Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
File: PnpcKTN0JfqBOVVRcmyMK35MUIc.mft (raw, json)
Hash identifier: LjrhXQP4bIk4oCHkLJgrBkKZS6oHOVE9cGlOtZVKGBI=
Subject key identifier: 0B:E1:8B:1B:4E:FB:61:17:CC:D7:02:1C:8D:A8:6A:7F:18:86:8D:CF
Authority key identifier: 3E:7A:5C:29:33:74:25:FA:81:39:55:51:72:6C:8C:2B:7E:4C:50:87
Certificate issuer: /CN=3e7a5c29337425fa81395551726c8c2b7e4c5087
Certificate serial: 0194BC3C032F5D36F0371A3E4FA0EBF5E84A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
Manifest number: 0172
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: PnpcKTN0JfqBOVVRcmyMK35MUIc.crl (hash: 5MS4nFu9aG0YtO6B39RKkN7uBM/4Iq4bO1NDWlCVekQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:03:2f:5d:36:f0:37:1a:3e:4f:a0:eb:f5:e8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7a5c29337425fa81395551726c8c2b7e4c5087
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=0be18b1b4efb6117ccd7021c8da86a7f18868dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:42:17:e6:c4:e2:55:97:35:2b:3a:85:c2:
4f:3b:2b:07:92:12:cc:63:0d:bf:8b:2d:7e:55:68:
5b:f9:b5:8f:a6:00:78:bd:04:13:0a:98:72:5e:08:
5b:e8:9d:0a:68:2a:13:cc:63:98:db:4d:76:ca:74:
f9:7b:e7:a2:3c:4a:2c:f3:a8:ba:21:49:cf:c4:f0:
68:9b:2a:24:f4:84:78:9f:6e:7e:83:4c:e2:09:03:
5a:cd:1d:da:ab:50:06:d2:0e:98:f5:a7:f8:5b:d3:
04:6f:a1:53:fb:86:13:e6:86:f9:79:f4:d7:6f:e1:
12:a6:ff:17:ec:8d:bb:23:be:0c:f7:df:ae:a1:95:
dd:9b:db:45:04:81:4d:01:b2:8a:f5:8c:4e:a6:5c:
d9:d3:91:16:d1:eb:10:c0:7d:82:98:7c:7f:a4:2d:
84:5c:ff:4e:65:0c:28:ed:03:bb:c2:b4:00:03:83:
87:9a:63:45:72:11:c9:23:4b:79:30:0e:f1:6d:e4:
99:64:96:28:5c:17:4e:c3:cd:5c:27:de:5e:9d:20:
41:d2:d0:4d:43:39:08:57:d3:7b:1a:1b:69:13:9b:
00:ce:98:33:32:d3:a4:80:af:d3:69:29:d4:76:bf:
9e:17:34:70:67:79:91:4c:e0:fd:b0:ae:88:77:cd:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E1:8B:1B:4E:FB:61:17:CC:D7:02:1C:8D:A8:6A:7F:18:86:8D:CF
X509v3 Authority Key Identifier:
keyid:3E:7A:5C:29:33:74:25:FA:81:39:55:51:72:6C:8C:2B:7E:4C:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c6:94:f8:58:2d:af:c7:f0:c4:d7:c2:ba:56:73:b0:73:46:
93:43:f0:b0:4d:cf:47:c2:77:8b:d5:09:50:af:6d:dd:42:da:
ea:82:eb:6c:4e:e1:5f:a8:e0:47:fc:1a:88:86:31:d2:51:08:
47:34:d1:de:e6:fe:06:70:63:c5:48:49:cc:11:56:18:e7:96:
15:35:06:d3:39:07:e8:7f:77:de:a1:45:f2:c2:3d:1c:f4:ba:
88:08:a2:f4:f4:18:68:c5:5a:4a:6e:bc:b9:88:ef:58:7c:04:
74:72:fd:df:72:a1:7d:57:76:98:be:5c:33:80:ae:85:3a:ee:
f1:53:e4:06:b3:49:fa:95:39:4c:45:90:b3:41:c8:e6:51:ae:
50:53:b4:1b:42:ed:e9:a1:e7:f4:13:3e:e6:85:d3:f4:ac:6f:
69:06:b7:e3:09:97:2a:ed:21:09:32:54:70:91:17:bb:ca:97:
d0:44:d0:bd:f0:d2:ee:49:45:af:e9:2e:1e:24:e8:e8:f8:78:
dd:22:6e:a8:8f:00:8c:a6:d4:3f:7e:55:64:d2:b6:b0:3c:ec:
7c:ba:8c:55:b9:df:77:ff:e9:ce:f0:1d:6b:99:1c:9e:69:bf:
fd:cf:76:07:68:67:f5:71:44:51:f0:dd:5c:31:06:75:7c:30:
19:27:08:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:14:17 2025 by rpki-client