Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/66be81-be88-45a8-9c00-314fa25fc29e/1/PlPauUleR4dQPawcGbbHx49dUUQ.mft
File: PlPauUleR4dQPawcGbbHx49dUUQ.mft (raw, json)
Hash identifier: cstxoqGksrDfiFZsH++GfPS5dt/1Vss5jvIu/qI7EXo=
Subject key identifier: 54:E4:C6:B8:7F:EC:C1:6B:D2:6E:81:08:8C:44:6F:48:55:E5:85:0D
Authority key identifier: 3E:53:DA:B9:49:5E:47:87:50:3D:AC:1C:19:B6:C7:C7:8F:5D:51:44
Certificate issuer: /CN=3e53dab9495e4787503dac1c19b6c7c78f5d5144
Certificate serial: 01974478C4BBAA8F38932F7E92DC154C8283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlPauUleR4dQPawcGbbHx49dUUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/66be81-be88-45a8-9c00-314fa25fc29e/1/PlPauUleR4dQPawcGbbHx49dUUQ.mft
Manifest number: 03
Signing time: Fri 06 Jun 2025 09:00:54 +0000
Manifest this update: Fri 06 Jun 2025 09:00:54 +0000
Manifest next update: Sat 07 Jun 2025 09:00:54 +0000
Files and hashes: 1: PlPauUleR4dQPawcGbbHx49dUUQ.crl (hash: DRbg36m6S96f18eR/RkePkaEU/2l0a01baneqqjXRdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:78:c4:bb:aa:8f:38:93:2f:7e:92:dc:15:4c:82:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e53dab9495e4787503dac1c19b6c7c78f5d5144
Validity
Not Before: Jun 6 09:00:54 2025 GMT
Not After : Jun 7 09:00:54 2025 GMT
Subject: CN=54e4c6b87fecc16bd26e81088c446f4855e5850d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:15:fa:eb:27:9f:d2:88:61:98:5b:94:7a:50:
9c:61:59:c1:68:fc:31:0f:ca:ab:f1:b2:e0:46:6b:
95:0d:9d:3f:9d:61:c9:f4:62:05:f1:ce:2f:00:45:
15:c9:29:05:b0:37:6e:18:47:92:5a:19:fa:a5:75:
4d:4a:6f:44:9a:f6:7d:f8:5e:49:f6:df:be:71:f2:
d1:68:bb:fc:96:e6:fb:84:2e:28:43:ac:bd:35:13:
4c:78:a7:db:e7:66:83:df:e1:a6:8a:e1:a9:62:61:
25:6d:8d:08:9c:92:d4:32:00:0f:f9:96:2e:59:66:
bc:31:67:98:41:a7:81:82:93:6c:1c:b2:a2:87:b9:
d3:0d:91:1c:ef:b9:e2:4a:f5:fb:06:53:a3:0a:36:
2f:b9:c3:b8:68:f0:23:14:0c:95:a7:e8:8a:36:65:
d6:81:67:26:32:51:3a:f3:7e:d3:d7:a4:b1:02:5a:
40:49:5f:3a:1b:8e:50:d2:70:28:ad:aa:47:28:4a:
72:d0:23:25:d8:a9:2a:8a:4e:ea:de:cf:cf:fc:1a:
90:1b:2c:66:c5:ba:9a:22:79:5c:53:57:d0:ba:f7:
26:3a:7a:1c:9b:2e:1f:13:ca:ce:1d:f7:66:35:47:
2a:28:c6:8b:80:1d:77:94:3c:f0:da:79:d1:49:58:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E4:C6:B8:7F:EC:C1:6B:D2:6E:81:08:8C:44:6F:48:55:E5:85:0D
X509v3 Authority Key Identifier:
keyid:3E:53:DA:B9:49:5E:47:87:50:3D:AC:1C:19:B6:C7:C7:8F:5D:51:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlPauUleR4dQPawcGbbHx49dUUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/66be81-be88-45a8-9c00-314fa25fc29e/1/PlPauUleR4dQPawcGbbHx49dUUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/66be81-be88-45a8-9c00-314fa25fc29e/1/PlPauUleR4dQPawcGbbHx49dUUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:27:0c:d8:b9:bd:95:3a:34:46:06:65:a6:8e:1a:3e:c3:ad:
40:cb:4a:f4:af:13:fe:8c:1b:57:22:9b:1b:a5:03:17:55:17:
7f:1d:b0:67:5c:49:2d:79:ac:eb:54:b3:5b:0a:8a:35:91:d6:
94:2d:cb:bd:ae:fa:fc:86:eb:d3:0e:f5:1c:13:d5:0f:27:1e:
6f:3a:34:6a:b2:ea:3f:d2:26:9b:d5:ac:b3:ac:5e:22:a2:29:
f8:be:22:6b:4e:06:81:e2:b3:b6:8d:36:30:0f:98:14:b9:1c:
00:82:1b:ff:2f:eb:4d:da:5b:bd:37:ba:03:5f:51:82:4f:b7:
86:2b:83:11:46:91:ba:fc:4a:e0:f8:8c:47:cd:1d:d2:44:26:
5d:50:4d:a6:3e:c6:2b:d8:47:f5:5f:4e:3e:78:27:f2:43:45:
b3:40:eb:33:9f:bb:0f:3e:93:10:ac:bd:46:a9:9a:5b:cb:44:
0f:20:96:25:1c:3c:ce:90:a6:65:14:47:be:db:c4:4c:e7:74:
dd:92:bf:1e:c3:d7:18:ab:fa:1c:6e:82:b2:aa:01:99:b0:38:
4a:f0:66:42:e7:cd:45:d8:d5:cd:7c:78:64:ce:a2:94:28:0a:
14:6a:25:3e:20:35:eb:36:02:c9:5e:33:e6:68:eb:be:fd:54:
54:34:a9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:47 2025 by rpki-client