Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/7d38b3-1210-4b49-aa71-37695828dbf4/1/PSHzZqInwy5a81ik_fegqUhjgVA.mft
File: PSHzZqInwy5a81ik_fegqUhjgVA.mft (raw, json)
Hash identifier: Vt2JPPU5MUhuuw2Syuin5BufP3lRrh+0cqTueKfbwTY=
Subject key identifier: 98:F3:13:2C:13:69:1A:B8:EE:39:60:2A:72:9E:63:28:C8:EE:39:BC
Authority key identifier: 3D:21:F3:66:A2:27:C3:2E:5A:F3:58:A4:FD:F7:A0:A9:48:63:81:50
Certificate issuer: /CN=3d21f366a227c32e5af358a4fdf7a0a948638150
Certificate serial: 01917EAEB5BCDA6C13BB233EA8D420014FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSHzZqInwy5a81ik_fegqUhjgVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/7d38b3-1210-4b49-aa71-37695828dbf4/1/PSHzZqInwy5a81ik_fegqUhjgVA.mft
Manifest number: 04DE
Signing time: Fri 23 Aug 2024 10:01:04 +0000
Manifest this update: Fri 23 Aug 2024 10:01:04 +0000
Manifest next update: Sat 24 Aug 2024 10:01:04 +0000
Files and hashes: 1: PSHzZqInwy5a81ik_fegqUhjgVA.crl (hash: ZztDcb1DwgjfQywcIKJmNiSYbJ9v3Q/c4FIbNdmov3I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7e:ae:b5:bc:da:6c:13:bb:23:3e:a8:d4:20:01:4f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d21f366a227c32e5af358a4fdf7a0a948638150
Validity
Not Before: Aug 23 10:01:04 2024 GMT
Not After : Aug 24 10:01:04 2024 GMT
Subject: CN=98f3132c13691ab8ee39602a729e6328c8ee39bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:2a:78:7a:d6:80:ed:c9:26:59:9c:c1:f2:
9b:7e:30:43:68:a2:9a:ae:92:8c:d2:98:45:ff:1f:
81:87:13:6c:1d:29:5e:14:58:93:0b:33:ec:ec:62:
e3:6b:13:fb:25:f0:46:1f:cf:76:0f:01:39:a4:7c:
53:57:fe:7e:3b:65:b7:95:42:e3:2e:ed:b7:c3:b4:
db:f0:5a:6e:fa:a6:36:40:c9:54:59:31:29:88:b1:
ef:23:87:b9:c5:36:ed:8b:6e:1d:5d:db:90:f8:61:
cf:08:0d:cb:e9:bd:7a:10:5b:49:76:36:43:ef:86:
90:1e:d6:ee:e3:2c:cd:ac:f3:cb:62:38:b9:77:b2:
b6:af:92:12:b3:92:a4:b4:ba:67:05:f4:90:88:af:
ef:9a:98:be:a7:cf:15:da:9f:69:c1:9c:88:df:86:
53:da:3b:67:20:b9:23:17:3b:e7:b4:a5:74:a5:e1:
13:90:c6:f2:db:e7:c8:ff:3b:88:52:16:94:92:3c:
22:09:94:06:02:c0:2f:bd:0f:d3:02:37:9a:bb:0e:
6e:6e:0c:ee:cb:01:ca:b2:6a:ed:c4:d8:89:fa:18:
e3:79:01:68:5e:fb:b5:c8:82:0e:56:f7:a3:6e:59:
0a:12:7c:1b:be:8b:d8:fb:0a:89:fe:63:33:0b:3d:
70:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F3:13:2C:13:69:1A:B8:EE:39:60:2A:72:9E:63:28:C8:EE:39:BC
X509v3 Authority Key Identifier:
keyid:3D:21:F3:66:A2:27:C3:2E:5A:F3:58:A4:FD:F7:A0:A9:48:63:81:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSHzZqInwy5a81ik_fegqUhjgVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/7d38b3-1210-4b49-aa71-37695828dbf4/1/PSHzZqInwy5a81ik_fegqUhjgVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/7d38b3-1210-4b49-aa71-37695828dbf4/1/PSHzZqInwy5a81ik_fegqUhjgVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ee:89:fa:b3:de:b9:c0:db:42:01:c0:c6:e8:eb:27:1f:d6:
fc:f7:fa:d0:fa:11:e0:3b:7c:73:db:30:17:d1:9c:b6:c3:cd:
76:89:30:1b:23:db:d0:91:2b:23:6b:43:fe:d6:53:90:5a:d1:
69:52:89:42:93:8b:c4:28:f6:f6:e8:7f:e5:1e:33:b1:2f:66:
0b:ce:f6:2f:97:17:f4:a9:55:78:9d:4d:2b:0e:9d:97:9b:42:
6a:ac:22:d2:04:f0:10:aa:d2:cd:af:5f:bf:0d:e9:33:d2:86:
51:fc:2e:bf:5b:f0:06:ea:07:a5:e3:6b:19:ff:a0:48:22:9a:
f1:83:6f:b5:bf:2b:b0:24:8a:93:65:9a:68:7d:bc:ae:f3:04:
e3:7b:01:94:c1:b7:da:df:3c:2c:68:35:26:c9:f0:66:4f:4c:
58:b5:23:6b:e1:57:a8:bc:56:f1:7a:8e:03:87:28:ac:0e:f4:
3b:0a:b2:63:bf:4b:23:4e:f7:b6:17:51:34:c6:a5:b8:ba:0e:
6b:fe:cc:86:fd:55:6f:1a:6b:12:3e:1b:22:e6:a2:70:d3:f9:
7a:56:81:16:9d:ef:57:dd:70:49:8e:a0:a7:71:50:6f:c0:d4:
2a:fa:05:10:c5:ab:9c:ef:a9:cd:3b:20:8d:11:83:60:be:5c:
86:ab:25:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:34:18 2025 by rpki-client