2:37:47:03:
c4:aa:34:9e:0d:84:b0:b6:06:d2:c6:aa:2b:74:f7:
c7:ce:ed:5c:e3:88:33:7e:bb:12:b5:a3:04:fa:15:
b5:20:7a:7a:04:2d:64:0a:2c:08:87:20:23:d5:1f:
92:11:30:bc:ea:1c:be:74:ff:8e:ea:d4:7b:5e:f0:
3f:21:c4:cb:9c:a5:d0:96:78:da:87:bc:32:9e:02:
55:e3:0c:9e:04:78:fb:62:45:54:0d:56:b4:53:3e:
47:fa:f6:a0:b2:7c:b4:3a:76:ce:ba:2a:7e:73:99:
60:c2:3f:12:93:4c:39:81:2d:85:9e:e5:33:e2:25:
02:4c:e4:e0:cc:b5:6d:65:ce:1d:ee:91:9a:04:a1:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4A:F3:6A:15:1E:41:58:A7:89:82:61:51:BB:6B:F0:0A:BA:52:7B
X509v3 Authority Key Identifier:
keyid:3C:74:19:5B:DB:B6:6B:60:3A:E6:3A:15:18:F0:66:FA:0B:11:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHQZW9u2a2A65joVGPBm-gsRUfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7858a4-2e33-43c4-b33d-1e04b20d8567/1/PHQZW9u2a2A65joVGPBm-gsRUfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7858a4-2e33-43c4-b33d-1e04b20d8567/1/PHQZW9u2a2A65joVGPBm-gsRUfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:41:18:ae:45:1f:a3:93:8b:5c:38:06:ea:e3:0f:43:ed:2d:
18:09:16:35:17:43:f2:71:20:99:85:5f:d1:34:a8:a6:46:d5:
b1:d1:6c:52:f3:91:a6:98:5f:54:2a:66:9a:b8:3f:72:75:3c:
30:b7:06:d1:2e:5c:53:82:a7:23:41:6a:03:95:51:ef:7d:1a:
32:29:77:a6:33:35:16:ba:c9:04:c5:d4:cc:2c:9e:d8:62:50:
ba:c4:85:7b:9a:5b:4f:3c:3e:48:ee:16:02:e9:bf:56:a7:a5:
5f:0d:94:33:fc:20:de:4d:f5:95:08:6b:ef:42:31:43:1d:10:
61:85:c3:31:08:a2:b3:9c:94:80:fd:68:6c:be:1a:11:b7:36:
ff:75:26:45:e4:ec:e8:72:c6:43:bc:9d:14:ab:f0:b5:3d:30:
9a:46:81:44:ed:35:61:ec:55:df:bf:1b:ab:14:8d:1b:1a:8e:
8e:39:64:a3:ad:6c:28:1d:47:26:97:f0:c2:52:db:53:6b:79:
ff:ad:30:d8:6f:89:95:85:71:e8:cd:6b:66:0a:87:cd:fc:ea:
e7:39:30:2f:87:17:fe:f3:1c:71:42:a8:eb:72:bc:1e:52:5a:
de:c4:2d:5d:2e:04:6b:59:3f:f4:e4:e3:15:29:3c:2c:5d:64:
4f:ae:b1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:55 2025 by rpki-client