Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
File: PRKXkoZrFiE7VsW_pr66x8YYsVA.mft (raw, json)
Hash identifier: LCumHLO0DkTdP9tGJ7V8pYsD2hIugYRsHFOFB+gsufw=
Subject key identifier: DB:22:94:FF:F8:AB:9D:0B:C4:F9:7A:44:0A:C4:68:5D:FC:F5:48:9C
Authority key identifier: 3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
Certificate issuer: /CN=3d129792866b16213b56c5bfa6bebac7c618b150
Certificate serial: 0194BBCE2FA9814FE88CD77E4BB700F5E4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
Manifest number: 0FB8
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: PRKXkoZrFiE7VsW_pr66x8YYsVA.crl (hash: d0wSPc7ZCjx4DVbq3NriiP7upoOZDjFO4Pawg8koDQA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2f:a9:81:4f:e8:8c:d7:7e:4b:b7:00:f5:e4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d129792866b16213b56c5bfa6bebac7c618b150
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=db2294fff8ab9d0bc4f97a440ac4685dfcf5489c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:0d:49:94:f3:f1:15:d3:71:ac:18:a9:ed:
40:d5:a4:2c:95:ad:aa:4b:b1:57:0a:9a:f6:92:94:
aa:33:4f:de:52:88:5b:75:65:07:84:b7:06:64:7d:
53:a3:1d:bf:48:79:47:aa:9d:a3:c9:76:16:7f:f7:
24:74:52:9a:78:88:e9:0e:5f:b7:33:5a:32:08:6d:
bc:6f:e5:cf:ce:fb:9b:f9:54:90:35:3f:8c:06:e9:
9e:e0:ec:d0:4a:ea:ac:93:c0:5e:46:80:93:71:ff:
69:d0:13:ab:a2:77:af:10:19:cc:bd:3f:18:2b:8c:
62:a8:c4:71:6d:a4:85:b2:f7:0e:21:51:1d:16:1c:
84:f7:77:cd:a1:25:eb:e0:7e:b0:99:a1:64:da:f0:
10:f3:20:4d:87:d6:04:3c:2d:bf:c7:a8:76:68:b8:
5a:0d:37:a8:d6:4f:b4:27:84:a9:60:55:0c:9b:c3:
07:6c:cb:8f:fe:40:1b:1a:67:9f:ec:0a:e8:e1:2b:
c1:49:79:b6:c0:ac:3c:9b:f2:ee:e9:e0:02:35:8b:
c9:32:b8:d4:d6:12:31:5d:7f:ee:c0:57:a6:49:4e:
ac:0e:4d:e0:b6:cd:86:2f:45:ff:93:9a:e8:e8:6c:
e7:d3:71:ab:00:89:35:31:c2:1f:9a:5e:33:d0:33:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:22:94:FF:F8:AB:9D:0B:C4:F9:7A:44:0A:C4:68:5D:FC:F5:48:9C
X509v3 Authority Key Identifier:
keyid:3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:34:44:6a:d1:5b:2a:12:90:ff:0e:a0:c5:aa:59:6c:8c:b5:
11:d4:1e:f4:32:0c:e7:28:f0:6d:a9:36:6a:5a:56:2c:39:c4:
43:18:f0:f7:d2:8d:51:7a:b2:5a:fe:8c:0c:6d:09:ef:12:10:
af:10:80:cf:e2:96:ee:39:c1:0b:94:a7:08:c1:81:5c:98:30:
08:6f:79:dd:fe:f8:18:1f:33:93:da:6f:92:b6:c0:11:89:fc:
e0:08:49:33:f8:6f:0b:6e:36:e0:30:92:c2:ff:af:8a:0e:0f:
43:64:23:48:b1:3d:72:09:4d:23:8a:b0:0e:f0:28:7c:28:fb:
03:ec:fa:83:e8:2f:56:a9:8e:8d:8f:35:2f:f1:7f:70:57:1c:
1d:13:f9:62:c7:d9:ae:0c:5e:b5:c8:33:aa:f6:a3:be:1d:dd:
29:0e:77:ea:6b:c4:69:6e:04:fe:72:d6:b4:c3:54:c9:e1:4d:
0e:66:06:53:58:fe:21:70:8f:2a:41:9b:21:7b:f8:45:f1:64:
29:b9:06:8e:0d:38:1c:03:c5:de:1c:6c:47:73:36:aa:8a:52:
8c:09:7c:27:4c:45:8f:8d:78:39:a3:53:d9:fc:9e:73:21:35:
a4:2c:f7:26:5a:8d:ef:d4:88:af:64:be:af:2e:77:fc:14:b3:
44:3e:48:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:26 2025 by rpki-client