Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/975bee-d1c6-4192-9762-3355971876be/1/PNFXasIrdA2mqvMlN_4xl8-ALB8.mft
File: PNFXasIrdA2mqvMlN_4xl8-ALB8.mft (raw, json)
Hash identifier: wy9Xf2ySHa1eqdxwOHa4rPXdsjUe9VVdSuiWlWvW1oI=
Subject key identifier: D5:E1:AE:80:B0:CE:D5:6C:E0:F4:DE:64:48:A9:53:1B:20:7A:C6:56
Authority key identifier: 3C:D1:57:6A:C2:2B:74:0D:A6:AA:F3:25:37:FE:31:97:CF:80:2C:1F
Certificate issuer: /CN=3cd1576ac22b740da6aaf32537fe3197cf802c1f
Certificate serial: 01851A7B88EF647F155F0663D08EBCA8368B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNFXasIrdA2mqvMlN_4xl8-ALB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/975bee-d1c6-4192-9762-3355971876be/1/PNFXasIrdA2mqvMlN_4xl8-ALB8.mft
Manifest number: 0BCD
Signing time: Fri 16 Dec 2022 10:29:41 +0000
Manifest this update: Fri 16 Dec 2022 10:29:41 +0000
Manifest next update: Sat 17 Dec 2022 10:29:41 +0000
Files and hashes: 1: PNFXasIrdA2mqvMlN_4xl8-ALB8.crl (hash: mCe9m6/RIKpDYi6j0TUVQzr7LLaVCx1yZUhE7pcBuD0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:7b:88:ef:64:7f:15:5f:06:63:d0:8e:bc:a8:36:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd1576ac22b740da6aaf32537fe3197cf802c1f
Validity
Not Before: Dec 16 10:29:41 2022 GMT
Not After : Dec 17 10:29:41 2022 GMT
Subject: CN=d5e1ae80b0ced56ce0f4de6448a9531b207ac656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:c3:3f:65:d7:da:2c:86:dc:89:b4:5d:a7:
31:b9:4a:c1:69:af:d3:ae:66:13:7e:96:c6:07:6c:
8a:a6:6e:eb:71:96:7c:6a:19:aa:1a:ac:38:44:cc:
1a:ac:89:73:77:cb:8c:4f:09:c7:92:66:c4:14:05:
1d:43:24:1c:ef:78:b8:e8:18:7f:97:9e:f4:20:7e:
4e:26:75:c0:ab:b7:36:bd:32:47:88:21:3e:be:8b:
19:21:57:79:ab:d4:72:10:b8:11:77:0e:3b:0d:70:
69:f2:9d:7a:d3:95:4e:1c:85:55:b8:09:52:c5:83:
b0:47:3d:f6:5e:d4:fa:4e:03:bc:50:93:a0:1e:12:
3c:be:a6:53:65:97:80:26:d0:ec:20:90:5e:35:08:
92:90:42:4e:7f:ff:81:f1:3f:cf:b5:a6:bc:4f:45:
62:08:99:75:43:79:92:a6:ea:7f:12:f9:99:ca:a7:
2d:50:cb:70:eb:62:80:3c:af:f8:36:1c:e0:36:39:
4f:f3:2b:df:d9:ea:10:9d:25:f9:e3:d2:71:b3:be:
e2:6e:c0:7f:22:ec:8b:16:08:a1:c4:03:97:5d:7b:
34:c5:f3:d3:2c:e2:72:b4:e4:cb:4e:6c:fd:c6:12:
80:27:57:07:04:35:b9:ee:76:78:33:c9:9d:bb:03:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E1:AE:80:B0:CE:D5:6C:E0:F4:DE:64:48:A9:53:1B:20:7A:C6:56
X509v3 Authority Key Identifier:
keyid:3C:D1:57:6A:C2:2B:74:0D:A6:AA:F3:25:37:FE:31:97:CF:80:2C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNFXasIrdA2mqvMlN_4xl8-ALB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/975bee-d1c6-4192-9762-3355971876be/1/PNFXasIrdA2mqvMlN_4xl8-ALB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/975bee-d1c6-4192-9762-3355971876be/1/PNFXasIrdA2mqvMlN_4xl8-ALB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:70:48:6c:62:2b:1a:ae:e3:c3:4b:c7:ae:ed:90:04:39:52:
cc:03:5f:a3:a2:72:36:84:71:b9:69:fb:75:43:2b:19:ee:62:
d1:f9:15:74:3a:66:11:45:d5:c3:3f:1c:d6:6a:52:fd:ba:14:
f8:7c:cb:a6:3a:72:91:4d:04:68:81:58:a7:28:ef:99:fe:12:
1b:97:fc:37:c5:ea:70:22:3e:24:35:26:7a:05:e2:1a:37:78:
5c:f0:8d:52:ba:db:0c:fc:9c:b7:17:f6:dc:64:a7:4c:df:b2:
fb:74:d9:04:2a:b3:f6:8f:3c:e0:d6:74:1c:2a:ed:8f:48:7f:
a6:51:92:d8:67:2b:d6:15:b0:34:85:37:c1:b0:2a:86:f4:29:
8b:1f:83:3c:3d:29:4e:00:77:b1:af:c2:e3:09:59:8c:e2:60:
17:60:3a:74:b2:9f:72:c2:e5:8a:46:7d:94:e8:d6:4f:47:f0:
8f:b8:a0:f2:9d:ef:e6:b3:2f:0a:5c:fb:41:4d:f7:7e:11:ca:
27:48:a4:ff:6e:d1:b2:cd:49:c0:a1:32:0e:d3:02:04:c4:9f:
e7:29:58:1d:0b:71:31:ac:87:7b:9f:bf:87:e2:a6:df:e3:99:
f9:c5:53:a7:2b:1f:88:af:48:21:db:3a:c6:31:46:86:86:7e:
77:64:51:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:43 2024 by rpki-client on console-fra.rpki-client.org