Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c1cf28-85f8-4c9e-b77a-45d39e12f5f5/1/PjBjBS2uRspR0oohgDb7_VozpF8.mft
File: PjBjBS2uRspR0oohgDb7_VozpF8.mft (raw, json)
Hash identifier: Mc1ZYNj5zQiAWqkk1IwTi2fu8HV+dtfo1c8QhwWac9Y=
Subject key identifier: 11:80:EA:BE:52:E1:C5:FA:07:50:F9:24:49:54:DA:E5:C7:14:44:65
Authority key identifier: 3E:30:63:05:2D:AE:46:CA:51:D2:8A:21:80:36:FB:FD:5A:33:A4:5F
Certificate issuer: /CN=3e3063052dae46ca51d28a218036fbfd5a33a45f
Certificate serial: 018C803B723A8092C2BAB3505FBDD45B9BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjBjBS2uRspR0oohgDb7_VozpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c1cf28-85f8-4c9e-b77a-45d39e12f5f5/1/PjBjBS2uRspR0oohgDb7_VozpF8.mft
Manifest number: 0FE4
Signing time: Tue 19 Dec 2023 04:00:28 +0000
Manifest this update: Tue 19 Dec 2023 04:00:28 +0000
Manifest next update: Wed 20 Dec 2023 04:00:28 +0000
Files and hashes: 1: PjBjBS2uRspR0oohgDb7_VozpF8.crl (hash: hsk49+NMWzhRzS4n0UVHvTDapjYICdrMCftKqBuD07c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:80:3b:72:3a:80:92:c2:ba:b3:50:5f:bd:d4:5b:9b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e3063052dae46ca51d28a218036fbfd5a33a45f
Validity
Not Before: Dec 19 04:00:28 2023 GMT
Not After : Dec 20 04:00:28 2023 GMT
Subject: CN=1180eabe52e1c5fa0750f9244954dae5c7144465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:5f:6f:85:c6:84:23:35:52:a5:3d:22:9e:
5d:eb:b1:16:e1:9f:ed:2a:82:77:55:ae:d6:8d:9b:
6d:a0:d8:0c:76:bd:3f:49:c5:97:e2:79:b4:fa:f7:
77:26:7c:b1:76:63:c4:33:5d:3c:03:0d:45:26:9b:
3d:d8:cd:96:12:8a:8a:a3:c4:7f:d4:2a:34:90:c5:
85:88:bf:1e:be:5e:8f:79:3f:71:ad:2e:96:cb:92:
7b:78:8b:39:94:19:6e:38:db:34:0f:1b:cb:29:69:
50:a1:06:c1:86:63:ae:ff:28:e7:74:a1:b5:56:ee:
9c:2f:80:b8:fe:56:cc:f8:40:8a:3f:db:5f:c9:78:
9b:f2:1d:78:97:81:a9:76:47:38:c4:ba:f7:e1:0d:
83:0e:16:0f:1b:86:c3:fc:cf:a6:87:dc:5c:48:dd:
60:e8:b9:1b:fa:b1:d3:42:89:e3:41:15:c0:96:41:
5f:b6:a7:35:2f:44:a6:6e:61:bd:0e:63:13:62:61:
1c:60:e0:49:a9:16:d0:fe:8d:1a:41:62:07:c7:06:
3a:ee:f4:15:fe:73:c3:76:28:2d:1d:d9:d7:f2:d9:
0b:16:02:9d:f9:13:ee:12:9c:b7:c7:0a:e4:45:fa:
a8:13:43:05:cc:3c:53:0a:bd:2f:d1:4b:c7:36:03:
cb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:80:EA:BE:52:E1:C5:FA:07:50:F9:24:49:54:DA:E5:C7:14:44:65
X509v3 Authority Key Identifier:
keyid:3E:30:63:05:2D:AE:46:CA:51:D2:8A:21:80:36:FB:FD:5A:33:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjBjBS2uRspR0oohgDb7_VozpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c1cf28-85f8-4c9e-b77a-45d39e12f5f5/1/PjBjBS2uRspR0oohgDb7_VozpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c1cf28-85f8-4c9e-b77a-45d39e12f5f5/1/PjBjBS2uRspR0oohgDb7_VozpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:65:e3:f2:56:fc:41:90:05:d7:f8:4c:a2:29:61:7c:ce:94:
fc:29:b8:ea:f7:cf:96:1d:b6:51:85:40:64:a1:46:5e:8e:d6:
bd:94:b8:b1:09:da:65:9d:f6:ef:30:f5:d3:f8:b6:7e:69:4c:
53:bc:ad:b3:0b:63:5a:0e:35:7c:d1:33:ee:67:63:c3:1a:80:
77:56:3b:f3:6f:5c:12:4c:94:78:d4:21:ee:a6:50:6a:d3:a3:
08:00:75:66:f7:aa:98:ab:f8:12:64:45:b0:ad:82:8f:b7:0f:
20:8e:c2:68:c0:61:77:4f:01:8f:3b:71:10:f6:56:81:4c:5e:
09:21:6c:53:a4:d8:73:53:fc:0d:55:f2:57:48:9e:cc:69:ef:
e4:06:67:79:ff:ad:51:04:e8:97:9d:75:29:a6:dc:df:ba:70:
f6:f3:ce:06:f8:03:36:5f:f9:f0:e0:73:eb:ea:05:78:dd:3a:
7d:1a:99:50:ef:48:7c:1b:70:1c:cd:3b:b6:39:32:9d:76:5b:
5a:2e:d9:a4:35:01:07:e9:25:25:21:0c:8d:b3:b4:a9:e2:e5:
e6:57:01:be:1a:d6:0d:67:00:ae:ce:63:04:74:56:92:26:ee:
cb:34:64:b1:e4:40:2f:37:23:89:60:60:e3:15:db:82:b2:b1:
97:23:4b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:40 2025 by rpki-client