Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0d2819-7c42-4a9a-8c8b-18055d2c44be/1/pxTGIdV85C4lCT7OhXvbh146zqo.mft
File: pxTGIdV85C4lCT7OhXvbh146zqo.mft (raw, json)
Hash identifier: y1PIoMznc+BzXIuU/db7XuuDSXZI3+EkI3Q41F95bnA=
Subject key identifier: CC:95:DF:27:1E:8C:56:40:D4:3D:AF:7D:F1:9A:3F:C2:13:82:26:8A
Authority key identifier: A7:14:C6:21:D5:7C:E4:2E:25:09:3E:CE:85:7B:DB:87:5E:3A:CE:AA
Certificate issuer: /CN=a714c621d57ce42e25093ece857bdb875e3aceaa
Certificate serial: 0194BC72B620CF6519B11E6B23EBB0F831CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxTGIdV85C4lCT7OhXvbh146zqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0d2819-7c42-4a9a-8c8b-18055d2c44be/1/pxTGIdV85C4lCT7OhXvbh146zqo.mft
Manifest number: F7
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: pxTGIdV85C4lCT7OhXvbh146zqo.crl (hash: 625MCQr+p6rvTfeZs/UaJ62iPZWV2Nk6fgcPEl6/blc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b6:20:cf:65:19:b1:1e:6b:23:eb:b0:f8:31:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a714c621d57ce42e25093ece857bdb875e3aceaa
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=cc95df271e8c5640d43daf7df19a3fc21382268a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:09:16:6f:4b:24:46:56:c6:d8:60:63:9a:
17:58:94:59:06:5c:f4:fe:4c:22:c6:7d:9c:29:1e:
21:2d:64:e6:b2:f7:d5:13:f6:04:04:e3:7d:f4:b5:
fe:5d:18:48:44:58:d6:9e:df:39:3a:d5:24:28:22:
05:77:68:6a:55:c9:57:e9:13:d5:b9:bd:d3:a9:5c:
bc:52:c9:7a:bd:8b:6d:fa:b1:86:d8:0c:0a:24:9f:
92:c7:8a:56:b2:6e:8f:bf:12:4b:5e:66:55:d8:2d:
95:9e:36:bb:29:18:4a:58:87:be:31:d3:22:81:4e:
e1:e5:37:a9:f8:79:20:a4:07:40:ed:d0:4f:a1:b5:
9d:0e:4d:74:b4:bc:28:76:8d:64:1d:4e:0b:fc:99:
11:b2:b2:f0:59:02:6f:53:a5:7c:23:29:c1:d3:b1:
79:b7:6c:4d:86:61:df:cf:35:c3:9a:91:4b:68:94:
01:8d:ce:65:63:62:7e:f1:76:89:89:3d:65:5c:24:
8b:2f:28:b1:b8:05:14:30:34:ce:15:9e:dd:9b:8d:
bf:cd:c4:d7:31:95:7f:a7:67:1c:ec:8a:1a:91:da:
83:d8:f1:5e:46:e1:ad:b7:95:48:5c:ac:e7:13:55:
04:ab:f9:ad:77:ff:bd:0b:b3:7c:1d:0a:9d:4a:24:
c1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:95:DF:27:1E:8C:56:40:D4:3D:AF:7D:F1:9A:3F:C2:13:82:26:8A
X509v3 Authority Key Identifier:
keyid:A7:14:C6:21:D5:7C:E4:2E:25:09:3E:CE:85:7B:DB:87:5E:3A:CE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxTGIdV85C4lCT7OhXvbh146zqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0d2819-7c42-4a9a-8c8b-18055d2c44be/1/pxTGIdV85C4lCT7OhXvbh146zqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0d2819-7c42-4a9a-8c8b-18055d2c44be/1/pxTGIdV85C4lCT7OhXvbh146zqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:82:e6:bd:b2:67:31:62:16:a1:26:b6:2a:a5:34:ed:33:b4:
03:6d:8b:a0:08:34:fc:94:b7:36:24:bd:70:31:80:15:f9:eb:
d3:37:fa:a8:4c:ae:51:69:8f:1e:17:ba:65:7d:ba:c5:f0:ec:
0c:f8:83:69:f7:d0:3e:56:f4:40:78:0e:a4:76:7c:dd:a6:86:
17:38:17:43:94:8d:7a:16:53:71:ad:7e:d7:05:94:1e:dc:d7:
19:90:73:24:f7:d6:f9:05:0a:c0:b3:71:45:f8:8c:21:e5:60:
78:6e:41:64:73:8a:3e:84:75:96:91:b3:7d:eb:1f:ea:54:82:
5f:a1:00:d8:34:2f:2c:cb:d4:5b:33:81:5c:83:52:b6:0f:0f:
39:9a:13:f3:ef:76:93:21:d0:81:8a:3a:17:63:a8:12:65:da:
df:19:04:93:ff:cc:5e:ff:d4:24:3b:6b:1f:68:01:7e:15:38:
0b:65:99:4f:47:16:15:9b:97:92:32:fa:70:51:26:43:41:93:
5c:d1:94:b3:08:5e:e7:2d:6e:a6:ea:70:19:d1:02:ad:f0:6b:
5a:86:d8:70:05:f8:4b:4c:0e:87:61:f7:65:33:4e:cc:5c:cd:
58:55:c9:39:c4:97:83:21:f0:09:56:70:39:1a:9d:13:bc:4b:
c7:8b:84:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:23:57 2025 by rpki-client