Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.mft
File: pF3taOImAyG8o56EZbScJdWKVuY.mft (raw, json)
Hash identifier: 0uLkBq8f0hc306+MCNadahqMwfMG7ounibiEZLq682s=
Subject key identifier: 2E:DB:8B:8D:45:E3:37:77:CD:E5:7D:BD:06:E8:EB:6B:12:8D:F8:99
Authority key identifier: A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6
Certificate issuer: /CN=a45ded68e2260321bca39e8465b49c25d58a56e6
Certificate serial: 01941B4D03CA1D05CA48AA6BCA1BB3A557A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.mft
Manifest number: 0B54
Signing time: Tue 31 Dec 2024 06:00:19 +0000
Manifest this update: Tue 31 Dec 2024 06:00:19 +0000
Manifest next update: Wed 01 Jan 2025 06:00:19 +0000
Files and hashes: 1: pF3taOImAyG8o56EZbScJdWKVuY.crl (hash: wiHgrQgsCniYyWDD4oUiet6EgedK2WOoc68vqn6YAko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1b:4d:03:ca:1d:05:ca:48:aa:6b:ca:1b:b3:a5:57:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45ded68e2260321bca39e8465b49c25d58a56e6
Validity
Not Before: Dec 31 06:00:19 2024 GMT
Not After : Jan 1 06:00:19 2025 GMT
Subject: CN=2edb8b8d45e33777cde57dbd06e8eb6b128df899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:70:1c:a8:c7:32:b8:22:7a:bb:6a:ad:6b:
07:bc:16:27:c0:c9:7d:e3:6f:cc:ea:41:f9:44:24:
21:46:ce:3e:32:16:ca:28:e4:81:47:5d:86:77:4e:
b8:df:b5:27:28:12:b1:77:89:ea:ff:66:3d:29:2e:
c0:0c:6d:f1:a2:1b:ab:4f:bf:4b:69:d1:00:9f:15:
da:1d:9c:70:6d:75:bb:f7:7e:24:31:85:4e:8f:c0:
0c:bb:9f:0b:1f:66:72:81:90:88:66:82:e3:9b:79:
11:e3:f5:db:6f:c9:f5:c5:42:5a:e9:ba:69:1c:38:
f9:43:c9:08:c2:7f:3e:24:79:93:1e:15:63:21:dd:
e1:76:8f:e8:d5:1f:8b:c3:5d:dc:15:24:90:74:35:
0a:08:b0:44:27:82:99:7c:1c:d6:3e:25:14:7c:a7:
f5:0e:5a:18:03:3c:fd:55:0f:ff:cd:ce:32:58:08:
c9:43:7e:5e:cb:96:a1:24:69:0a:ec:be:d3:03:86:
8f:af:e7:72:d9:0a:85:e0:40:7f:3f:de:5f:37:29:
10:b9:f6:21:42:ea:0e:13:1c:6a:68:f4:9e:5f:7a:
f5:83:69:8b:a8:49:5d:14:93:c0:2a:7f:1e:47:7e:
ca:ce:46:de:55:af:ae:fa:96:b7:d8:a5:26:bc:e8:
1c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DB:8B:8D:45:E3:37:77:CD:E5:7D:BD:06:E8:EB:6B:12:8D:F8:99
X509v3 Authority Key Identifier:
keyid:A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:78:1b:fd:2e:17:b6:95:5d:f1:0b:32:89:83:01:ba:bd:6c:
20:88:0e:ff:10:2a:25:03:f3:18:e8:92:b1:cb:1b:3b:6b:ba:
c1:7a:20:1a:20:c4:a4:27:6f:96:d5:d4:fd:69:97:57:3e:ca:
a9:79:97:3d:3f:58:19:6f:c6:9e:40:b3:47:d1:57:f6:50:75:
8c:15:5d:63:15:7e:bc:dd:32:30:45:57:94:d6:00:f7:09:a3:
16:7b:1c:69:62:d0:25:f5:67:e7:70:b6:a4:b3:60:e8:f7:83:
2b:2c:ae:3f:f7:57:54:81:df:d2:af:39:dc:53:56:39:bd:7e:
3b:df:fe:12:64:62:18:1d:18:3d:e7:22:d0:77:33:be:1b:d5:
83:ea:87:ac:d9:6f:db:f1:3f:9d:e6:3b:3b:5c:4e:04:2e:96:
98:fe:00:c4:7d:e2:90:38:c3:b7:f7:9d:87:57:a1:65:47:3b:
a4:65:24:10:80:9b:70:17:4f:c6:88:6f:69:6e:3e:02:1d:37:
64:7d:51:a3:6d:da:9b:bb:27:3a:d6:d4:cc:66:9b:f2:7b:8c:
e3:e1:f3:97:2d:ba:52:3f:46:a1:a4:6c:82:9d:af:22:d0:dc:
59:99:b3:9d:46:24:96:b8:8a:2f:41:6f:51:81:a3:b1:b6:d4:
8c:20:60:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:20:47 2025 by rpki-client