Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/974b29-7ece-41ce-b88b-4750c0b2116a/1/pCxsGvKPP4VmrR80IDC_Bg92Vnc.mft
File: pCxsGvKPP4VmrR80IDC_Bg92Vnc.mft (raw, json)
Hash identifier: X3Z7AHeyhhEVOP75SmvTngnGZW4wZX39ykXRXfJMPJA=
Subject key identifier: 9F:63:B8:2C:2F:8B:2D:1E:06:AF:90:8F:F4:EA:52:E2:8E:DE:84:C6
Authority key identifier: A4:2C:6C:1A:F2:8F:3F:85:66:AD:1F:34:20:30:BF:06:0F:76:56:77
Certificate issuer: /CN=a42c6c1af28f3f8566ad1f342030bf060f765677
Certificate serial: 0194BBCE477B22B8A4484D2DAA472EC816C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCxsGvKPP4VmrR80IDC_Bg92Vnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/974b29-7ece-41ce-b88b-4750c0b2116a/1/pCxsGvKPP4VmrR80IDC_Bg92Vnc.mft
Manifest number: 049A
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: pCxsGvKPP4VmrR80IDC_Bg92Vnc.crl (hash: OTQxR3ITYkJwYKxcuaXk4BONAQPNoPAnkKSJn+1NBEc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:47:7b:22:b8:a4:48:4d:2d:aa:47:2e:c8:16:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42c6c1af28f3f8566ad1f342030bf060f765677
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=9f63b82c2f8b2d1e06af908ff4ea52e28ede84c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:0b:d3:74:f2:1d:93:a7:73:ad:e4:01:42:
a9:38:d8:a1:a7:87:ed:68:18:89:2d:07:12:6e:c6:
4b:68:db:b0:b6:16:68:30:82:b6:76:6c:7c:e5:c6:
1a:27:3e:fc:bb:d8:2f:2d:79:1e:0a:d5:2d:55:6a:
0c:3c:1d:bc:42:0d:29:a1:9f:5d:eb:f0:5f:68:00:
37:f5:78:7e:84:41:2f:ff:1b:c9:8a:32:58:df:8a:
2b:88:7c:5d:df:ac:40:40:a2:4e:3e:d3:b5:37:46:
b6:b3:16:0c:6d:fe:1b:f5:4f:b0:a9:f0:d8:48:ad:
ed:27:5f:2e:ba:61:fe:dd:83:7c:05:31:fa:03:ee:
97:60:73:68:50:11:97:99:4e:da:11:c7:8e:f7:e4:
33:cb:a2:f3:98:db:53:dc:24:90:b1:35:45:f9:6f:
c9:d2:d8:f7:be:84:05:ab:de:49:2b:61:78:c0:ed:
d4:c7:72:8b:64:2d:7b:fa:fa:ad:33:86:c3:6d:4e:
21:54:0c:06:06:35:64:af:89:7d:c9:d7:f3:40:73:
fb:c6:49:94:99:49:0d:fa:04:1e:df:9c:20:c4:88:
01:0e:c0:df:51:74:4d:24:61:00:5d:02:9c:d6:6d:
77:4e:12:4d:91:42:ca:65:f0:0d:a6:0e:47:05:d1:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:63:B8:2C:2F:8B:2D:1E:06:AF:90:8F:F4:EA:52:E2:8E:DE:84:C6
X509v3 Authority Key Identifier:
keyid:A4:2C:6C:1A:F2:8F:3F:85:66:AD:1F:34:20:30:BF:06:0F:76:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCxsGvKPP4VmrR80IDC_Bg92Vnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/974b29-7ece-41ce-b88b-4750c0b2116a/1/pCxsGvKPP4VmrR80IDC_Bg92Vnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/974b29-7ece-41ce-b88b-4750c0b2116a/1/pCxsGvKPP4VmrR80IDC_Bg92Vnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:89:23:e7:93:60:20:bf:e2:db:20:2a:c6:51:d7:a1:5d:ed:
16:43:08:6c:ca:48:ea:5b:22:b8:d6:fa:bb:04:43:69:f0:2a:
40:3c:72:49:51:8a:95:a4:fc:32:81:97:f4:85:97:b0:8d:3d:
e5:ed:3d:9b:a8:95:71:1a:b2:38:0a:49:1e:ea:0f:64:ed:3f:
c7:fb:84:f7:e8:40:5a:c7:36:dd:5e:7b:4c:26:b0:a0:5e:6f:
8c:13:87:5d:91:3b:f2:12:b9:99:17:07:96:30:a9:af:8e:5a:
03:48:65:33:d6:b2:70:e6:9c:58:b4:43:29:46:02:a2:8a:31:
0d:82:54:bf:e8:a9:2d:81:6b:b6:d9:43:96:e5:56:40:2a:f7:
ce:42:2a:f0:83:03:92:93:35:77:68:56:3a:37:57:93:26:bd:
01:3f:65:16:58:31:2b:e4:0d:b4:fe:19:1c:a9:96:97:ee:27:
64:ab:95:27:5f:42:b7:07:f4:3d:45:f6:27:e8:c9:58:89:a3:
a5:84:e0:ae:64:ea:43:54:d9:fc:f1:cd:93:ca:91:58:4e:73:
4d:28:a1:f3:5d:e5:c3:80:da:bb:00:9d:b8:96:85:11:7c:ca:
2d:d9:3a:34:86:ab:ba:b1:b6:ac:fb:90:e0:07:4f:90:bb:6c:
19:06:f7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:04 2025 by rpki-client