Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.mft
File: PpPoAxz911eQjNyf-ZJLfEukR48.mft (raw, json)
Hash identifier: YPJxCBllxsRT1zcS2e/Za6gNcK+tyBZ0KHP4QbKW034=
Subject key identifier: 7A:1C:45:82:67:D2:4C:91:C0:85:52:E7:37:44:02:9C:C6:B7:CC:85
Authority key identifier: 3E:93:E8:03:1C:FD:D7:57:90:8C:DC:9F:F9:92:4B:7C:4B:A4:47:8F
Certificate issuer: /CN=3e93e8031cfdd757908cdc9ff9924b7c4ba4478f
Certificate serial: 0194AB7F04E56F112C4CA730346067E98860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpPoAxz911eQjNyf-ZJLfEukR48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.mft
Manifest number: 052E
Signing time: Tue 28 Jan 2025 06:00:15 +0000
Manifest this update: Tue 28 Jan 2025 06:00:15 +0000
Manifest next update: Wed 29 Jan 2025 06:00:15 +0000
Files and hashes: 1: PpPoAxz911eQjNyf-ZJLfEukR48.crl (hash: v7mDEm3VJvynsJ1V50tBJWhRmWDU12xxHiPrOnDkqhM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ab:7f:04:e5:6f:11:2c:4c:a7:30:34:60:67:e9:88:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e93e8031cfdd757908cdc9ff9924b7c4ba4478f
Validity
Not Before: Jan 28 06:00:15 2025 GMT
Not After : Jan 29 06:00:15 2025 GMT
Subject: CN=7a1c458267d24c91c08552e73744029cc6b7cc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:06:eb:5a:41:0b:6a:49:7d:2c:0c:b4:ab:
fe:5c:42:98:42:40:6f:88:59:74:84:7d:b0:39:3d:
18:ff:02:17:20:d9:dc:f0:d1:57:12:9c:5c:6c:51:
b1:8d:c7:d6:3e:01:32:0a:a5:b4:da:6e:7a:8f:6b:
dc:cd:56:a6:69:d2:55:9e:ed:ee:3d:a8:62:fb:63:
2f:c5:6c:af:85:bd:a0:91:fb:68:cc:91:6b:0d:0d:
76:0a:38:37:90:fc:8f:6f:ba:f6:8e:fc:ba:89:c7:
dd:8d:4a:4a:57:a8:0e:fc:c4:74:c3:62:5b:31:4c:
70:60:89:03:58:c9:e3:46:59:91:77:fb:77:ed:62:
db:47:64:da:10:11:4f:70:39:7e:b2:4f:e5:75:a4:
c6:5e:3f:b8:25:90:ff:c9:f2:94:0e:4a:01:f8:99:
e8:7e:86:67:d9:64:24:79:c5:13:e8:f1:cf:ce:f8:
30:c3:81:9d:df:e0:a2:f9:7b:84:a9:a0:63:dc:4b:
97:e6:ea:7d:21:8c:af:6f:94:6e:ca:32:8e:ab:20:
76:38:bf:29:6d:c5:58:63:f7:26:94:c9:97:d5:38:
c8:ce:4f:9c:b9:3a:7e:61:0c:88:da:74:0f:1c:9f:
30:f4:64:fd:1d:85:3a:fd:c0:9d:29:60:c0:34:7b:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1C:45:82:67:D2:4C:91:C0:85:52:E7:37:44:02:9C:C6:B7:CC:85
X509v3 Authority Key Identifier:
keyid:3E:93:E8:03:1C:FD:D7:57:90:8C:DC:9F:F9:92:4B:7C:4B:A4:47:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpPoAxz911eQjNyf-ZJLfEukR48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:59:6f:17:a3:90:87:1a:6b:35:1d:65:a4:cf:6a:30:d9:f2:
f9:b1:8d:c4:f8:f5:ba:9e:25:c1:3d:b5:1f:7b:b8:f5:7c:86:
88:f8:7b:c2:0b:e3:75:8d:ef:d9:8c:39:7b:a3:bf:4f:51:9b:
71:dd:08:ea:d2:7a:ed:5c:b8:cd:37:fe:d0:a5:04:2f:51:8c:
97:cb:0b:17:19:75:9c:c3:97:74:2e:1c:91:d1:c4:15:75:25:
6d:8e:be:d0:2b:15:ee:bc:f9:2f:ea:75:af:53:94:c7:67:e4:
92:8e:a3:68:68:8a:74:91:39:0e:f2:06:50:ac:aa:68:d5:02:
99:d1:26:09:ee:2c:71:eb:d8:de:b7:a1:01:22:e4:4b:5b:05:
ed:59:5c:b8:b5:8f:d9:73:7d:a2:90:ad:f5:bf:b4:b4:91:0f:
eb:84:9b:59:23:d2:16:bf:e6:2a:43:07:b8:ca:86:26:d5:38:
7b:38:32:39:3a:a0:81:a2:75:25:e8:7b:30:f5:a7:85:37:67:
c6:94:29:ee:a4:68:b4:b9:f9:26:44:2d:e0:0b:69:de:b9:4b:
d8:16:8c:82:5f:ad:e9:38:72:92:82:27:d8:58:f8:b0:f1:10:
e1:36:2d:6e:65:e3:b5:c8:96:0b:4b:c4:29:47:d9:07:5b:47:
4d:d5:e8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:32:12 2025 by rpki-client