Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
File: pnyqBsCo91QBbmFEgLuzh35AiR0.mft (raw, json)
Hash identifier: SgAG1KMTzvmWZkvYka+APF67mfusBn3LJM/DuJWN7Wc=
Subject key identifier: A0:C9:95:71:92:08:75:43:18:4B:B5:95:81:6D:6B:03:F8:D6:02:9D
Authority key identifier: A6:7C:AA:06:C0:A8:F7:54:01:6E:61:44:80:BB:B3:87:7E:40:89:1D
Certificate issuer: /CN=a67caa06c0a8f754016e614480bbb3877e40891d
Certificate serial: 0194BCE0CECECC6E476425B3E97B83555ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnyqBsCo91QBbmFEgLuzh35AiR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
Manifest number: 0154
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: pnyqBsCo91QBbmFEgLuzh35AiR0.crl (hash: DJY6ElhJalFkPBaftY9ZR5wMU2p/O59Flzbv84+e3L4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ce:ce:cc:6e:47:64:25:b3:e9:7b:83:55:5e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67caa06c0a8f754016e614480bbb3877e40891d
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=a0c9957192087543184bb595816d6b03f8d6029d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:6d:0d:06:35:12:3f:5e:6b:0e:a9:64:8e:
66:76:8f:a7:f8:04:09:21:fb:5c:b0:c5:69:80:fe:
4e:94:b2:88:00:06:70:d7:b2:4b:ee:54:d6:4c:b3:
4d:e0:3f:e9:33:a4:98:4e:82:db:e1:69:4f:7f:1b:
af:34:20:7f:ab:1f:6c:98:d2:e1:b7:04:e2:ed:23:
fe:db:fe:73:3a:96:07:b9:8e:fb:fc:58:8a:7f:05:
bf:40:a0:df:7a:ef:88:f0:b4:3a:11:5f:de:79:9a:
52:25:9a:e3:9e:69:e9:83:6e:95:8b:a0:e9:74:73:
ce:8c:71:45:5d:3a:a5:81:dc:ab:02:cc:62:e5:86:
fa:58:1e:64:7b:cf:32:92:aa:fc:a9:50:c3:fd:a8:
45:30:3a:7c:e4:16:de:39:ae:5b:37:ec:47:7a:89:
6e:d5:d0:51:28:f8:25:f0:05:26:47:bd:6c:63:60:
8c:01:77:7e:f4:20:51:f4:e2:6a:16:cb:40:43:d7:
92:03:e2:de:89:d7:29:47:c2:cb:09:ff:ec:ba:20:
40:c0:3d:38:c1:5e:17:a6:59:46:5b:67:8a:78:f1:
d5:23:81:6f:9a:9c:0b:ca:08:86:93:3c:d4:d8:fd:
4b:63:67:05:bd:fa:e0:8a:bb:7d:00:6d:0c:4c:36:
a4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C9:95:71:92:08:75:43:18:4B:B5:95:81:6D:6B:03:F8:D6:02:9D
X509v3 Authority Key Identifier:
keyid:A6:7C:AA:06:C0:A8:F7:54:01:6E:61:44:80:BB:B3:87:7E:40:89:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnyqBsCo91QBbmFEgLuzh35AiR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ab:3d:7b:89:d6:84:f9:26:11:ea:06:4f:d8:3e:f9:98:a3:
40:37:43:3a:a0:c8:78:68:7d:c0:69:6b:72:42:5a:93:75:b0:
83:e1:ca:b2:50:22:23:ac:11:39:9f:e6:ae:8e:fb:1d:aa:fc:
41:0f:1a:de:08:d6:f1:85:c6:74:9f:bf:a6:f3:9c:3e:b5:7a:
bb:7e:19:ce:fd:4a:6c:49:07:df:46:c9:d7:bf:1b:46:41:dd:
1a:49:80:15:8e:0a:96:58:63:98:ae:e2:78:db:f9:c5:97:75:
ba:d1:04:9a:30:97:ab:e1:c1:cb:35:d3:cf:98:56:f5:1c:6e:
3b:0a:f8:ca:6c:2c:d6:0b:3b:f1:1f:e7:db:50:1c:08:a6:8c:
32:08:c8:77:79:17:d9:7b:c4:98:22:f0:9f:28:12:d7:ed:ed:
8d:0a:ef:d6:28:10:cb:93:d7:fc:83:cc:74:77:f9:81:29:a4:
9b:3a:91:28:75:9f:4c:26:23:90:2d:87:44:aa:55:b9:e0:1c:
c6:d6:b7:61:04:09:47:6c:c3:ae:05:34:7d:6b:e1:5a:e0:0f:
40:fd:46:cd:d6:8a:04:17:24:f5:0e:3f:03:79:5f:4d:37:34:
e3:12:bd:70:d4:2a:92:4a:f8:09:ed:5d:98:a0:99:5c:7d:f1:
d7:3d:e6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:38:26 2025 by rpki-client