Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
File: Pq9YPXwbe09XMQE8iymLpQVGTlI.mft (raw, json)
Hash identifier: 0EuDjtloGkLxrmSAKiJjoT6qAmVKJ4FoEFLxW9U+KSg=
Subject key identifier: 45:F1:06:35:DD:26:C8:BB:E6:87:0A:19:F3:AE:EA:93:77:C6:5C:EB
Authority key identifier: 3E:AF:58:3D:7C:1B:7B:4F:57:31:01:3C:8B:29:8B:A5:05:46:4E:52
Certificate issuer: /CN=3eaf583d7c1b7b4f5731013c8b298ba505464e52
Certificate serial: 0194BD17A7FE4ECB5F8FE8589DF48789C463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
Manifest number: 1044
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: Pq9YPXwbe09XMQE8iymLpQVGTlI.crl (hash: e8Bp/IAyvSbUBuvTszmkNDKeBuutrDu4TNWwkrL+swM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a7:fe:4e:cb:5f:8f:e8:58:9d:f4:87:89:c4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eaf583d7c1b7b4f5731013c8b298ba505464e52
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=45f10635dd26c8bbe6870a19f3aeea9377c65ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:39:9f:0d:9d:34:13:d8:f3:b1:b5:96:f8:41:
c8:2f:d6:14:1c:27:45:24:00:52:0e:5e:34:2f:e4:
8b:5d:b2:13:45:7d:e7:04:b3:48:97:15:50:dd:0c:
a1:88:28:65:70:0c:fb:1b:d1:da:05:3e:2f:12:19:
d8:96:b3:5b:6e:96:07:e3:08:10:09:b9:d8:da:44:
09:e3:6c:40:0a:77:47:63:ce:d2:95:2b:55:c1:bc:
28:6b:77:23:8f:ee:b3:75:ac:4c:bc:15:c5:06:c8:
e0:e8:8f:4d:09:0f:11:56:05:41:5f:4b:61:ad:5a:
bc:5f:5d:03:ef:47:30:42:aa:0a:68:d2:81:9d:3c:
74:c2:40:1c:7b:0d:a3:17:39:48:84:e1:3d:05:03:
d5:f0:ab:bb:5a:6f:7b:e3:15:99:2d:76:19:b0:c4:
2b:07:bc:9a:52:97:6b:3e:ef:5d:4b:8e:15:ab:80:
21:2d:9c:50:cd:0f:e6:50:78:8e:ec:4e:fb:d6:0e:
d8:b8:90:9f:3f:0f:78:f0:ed:56:4d:00:cd:68:b4:
77:a0:0c:b7:57:c8:90:e6:35:49:96:0a:98:5d:ab:
fc:d8:1d:61:d4:b1:c7:da:35:22:d5:69:34:58:1d:
86:df:c4:51:ba:5e:3e:f9:ee:1b:c3:17:bd:ea:2e:
7d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F1:06:35:DD:26:C8:BB:E6:87:0A:19:F3:AE:EA:93:77:C6:5C:EB
X509v3 Authority Key Identifier:
keyid:3E:AF:58:3D:7C:1B:7B:4F:57:31:01:3C:8B:29:8B:A5:05:46:4E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ad:f6:f1:26:cc:0f:db:7b:d0:08:0d:91:cc:3a:b0:d6:d9:
49:7d:ea:54:58:c5:d2:65:63:b1:4b:88:a6:8f:c3:ce:23:42:
10:64:44:10:a4:22:35:f3:2d:20:03:e1:c9:b7:f0:59:1b:85:
44:57:75:b1:f8:12:29:20:c5:2c:f3:eb:d3:4a:c5:2e:6c:4c:
28:b5:de:2d:c1:a2:e8:34:ab:95:b9:47:c8:3a:58:cf:ec:02:
4b:3d:a6:e7:99:b7:44:0e:ea:32:99:a2:ae:be:7d:6a:e5:d9:
91:df:ff:d1:8c:c6:0e:31:97:8c:09:6a:2d:05:27:b1:16:d4:
08:d5:0d:7c:c8:a8:19:76:26:a3:b4:20:dc:51:92:a8:01:2e:
be:a3:59:e5:73:72:38:40:bb:f3:9b:d0:34:13:f2:e8:08:e5:
17:7c:07:4d:bc:94:d1:ef:8b:c6:6a:21:25:96:a5:dc:9d:a5:
79:86:84:14:fc:0d:e0:f0:a4:4a:36:ae:a2:f4:de:9c:cf:7c:
cc:38:72:5a:bf:00:b6:3b:1e:4a:a0:49:62:0f:de:88:f2:9d:
75:fd:22:5f:78:8b:91:a3:4d:81:66:3e:00:10:ab:67:94:c1:
6f:b0:cd:00:03:56:54:93:91:19:4f:2c:2b:63:db:83:ad:69:
ca:18:60:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:04 2025 by rpki-client