Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
File: PRf0av89iyHwD-6PY16uNKf0pNc.mft (raw, json)
Hash identifier: VXq8jr5yTzXZ2loIEti2yQbminl2Q7KOu0Zxi5VuPLI=
Subject key identifier: 8B:A8:EB:9C:F2:E9:4F:C1:A4:C5:C0:54:4F:0F:C2:76:B3:D5:99:6F
Authority key identifier: 3D:17:F4:6A:FF:3D:8B:21:F0:0F:EE:8F:63:5E:AE:34:A7:F4:A4:D7
Certificate issuer: /CN=3d17f46aff3d8b21f00fee8f635eae34a7f4a4d7
Certificate serial: 0194BBCEACABD4D01C8918B146F462D035FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
Manifest number: 0918
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: PRf0av89iyHwD-6PY16uNKf0pNc.crl (hash: weQxHmOLlJhbNVnt6PNi9E/CXAOLx6TVrsr+hQ7Xojc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ac:ab:d4:d0:1c:89:18:b1:46:f4:62:d0:35:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d17f46aff3d8b21f00fee8f635eae34a7f4a4d7
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=8ba8eb9cf2e94fc1a4c5c0544f0fc276b3d5996f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0a:08:6c:1a:a8:71:b1:02:2b:c4:9d:e3:22:
8e:52:ed:c4:11:7f:4b:06:4d:f9:5b:6e:7b:1d:f2:
3c:8f:98:de:fc:1c:9e:54:e6:31:3a:d8:5f:0f:fa:
e2:88:81:b4:75:68:66:cf:7b:81:c0:e4:ec:4a:96:
1d:e5:16:74:2b:f5:4e:8b:a7:60:a0:35:a4:44:52:
6c:fd:98:b4:11:2a:5e:23:e8:3d:5c:fc:c5:4a:c5:
9d:21:aa:b0:e3:d9:58:95:27:02:e1:81:4d:b9:c7:
34:14:84:87:d1:69:36:37:7b:48:a7:94:aa:39:c3:
79:ce:0b:41:48:5c:cd:89:55:c3:c3:1e:28:fe:6b:
cf:b8:eb:cd:40:6a:c7:af:66:60:5c:dc:69:3d:d7:
45:9d:91:bd:2d:bb:8f:2d:a7:5c:11:59:77:ab:bd:
47:8d:22:dc:72:26:84:ee:03:b2:c6:03:59:d8:44:
fe:44:3d:e8:29:ec:39:8c:90:74:2d:fd:7a:13:d7:
d7:77:ba:89:9d:1d:a0:73:81:91:26:85:84:75:a8:
15:91:c9:5c:cf:c4:a9:4e:e2:24:a5:c0:f5:98:e9:
fe:81:54:5e:e0:d9:f8:b6:52:fa:f5:13:fd:6b:5e:
e5:87:db:d2:e2:63:66:c9:04:af:cd:af:c8:43:05:
11:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A8:EB:9C:F2:E9:4F:C1:A4:C5:C0:54:4F:0F:C2:76:B3:D5:99:6F
X509v3 Authority Key Identifier:
keyid:3D:17:F4:6A:FF:3D:8B:21:F0:0F:EE:8F:63:5E:AE:34:A7:F4:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:08:f6:b9:f9:30:be:ed:21:66:17:6d:81:23:45:64:95:5f:
7e:7d:96:3d:b7:14:11:3d:60:45:75:c8:3c:28:ed:56:91:3a:
09:41:8a:58:eb:27:a6:03:8e:69:b6:1d:d1:1c:e2:e6:4a:67:
7f:c2:f7:74:0b:46:c9:d3:a7:7c:fa:83:28:6d:f8:64:ba:cb:
6d:7d:59:91:40:01:c1:f4:7a:e5:21:6e:43:2b:b0:10:b9:12:
b4:26:dd:ee:8f:54:54:ed:41:3c:ff:29:ea:18:e4:7d:cf:aa:
e9:c0:6c:b1:52:e1:90:8a:b9:d1:71:af:4b:3e:31:db:d7:c8:
ee:9f:76:eb:65:8b:80:ee:0a:0e:1e:bc:7b:f3:05:9b:13:29:
0b:07:e4:9c:15:10:11:ae:e3:df:93:e6:c0:70:36:24:60:b1:
68:9a:83:20:c4:9a:c0:22:f5:10:a7:5a:98:55:9e:60:24:4b:
d0:46:60:eb:24:76:ee:4d:66:ab:8c:78:2e:27:6a:88:79:b0:
cc:ce:90:1c:b0:e0:fc:66:6d:2d:f5:40:95:9d:f0:62:d0:df:
7b:53:74:e6:c0:2d:07:13:2c:5b:65:2b:16:79:49:9f:bb:27:
13:4a:a7:fa:ec:5b:d4:01:ae:e8:1c:7c:b8:9d:2d:75:c5:7c:
af:47:05:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:17 2025 by rpki-client