Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/24129b-eec6-4eb5-ba83-9bf9249bb30e/1/PDJlBkzF3ftGqdfOv-XP8XFNOmw.mft
File: PDJlBkzF3ftGqdfOv-XP8XFNOmw.mft (raw, json)
Hash identifier: OjifZFHCYBKcsKpOrIGraG+dUMKElE3Yiy1VW1AfDEk=
Subject key identifier: 99:0C:92:B1:EA:D7:E1:B3:F4:E8:9B:6F:97:85:A4:B6:9E:40:64:D7
Authority key identifier: 3C:32:65:06:4C:C5:DD:FB:46:A9:D7:CE:BF:E5:CF:F1:71:4D:3A:6C
Certificate issuer: /CN=3c3265064cc5ddfb46a9d7cebfe5cff1714d3a6c
Certificate serial: 0193AA6FE2409BE6E6E0FD8E3C3245CE053C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDJlBkzF3ftGqdfOv-XP8XFNOmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/24129b-eec6-4eb5-ba83-9bf9249bb30e/1/PDJlBkzF3ftGqdfOv-XP8XFNOmw.mft
Manifest number: 0640
Signing time: Mon 09 Dec 2024 08:01:18 +0000
Manifest this update: Mon 09 Dec 2024 08:01:18 +0000
Manifest next update: Tue 10 Dec 2024 08:01:18 +0000
Files and hashes: 1: PDJlBkzF3ftGqdfOv-XP8XFNOmw.crl (hash: iZNKWquQBYN1cSK1+qL879p+yt7rEBXS1bYLYmRJUmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:6f:e2:40:9b:e6:e6:e0:fd:8e:3c:32:45:ce:05:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3265064cc5ddfb46a9d7cebfe5cff1714d3a6c
Validity
Not Before: Dec 9 08:01:18 2024 GMT
Not After : Dec 10 08:01:18 2024 GMT
Subject: CN=990c92b1ead7e1b3f4e89b6f9785a4b69e4064d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:18:fc:3c:4a:4b:4b:f7:94:7c:aa:1e:2c:
1d:03:78:9a:7b:d0:ec:f5:76:7b:4a:a1:f8:2e:01:
5a:6c:b1:e2:86:97:bf:13:d5:b8:87:99:48:eb:76:
d9:6c:47:d9:ba:8a:7d:3d:01:ac:c9:1b:2d:f5:a2:
5e:a3:20:4a:91:f7:74:cf:22:3b:e4:ea:9e:c2:a6:
5c:33:7f:3f:ad:51:ef:ef:60:32:13:10:cc:4c:a7:
bb:21:8e:e0:65:3f:2a:c2:6d:6d:77:25:5a:cf:30:
a2:b0:24:25:a7:a8:a6:ae:27:42:42:7f:e4:85:0e:
77:e7:28:92:bc:fd:58:3a:89:29:d9:2f:0b:74:60:
12:26:ea:2f:2e:a9:55:e3:7a:46:41:28:49:36:c3:
47:86:68:0f:62:d8:3a:61:b2:b6:9c:15:86:d2:f0:
2f:4f:e2:b6:d7:67:6c:c1:31:0f:43:64:35:d4:9f:
45:14:94:a5:46:06:9c:b4:5d:17:4d:de:96:a4:9d:
20:fc:13:a4:c6:8c:34:7e:96:c9:fb:98:41:0c:b8:
a9:8b:21:b2:b5:e3:6d:48:5a:fb:f1:5f:16:b5:c6:
63:89:0a:6a:d3:d5:03:a8:94:22:1c:a3:da:43:11:
3a:f1:4e:a6:59:3a:dd:a8:12:69:39:71:a0:27:9b:
95:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0C:92:B1:EA:D7:E1:B3:F4:E8:9B:6F:97:85:A4:B6:9E:40:64:D7
X509v3 Authority Key Identifier:
keyid:3C:32:65:06:4C:C5:DD:FB:46:A9:D7:CE:BF:E5:CF:F1:71:4D:3A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDJlBkzF3ftGqdfOv-XP8XFNOmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/24129b-eec6-4eb5-ba83-9bf9249bb30e/1/PDJlBkzF3ftGqdfOv-XP8XFNOmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/24129b-eec6-4eb5-ba83-9bf9249bb30e/1/PDJlBkzF3ftGqdfOv-XP8XFNOmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d5:a6:de:ec:21:4c:5b:a4:dc:fe:0a:c1:dc:85:92:20:41:
