Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/895a29-54c7-4f5e-9df1-c0f482a206c3/1/pCl3AfODOEHERuv740Jwsm-oK7U.mft
File: pCl3AfODOEHERuv740Jwsm-oK7U.mft (raw, json)
Hash identifier: 7CofV72TH27OIoVSTf6Z+ht3EZPYqS+gaaWimpRmUqg=
Subject key identifier: 0A:13:53:15:EF:11:70:8C:E2:FF:56:29:4E:DD:F7:50:3F:5B:62:FA
Authority key identifier: A4:29:77:01:F3:83:38:41:C4:46:EB:FB:E3:42:70:B2:6F:A8:2B:B5
Certificate issuer: /CN=a4297701f3833841c446ebfbe34270b26fa82bb5
Certificate serial: 0184F0902405B3127D7DA421D87036B2BC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCl3AfODOEHERuv740Jwsm-oK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/895a29-54c7-4f5e-9df1-c0f482a206c3/1/pCl3AfODOEHERuv740Jwsm-oK7U.mft
Manifest number: 08D6
Signing time: Thu 08 Dec 2022 07:08:08 +0000
Manifest this update: Thu 08 Dec 2022 07:08:08 +0000
Manifest next update: Fri 09 Dec 2022 07:08:08 +0000
Files and hashes: 1: pCl3AfODOEHERuv740Jwsm-oK7U.crl (hash: 0YPnlQ3bikUDKdRVtXZS79AOTgHYQ14rb6fthA3EZkY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f0:90:24:05:b3:12:7d:7d:a4:21:d8:70:36:b2:bc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4297701f3833841c446ebfbe34270b26fa82bb5
Validity
Not Before: Dec 8 07:08:08 2022 GMT
Not After : Dec 9 07:08:08 2022 GMT
Subject: CN=0a135315ef11708ce2ff56294eddf7503f5b62fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:f9:1e:81:f2:f0:08:aa:c4:03:aa:74:46:
55:3f:31:ae:c6:b0:ac:cd:da:84:b4:f9:6e:b9:b3:
be:48:bc:42:c5:c3:99:42:4c:d1:56:43:00:ee:8e:
36:f6:ec:04:bd:bc:4e:f0:1a:52:28:9d:a0:ee:76:
90:72:37:55:3b:b0:f9:70:f7:d2:d1:84:ca:8e:b6:
00:19:f8:5a:6f:a7:6f:45:13:e2:71:93:55:fc:7b:
36:dd:1d:5a:99:d9:60:f1:45:fb:93:39:5f:66:bf:
35:ad:e4:18:4c:cd:05:68:b1:ce:99:74:00:e1:24:
c4:06:ce:54:72:e7:17:c2:0e:c7:84:1c:c2:4d:42:
9a:77:6e:48:ed:5f:fc:e9:77:17:77:4b:28:56:a4:
d4:ae:5a:0e:a1:ec:d3:5b:c7:20:93:d8:97:3e:71:
2b:a9:fb:39:d2:62:fe:94:f4:c2:20:7b:0f:32:08:
fe:4c:da:91:f1:03:80:7c:47:54:ed:d7:19:80:53:
9e:c1:77:d4:3d:6c:c2:b8:a5:34:1a:5d:f5:17:81:
6b:40:91:8f:a3:5e:dc:c8:10:ab:b6:da:7b:3b:a3:
a1:b8:fa:9a:0f:9f:7a:2a:d6:31:bb:56:bd:5e:bc:
3b:59:9b:f1:2c:d7:c0:50:95:41:80:24:85:a0:6f:
6d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:13:53:15:EF:11:70:8C:E2:FF:56:29:4E:DD:F7:50:3F:5B:62:FA
X509v3 Authority Key Identifier:
keyid:A4:29:77:01:F3:83:38:41:C4:46:EB:FB:E3:42:70:B2:6F:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCl3AfODOEHERuv740Jwsm-oK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/895a29-54c7-4f5e-9df1-c0f482a206c3/1/pCl3AfODOEHERuv740Jwsm-oK7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/895a29-54c7-4f5e-9df1-c0f482a206c3/1/pCl3AfODOEHERuv740Jwsm-oK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9f:67:13:1a:44:cf:b0:68:c4:59:39:b1:d4:a8:77:a2:b8:
