Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
File: pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json)
Hash identifier: laS4EvcKDOKiulPx9iXFW5f2yxtT9TA4EW2xAFiJcGI=
Subject key identifier: 0E:BE:A6:63:F7:90:51:0F:27:E2:BB:0F:17:BE:8F:5F:AA:7B:FA:42
Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
Certificate issuer: /CN=a66010772651702a2d333c8315f1ae92f6cc7490
Certificate serial: 0194BD180D0061D727EBC2A6B5FA6E51FA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
Manifest number: 1363
Signing time: Fri 31 Jan 2025 16:00:57 +0000
Manifest this update: Fri 31 Jan 2025 16:00:57 +0000
Manifest next update: Sat 01 Feb 2025 16:00:57 +0000
Files and hashes: 1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: 0bnPsDrJqYvi1dZA8wmgQG8dd7pr/7nphUTRdFnSqwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:0d:00:61:d7:27:eb:c2:a6:b5:fa:6e:51:fa:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490
Validity
Not Before: Jan 31 16:00:57 2025 GMT
Not After : Feb 1 16:00:57 2025 GMT
Subject: CN=0ebea663f790510f27e2bb0f17be8f5faa7bfa42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:8c:cf:55:63:b7:3c:e0:b9:f1:fa:16:96:
d5:a1:d9:3a:62:33:4e:fa:e4:b3:0a:54:69:4f:3a:
8d:c9:25:1a:2a:49:e5:94:31:78:16:23:9a:2f:0f:
11:76:7f:9a:5d:c1:50:a0:c4:71:06:94:94:7f:93:
59:6a:9e:cb:93:08:62:72:36:e3:ce:83:11:c1:72:
50:3f:f5:c9:c7:52:bd:d3:ea:c0:2d:a8:32:79:15:
35:14:6f:0b:b8:c6:ed:a6:8d:66:f6:64:0e:66:d3:
41:b7:1e:05:2d:13:39:57:41:cd:43:cf:34:74:19:
df:2a:36:33:68:10:0e:a8:11:8d:83:ee:55:7b:76:
e3:71:df:80:38:7b:ec:bb:d8:8a:4f:78:d5:14:c5:
c0:1a:02:06:e0:c4:ca:25:eb:f7:03:1c:b8:f5:2b:
70:08:db:f6:fa:1a:35:0e:5a:a4:0b:13:2f:f8:c9:
55:31:da:2b:68:09:2f:02:a0:6b:d8:a2:79:28:4e:
b3:5f:15:f6:c9:d7:25:95:70:38:15:c9:5f:6c:02:
fb:12:9d:e9:32:00:3a:ee:a5:1a:e1:56:f1:d4:67:
e0:ed:61:32:f7:e0:ed:2f:51:df:23:4f:68:af:ee:
9e:df:0a:6f:fd:9f:f5:8c:1a:65:f1:67:26:d5:78:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BE:A6:63:F7:90:51:0F:27:E2:BB:0F:17:BE:8F:5F:AA:7B:FA:42
X509v3 Authority Key Identifier:
keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1a:d5:3a:4f:6b:df:36:45:4e:2d:a4:d0:3e:c3:16:86:b2:
5a:c7:2b:80:74:45:f1:8a:80:53:c5:5a:7e:d2:6f:ec:4e:f4:
42:27:50:b6:fe:5a:2c:b9:b2:57:fd:2c:bc:8e:68:99:ac:d2:
a4:16:61:2e:57:db:1e:d2:33:ab:87:fa:c0:e1:b2:23:0b:5d:
71:13:a7:e1:9f:e7:18:28:3b:71:81:a1:03:8b:14:2d:1b:11:
a1:e8:de:33:fe:5c:4a:66:06:be:70:51:d0:dc:61:5e:d0:a0:
19:7b:ca:99:71:7f:01:d4:64:01:d0:bd:45:53:e6:67:b5:ec:
2a:36:c6:c7:cb:7b:5c:68:29:ff:14:d7:66:84:53:11:3f:d0:
03:15:68:99:0f:ce:83:ad:f4:fd:06:80:e7:91:41:6b:50:db:
5f:58:67:49:4b:84:42:20:73:91:66:e4:5a:dc:72:8a:46:b9:
e2:dc:37:ce:a6:f6:0d:0d:0e:68:1d:bb:c8:eb:69:63:dd:f9:
da:47:69:07:cb:b1:71:cd:13:35:ed:bd:1b:f0:3e:f6:64:cf:
73:0f:54:ca:e4:8d:9c:be:33:fb:32:8e:0b:8e:c2:5f:1a:8d:
b1:e0:9d:ef:c8:c0:e9:52:33:bd:d8:bf:2f:1c:ba:26:c8:33:
13:81:2e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:36 2025 by rpki-client