98:1b:69:c9:91:74:b2:ff:48:b3:17:50:5e:cd:50:05:7e:12:
e9:e6:db:63:72:04:d5:66:16:07:5c:56:ef:4e:d1:c8:43:ed:
73:a4:45:91:6b:25:19:c4:de:01:64:b9:54:bd:00:c4:74:b3:
f0:5b:a5:5c:42:cd:b1:93:8c:51:dd:bf:65:ad:11:1d:b9:ed:
f1:01:6b:a4:e1:2d:5d:cf:96:91:b5:77:d3:62:7e:e3:0d:78:
45:c1:b8:2a:ea:4d:fc:ab:d2:db:d9:c5:4a:2e:87:df:5f:89:
58:2b:bb:52:2d:e0:c0:90:19:a5:71:68:08:67:1d:cb:b0:3b:
68:db:f1:a0:fd:c7:2a:15:13:db:3a:a6:b9:fe:09:e8:b7:d3:
d5:58:81:e4:1d:e7:45:70:bd:37:87:0a:c2:0d:a5:50:a2:5b:
c2:4e:bb:e5:a9:cd:18:83:d3:4b:be:75:09:83:72:ee:3b:61:
fc:13:52:7d:38:de:64:12:5f:d9:3d:dc:4c:3f:c6:97:0a:a5:
e9:66:99:50:95:01:da:ce:f8:db:b9:47:68:0f:99:2a:f8:c5:
74:2e:4e:81:81:c4:92:43:0f:0d:9a:21:69:16:e9:b3:b5:94:
b8:f5:b5:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZOqb+JAm+bm4P2OPDJFzgU8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMzI2NTA2NGNjNWRkZmI0NmE5ZDdjZWJmZTVjZmYxNzE0
ZDNhNmMwHhcNMjQxMjA5MDgwMTE4WhcNMjQxMjEwMDgwMTE4WjAzMTEwLwYDVQQD
Eyg5OTBjOTJiMWVhZDdlMWIzZjRlODliNmY5Nzg1YTRiNjllNDA2NGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/8Y/DxKS0v3lHyqHiwdA3iae9Ds
9XZ7SqH4LgFabLHihpe/E9W4h5lI63bZbEfZuop9PQGsyRst9aJeoyBKkfd0zyI7
5OqewqZcM38/rVHv72AyExDMTKe7IY7gZT8qwm1tdyVazzCisCQlp6imridCQn/k
hQ535yiSvP1YOokp2S8LdGASJuovLqlV43pGQShJNsNHhmgPYtg6YbK2nBWG0vAv
T+K212dswTEPQ2Q11J9FFJSlRgactF0XTd6WpJ0g/BOkxow0fpbJ+5hBDLipiyGy
teNtSFr78V8WtcZjiQpq09UDqJQiHKPaQxE68U6mWTrdqBJpOXGgJ5uVJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkMkrHq1+Gz9Oibb5eFpLaeQGTXMB8GA1UdIwQY
MBaAFDwyZQZMxd37RqnXzr/lz/FxTTpsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUERKbEJrekYzZnRHcWRmT3YtWFA4WEZOT213LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yNDEyOWItZWVjNi00ZWI1LWJhODMt
OWJmOTI0OWJiMzBlLzEvUERKbEJrekYzZnRHcWRmT3YtWFA4WEZOT213Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yNDEyOWItZWVjNi00ZWI1LWJhODMtOWJmOTI0OWJiMzBl
LzEvUERKbEJrekYzZnRHcWRmT3YtWFA4WEZOT213LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNWm3uwh
TFuk3P4KwdyFkiBBmBtpyZF0sv9IsxdQXs1QBX4S6ebbY3IE1WYWB1xW707RyEPt
c6RFkWslGcTeAWS5VL0AxHSz8FulXELNsZOMUd2/Za0RHbnt8QFrpOEtXc+WkbV3
02J+4w14RcG4KupN/KvS29nFSi6H31+JWCu7Ui3gwJAZpXFoCGcdy7A7aNvxoP3H
KhUT2zqmuf4J6LfT1ViB5B3nRXC9N4cKwg2lUKJbwk675anNGIPTS751CYNy7jth
/BNSfTjeZBJf2T3cTD/Glwql6WaZUJUB2s7427lHaA+ZKvjFdC5OgYHEkkMPDZoh
aRbps7WUuPW16g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 04:38:25 2025 by rpki-client