24:44:46:03:76:b6:15:98:31:87:27:6d:22:db:10:27:2b:be:
a3:84:ee:17:9a:a4:b0:a5:60:7d:68:ea:1b:e7:b8:f9:e7:7b:
9c:0f:c5:d8:e3:4e:7f:84:b3:a2:39:11:cf:e3:7d:9b:a6:6a:
48:5c:5c:c3:05:50:27:00:3e:50:1b:f0:5e:1b:2c:b9:96:ff:
06:f5:8d:7b:08:9d:97:a1:73:77:58:74:27:eb:55:f2:8c:81:
04:c7:36:29:ce:04:6b:43:4f:6f:36:09:ca:7b:12:73:37:01:
d6:d8:17:bc:5d:1f:1e:88:ed:b4:e4:bb:61:21:69:e0:64:18:
df:af:c4:74:13:cd:21:dd:00:a9:1e:e7:c9:82:c0:32:03:01:
3d:49:cb:1b:ec:28:16:07:c3:93:88:6f:ac:78:53:14:7b:de:
3e:15:92:54:de:3c:cf:e4:9a:4d:8a:81:98:f2:3e:54:2b:af:
f6:e9:27:b1:04:d6:ef:cd:d8:40:73:76:b6:1b:05:23:58:73:
e4:cb:c1:df:a2:86:86:90:28:07:5e:78:22:ac:1a:d3:f9:6f:
45:62:ac:70:5e:68:7e:ae:ed:24:80:cd:b1:46:5f:9d:f5:fb:
da:f0:50:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYTwkCQFsxJ9faQh2HA2srwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Mjk3NzAxZjM4MzM4NDFjNDQ2ZWJmYmUzNDI3MGIyNmZh
ODJiYjUwHhcNMjIxMjA4MDcwODA4WhcNMjIxMjA5MDcwODA4WjAzMTEwLwYDVQQD
EygwYTEzNTMxNWVmMTE3MDhjZTJmZjU2Mjk0ZWRkZjc1MDNmNWI2MmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYn5HoHy8AiqxAOqdEZVPzGuxrCs
zdqEtPluubO+SLxCxcOZQkzRVkMA7o429uwEvbxO8BpSKJ2g7naQcjdVO7D5cPfS
0YTKjrYAGfhab6dvRRPicZNV/Hs23R1amdlg8UX7kzlfZr81reQYTM0FaLHOmXQA
4STEBs5UcucXwg7HhBzCTUKad25I7V/86XcXd0soVqTUrloOoezTW8cgk9iXPnEr
qfs50mL+lPTCIHsPMgj+TNqR8QOAfEdU7dcZgFOewXfUPWzCuKU0Gl31F4FrQJGP
o17cyBCrttp7O6OhuPqaD596KtYxu1a9Xrw7WZvxLNfAUJVBgCSFoG9tYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoTUxXvEXCM4v9WKU7d91A/W2L6MB8GA1UdIwQY
MBaAFKQpdwHzgzhBxEbr++NCcLJvqCu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcENsM0FmT0RPRUhFUnV2NzQwSndzbS1vSzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84OTVhMjktNTRjNy00ZjVlLTlkZjEt
YzBmNDgyYTIwNmMzLzEvcENsM0FmT0RPRUhFUnV2NzQwSndzbS1vSzdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84OTVhMjktNTRjNy00ZjVlLTlkZjEtYzBmNDgyYTIwNmMz
LzEvcENsM0FmT0RPRUhFUnV2NzQwSndzbS1vSzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq59nExpE
z7BoxFk5sdSod6K4JERGA3a2FZgxhydtItsQJyu+o4TuF5qksKVgfWjqG+e4+ed7
nA/F2ONOf4SzojkRz+N9m6ZqSFxcwwVQJwA+UBvwXhssuZb/BvWNewidl6Fzd1h0
J+tV8oyBBMc2Kc4Ea0NPbzYJynsSczcB1tgXvF0fHojttOS7YSFp4GQY36/EdBPN
Id0AqR7nyYLAMgMBPUnLG+woFgfDk4hvrHhTFHvePhWSVN48z+SaTYqBmPI+VCuv
9uknsQTW783YQHN2thsFI1hz5MvB36KGhpAoB154Iqwa0/lvRWKscF5ofq7tJIDN
sUZfnfX72vBQCg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:57:29 2025 by rpki-client