Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File: PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier: bvbq2Zkory1WZKRR7NcPZJ3qzmViXxY7aN9MHLTpB80=
Subject key identifier: 4D:3F:E8:CA:3B:8D:B2:9A:E5:75:BB:10:66:9C:9A:8E:92:FE:F9:BE
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial: 0194BD1747FB9B276B400383C2B7096B1178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number: 0374
Signing time: Fri 31 Jan 2025 16:00:06 +0000
Manifest this update: Fri 31 Jan 2025 16:00:06 +0000
Manifest next update: Sat 01 Feb 2025 16:00:06 +0000
Files and hashes: 1: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: FhVVtWVG7FTqKvK6GTCRYlQdo6bVvUhfXsp9gjAPYlw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:47:fb:9b:27:6b:40:03:83:c2:b7:09:6b:11:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Validity
Not Before: Jan 31 16:00:06 2025 GMT
Not After : Feb 1 16:00:06 2025 GMT
Subject: CN=4d3fe8ca3b8db29ae575bb10669c9a8e92fef9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d3:f7:7b:bd:f3:58:db:71:17:da:66:77:3a:
74:0d:30:36:70:8f:de:89:e7:18:18:1f:da:fe:5f:
9b:6b:fb:32:2e:d7:64:a4:ce:8f:75:98:1d:34:3a:
b3:24:25:df:c8:3c:49:99:90:bc:c2:fb:ba:c0:90:
90:1e:29:10:e2:d7:f7:71:e0:1f:ff:33:1c:2c:57:
60:fb:68:40:86:9d:a8:fc:27:5a:19:42:51:29:8f:
2e:83:5d:ab:80:e6:56:a6:82:c8:58:77:1d:34:e9:
29:e3:08:74:fe:77:48:c5:fe:8b:84:c6:45:46:8c:
0d:ec:4e:1c:4c:4b:34:1f:ed:56:f6:4f:c1:3e:fc:
30:aa:e4:a4:94:d2:7f:e7:be:1b:65:fa:4f:a1:5d:
79:7e:2e:c6:cc:7d:b4:7b:15:1f:5b:0c:e3:5d:8e:
79:b1:bf:6c:83:54:fe:19:22:9d:c1:45:b7:7d:0b:
9b:c5:f5:4f:73:35:b3:6d:8e:81:ef:26:5b:d4:bf:
10:3a:ed:cd:7e:86:43:a4:16:28:68:1f:4c:77:1c:
3c:93:c1:f2:13:aa:8b:42:45:e7:1a:87:31:a5:31:
b4:9d:d6:7f:43:8c:4c:4d:31:4d:71:d9:b7:6a:6a:
d5:90:6e:dc:0d:7b:c7:a4:05:32:82:d5:7b:29:2d:
04:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3F:E8:CA:3B:8D:B2:9A:E5:75:BB:10:66:9C:9A:8E:92:FE:F9:BE
X509v3 Authority Key Identifier:
keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:21:65:0f:9a:20:4e:33:81:57:12:eb:4c:72:9e:42:e5:c9:
85:ef:6e:e8:e6:27:c4:08:65:d4:fe:ff:38:51:d9:4b:90:d6:
08:24:ba:7a:60:ef:ea:6b:df:02:9d:b3:1e:e4:cd:3a:60:18:
bf:61:3d:d1:60:7b:fe:8a:c9:e9:57:ba:6b:7d:3f:7c:92:3d:
68:8f:b2:d9:d1:d5:c9:45:a7:b0:79:28:2b:26:ef:14:b0:9c:
e9:7b:b6:23:b9:ba:47:82:88:43:1d:44:bc:76:4f:e3:51:aa:
69:7c:84:13:2b:f4:d4:a3:d4:71:69:77:20:9d:c2:0f:1c:9b:
de:60:25:c4:26:87:95:74:79:83:c0:3a:b1:55:16:1d:29:f1:
70:c2:94:ce:ac:12:e6:f7:bf:2d:e9:a1:be:08:25:2a:12:ca:
9c:a6:7c:16:72:45:75:c4:f4:d7:1f:c9:f3:be:13:22:41:8a:
59:57:0a:41:91:78:78:a3:a0:62:e4:8e:e9:f1:a6:b4:09:58:
51:a0:ca:21:cb:c5:57:92:47:a6:33:b2:f0:e9:e2:c4:61:17:
a2:e3:38:95:7f:9e:c1:10:bc:48:61:45:4e:b1:eb:fa:1f:dd:
8c:6e:27:9e:2f:ea:d9:1a:ed:37:98:36:2d:c1:e6:c4:04:16:
f1:b5:5b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:55 2025 by rpki-client