Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/13985c-d4fc-4809-acac-dbc6ecdb218e/1/PdCTc5JcDGcJUn_lawKVSBpC8KA.mft
File: PdCTc5JcDGcJUn_lawKVSBpC8KA.mft (raw, json)
Hash identifier: vh428G+cYYnSQSylsilT/MneYoUjpD0UmNhkdm4gQfo=
Subject key identifier: 1B:F5:6E:5C:3C:92:3B:5A:7E:A2:10:9C:5B:0A:D1:B1:CD:69:E1:7F
Authority key identifier: 3D:D0:93:73:92:5C:0C:67:09:52:7F:E5:6B:02:95:48:1A:42:F0:A0
Certificate issuer: /CN=3dd09373925c0c6709527fe56b0295481a42f0a0
Certificate serial: 0189CF708981ED77503743FF4C1446C311F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PdCTc5JcDGcJUn_lawKVSBpC8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/13985c-d4fc-4809-acac-dbc6ecdb218e/1/PdCTc5JcDGcJUn_lawKVSBpC8KA.mft
Manifest number: 0663
Signing time: Mon 07 Aug 2023 10:00:05 +0000
Manifest this update: Mon 07 Aug 2023 10:00:05 +0000
Manifest next update: Tue 08 Aug 2023 10:00:05 +0000
Files and hashes: 1: PdCTc5JcDGcJUn_lawKVSBpC8KA.crl (hash: Aa9KuIMX1OSlLuA6haj3B5NQqigpaBomARPCgi3hIyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:70:89:81:ed:77:50:37:43:ff:4c:14:46:c3:11:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dd09373925c0c6709527fe56b0295481a42f0a0
Validity
Not Before: Aug 7 10:00:05 2023 GMT
Not After : Aug 8 10:00:05 2023 GMT
Subject: CN=1bf56e5c3c923b5a7ea2109c5b0ad1b1cd69e17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0c:89:e1:e6:67:2d:a1:e1:54:26:81:1e:7d:
1e:61:a1:53:20:93:fd:f7:a1:df:df:2b:5c:70:73:
9c:57:3c:19:39:3e:74:c3:a0:7c:7e:57:9d:a0:1b:
95:3f:01:74:76:7e:6c:ca:16:61:fe:9c:1a:db:af:
f5:59:19:34:34:d8:3f:1a:73:d8:6b:0b:1b:aa:93:
59:02:ae:47:36:5d:a2:d8:d7:1b:95:48:dc:59:90:
14:f4:b4:43:9a:52:f6:50:ea:ea:26:68:a1:a8:0a:
27:6f:2c:43:16:cc:87:45:5c:de:d5:9c:57:7c:94:
64:7d:0f:bd:2d:f7:b8:ca:dc:51:9d:b3:ee:8b:62:
a3:bd:18:4b:0f:c0:85:ba:76:bd:39:18:b3:b9:b3:
b6:fe:86:70:56:06:ef:33:fb:70:ad:b4:a4:71:ac:
f5:dc:fd:7f:b3:42:2e:79:ea:04:3c:8d:f7:01:4e:
74:f0:ef:5c:57:04:5a:49:1b:cb:43:ee:b4:e9:6e:
10:4a:27:b6:86:23:9e:c2:2f:58:5d:7d:9f:00:de:
dd:3e:58:61:b6:ab:20:a9:25:89:60:92:3c:b4:fe:
f9:37:ff:c4:69:bf:01:61:97:4a:3e:31:9f:fc:97:
cf:b2:1e:1d:dc:be:61:50:78:91:42:1b:4b:4d:f5:
d4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F5:6E:5C:3C:92:3B:5A:7E:A2:10:9C:5B:0A:D1:B1:CD:69:E1:7F
X509v3 Authority Key Identifier:
keyid:3D:D0:93:73:92:5C:0C:67:09:52:7F:E5:6B:02:95:48:1A:42:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PdCTc5JcDGcJUn_lawKVSBpC8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/13985c-d4fc-4809-acac-dbc6ecdb218e/1/PdCTc5JcDGcJUn_lawKVSBpC8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/13985c-d4fc-4809-acac-dbc6ecdb218e/1/PdCTc5JcDGcJUn_lawKVSBpC8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2b:a2:58:43:c4:59:d9:80:d9:96:f8:ca:3d:bc:57:6d:37:
ee:6e:aa:55:7c:8f:2d:b0:ba:f6:c9:52:5b:37:ec:1b:0e:58:
55:5d:e3:a1:65:f5:e4:b4:8d:56:71:15:53:ff:bc:d1:3e:72:
62:0f:16:a5:65:fe:f3:f9:dd:6f:d7:cf:bc:39:48:e5:9f:7a:
a3:c6:f7:4c:d7:e2:4e:2e:0f:cb:15:d0:ee:26:92:ed:2a:7d:
79:ac:62:76:e5:22:5e:c8:33:c2:87:b4:91:e4:ea:2a:ae:d9:
c7:5d:ec:5e:f3:47:08:a2:da:08:19:3a:1d:90:8e:93:ea:c7:
b5:a2:04:30:e0:56:1e:72:25:83:ad:27:f0:9f:0f:1e:8f:11:
d4:a3:32:9d:c3:11:2b:47:41:36:65:6b:e9:79:57:37:e8:d4:
02:a6:04:f1:49:ce:73:f7:f0:7f:fe:7a:7b:e2:17:df:0a:2a:
fb:6a:ae:24:a3:22:77:b7:20:71:64:91:18:f8:6d:d4:fe:22:
f0:59:02:d5:74:0e:6b:95:68:c3:68:a0:13:e6:4f:3a:27:2a:
ee:91:d5:78:06:ff:02:5e:76:a5:18:34:3a:6d:63:84:44:f6:
0a:31:09:2b:6a:14:a8:b8:9c:a4:ce:43:c2:8d:04:bf:e5:13:
0e:74:88:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:23:15 2025 by rpki-client