Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json)
Hash identifier: 2FEHKM7wVYRUEKaajAzlMQY0Zkrma5VrIS8ofjFDcKU=
Subject key identifier: 20:3B:91:4C:BE:AD:49:8A:74:DC:0B:B0:DE:EB:B7:E9:A4:88:C6:E0
Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Certificate serial: 0194BBCE0DB0337DEDB75FF57D6DC93111E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
Manifest number: 063C
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: Ve5G/4ynLNm7rY2mMDXpZdbqGiTFH0vAoG9ssT+w4xA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0d:b0:33:7d:ed:b7:5f:f5:7d:6d:c9:31:11:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=203b914cbead498a74dc0bb0deebb7e9a488c6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:46:c7:f6:0e:01:29:11:09:f9:a9:57:6c:82:
d2:b5:0d:de:13:85:ab:54:61:c8:52:cb:de:a6:f1:
06:2f:ae:c5:28:89:25:90:b0:94:f9:75:75:ff:86:
92:34:76:a9:54:4d:b4:57:db:cb:73:71:05:7e:c6:
6d:ac:19:09:56:d3:4e:dd:8a:a0:bd:34:1b:ef:13:
0d:92:00:f1:77:a7:8c:1f:a1:29:99:2e:3a:23:6a:
f6:98:b9:b5:49:30:44:84:52:e1:d9:1c:02:78:93:
dc:2f:bd:95:57:9f:48:e1:f0:ff:f6:98:a8:b5:ea:
39:ed:62:f5:72:1e:95:ad:84:58:ee:fd:27:c4:e9:
81:8b:65:11:7f:5e:b9:5b:c4:56:c0:34:57:e3:75:
53:d2:bf:36:bb:83:10:39:45:10:40:c0:de:61:fa:
7e:50:07:38:b8:d2:26:71:64:69:ce:16:f5:e6:48:
92:aa:5b:61:f8:b9:87:f5:87:64:da:f0:7b:f7:81:
9f:7b:80:9b:42:5f:4d:fd:cf:e6:8c:af:c7:82:35:
4a:82:82:a8:41:81:8d:1c:bd:d2:f6:d5:09:55:79:
e8:3f:36:67:50:34:ae:aa:4e:32:f8:11:87:c1:95:
87:14:49:1b:11:ad:34:b8:49:6e:98:e0:8c:fb:bb:
92:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3B:91:4C:BE:AD:49:8A:74:DC:0B:B0:DE:EB:B7:E9:A4:88:C6:E0
X509v3 Authority Key Identifier:
keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d5:19:b5:1e:bd:62:f4:63:38:f6:4e:fa:29:0f:43:ca:b2:
b3:4e:a4:c9:29:12:8e:16:db:5b:d2:b3:61:8d:3e:50:cd:f6:
a0:24:d6:31:de:62:95:20:b1:b1:ee:3a:5d:a8:73:79:a1:f5:
e7:b4:9b:c4:60:d7:c9:7e:05:a4:ac:81:00:01:a9:bf:fe:70:
00:2f:1e:45:cd:7f:dd:49:fc:8a:48:87:6c:98:f2:a1:dc:1f:
23:76:ee:13:50:16:3e:74:d0:16:ad:45:42:3d:5e:76:21:ad:
e1:1a:0c:fc:53:59:83:96:4c:cb:de:61:09:5b:6c:95:7c:b1:
70:1f:e9:ec:65:9e:23:b7:3c:61:41:c2:bb:ee:ff:b2:67:bd:
49:64:22:47:97:87:e2:71:5c:da:75:fe:c6:72:0f:17:35:e5:
f0:0c:2d:b6:2d:f2:e0:6b:fd:4b:ef:b6:00:ee:5a:46:f6:31:
64:a1:2d:3e:11:8b:20:26:59:5f:7d:d3:d6:09:20:8a:13:99:
27:53:09:c4:b8:83:bf:8d:b9:cc:7d:e0:30:88:d4:85:25:f4:
98:73:52:98:f3:86:17:93:ae:e7:92:01:e7:21:0c:05:02:2c:
e0:80:51:36:16:d7:1e:4d:00:2c:0a:f5:68:54:f0:37:2f:3e:
0e:ab:26:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:30 2025 by rpki-client