Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
File: PQJjyVdcvQESY66Ig5p4iLdPoHY.mft (raw, json)
Hash identifier: 31Gg9PF1FiKsdIYkSSMamdOQunu/wRV4J1wSPu0phsA=
Subject key identifier: B0:04:87:CC:5B:31:F7:5B:E2:F7:29:26:FC:BE:2D:AE:99:B0:8E:A9
Authority key identifier: 3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76
Certificate issuer: /CN=3d0263c9575cbd011263ae88839a7888b74fa076
Certificate serial: 0194BBCEB47CC9B7AD81DBCB29C5CAD6B280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
Manifest number: 0F55
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: PQJjyVdcvQESY66Ig5p4iLdPoHY.crl (hash: U2IABJlQwe6PDw9Z5ApHL9u0a7vf7mBE8WCkYMq7CDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b4:7c:c9:b7:ad:81:db:cb:29:c5:ca:d6:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0263c9575cbd011263ae88839a7888b74fa076
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=b00487cc5b31f75be2f72926fcbe2dae99b08ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9c:b3:62:f5:8a:fc:ee:aa:cb:4f:a8:48:ac:
b2:e4:44:28:c2:a0:b0:2a:aa:58:b4:42:52:17:3c:
67:7a:df:7b:f1:01:06:d7:26:75:7a:e3:44:d6:e2:
17:34:73:80:57:06:f7:df:a0:36:2c:aa:f7:8a:c2:
2f:74:81:17:43:b9:33:ea:6f:15:42:39:d1:e2:49:
a1:3e:13:42:89:a5:ef:c2:5b:44:74:20:a9:cb:e9:
0e:87:b9:67:0a:37:86:e6:9b:da:3c:2f:1f:19:88:
4c:21:22:f5:2f:61:c6:ff:85:4b:cb:4b:ad:e2:55:
6e:fe:6b:29:f8:ac:e4:28:a1:a8:8d:d2:2e:d8:04:
f1:20:79:b0:bf:97:ac:d0:97:fe:eb:35:ed:44:07:
66:c0:f3:b0:bc:e9:56:7d:71:fb:8f:cc:50:de:ca:
66:5a:a8:df:c8:1e:89:26:d0:ad:16:a6:1b:ec:c8:
89:88:98:64:0c:8e:b5:74:00:97:7f:e4:8f:df:20:
57:de:fe:d7:7b:dc:01:75:c4:f2:12:9b:1f:6e:52:
5f:93:06:18:94:91:ba:58:f2:03:68:8b:9e:62:7f:
0e:7d:81:f6:8e:ed:4d:a4:91:e2:46:db:93:e8:d4:
d9:69:5c:78:66:95:92:b4:51:1f:a7:fe:d6:0c:fb:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:04:87:CC:5B:31:F7:5B:E2:F7:29:26:FC:BE:2D:AE:99:B0:8E:A9
X509v3 Authority Key Identifier:
keyid:3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cb:45:ed:61:85:19:15:9c:42:af:37:6e:3a:68:6b:a1:48:
05:5e:33:d7:92:3f:90:94:62:1e:2c:59:1a:2b:85:35:90:0c:
4a:d2:57:cc:16:10:0d:00:f6:b1:16:3d:53:15:e5:86:f1:75:
87:fe:58:6a:d4:61:02:7b:bc:38:77:8d:f4:e4:b3:f4:7e:bb:
5a:d0:b2:35:b0:b1:95:94:e3:ef:ac:d2:db:f6:ac:24:01:ed:
d3:82:e4:65:00:4b:75:33:93:4e:b0:aa:5a:19:ab:08:81:a8:
2b:32:93:e3:dc:e4:39:e7:90:7f:2b:ee:27:28:f2:a0:8f:bc:
9b:e6:2e:97:43:4c:2b:65:5c:15:af:86:fd:a3:53:72:47:7d:
77:b0:75:94:56:c4:7b:f3:53:ff:34:64:34:2b:5c:ae:19:45:
27:fd:17:88:c7:77:d8:fe:5c:e3:94:1f:19:14:8c:13:32:3e:
c0:d5:7d:24:c4:8b:9e:cf:ce:7f:f4:a6:d8:2f:7f:95:c0:32:
0b:08:f8:eb:4c:a7:ee:df:b6:8c:84:46:54:ce:08:0e:0e:15:
15:1f:76:3d:31:62:b1:00:86:45:77:69:2c:1d:81:da:a4:71:
bc:5e:4c:6d:3e:0a:d1:e8:35:5b:27:7f:7e:43:94:7d:a0:ef:
2a:bc:24:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:25 2025 by rpki-client