Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f6679e-b5d9-4406-91f7-118da08f42de/1/PFU-yLZg-10SicweY3y1-W0pC4Q.mft
File: PFU-yLZg-10SicweY3y1-W0pC4Q.mft (raw, json)
Hash identifier: Vhvs+M//w4lQu08+GUUMtHZNrZw1WNqmgi/Rjmn1XEs=
Subject key identifier: 2D:74:45:7E:3E:57:7F:D8:73:E4:21:48:B9:62:0F:87:F7:04:8F:DB
Authority key identifier: 3C:55:3E:C8:B6:60:FB:5D:12:89:CC:1E:63:7C:B5:F9:6D:29:0B:84
Certificate issuer: /CN=3c553ec8b660fb5d1289cc1e637cb5f96d290b84
Certificate serial: 01945D2DC4448EF58D4507C1FFE6E8FCE285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFU-yLZg-10SicweY3y1-W0pC4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f6679e-b5d9-4406-91f7-118da08f42de/1/PFU-yLZg-10SicweY3y1-W0pC4Q.mft
Manifest number: 04F8
Signing time: Mon 13 Jan 2025 01:01:07 +0000
Manifest this update: Mon 13 Jan 2025 01:01:07 +0000
Manifest next update: Tue 14 Jan 2025 01:01:07 +0000
Files and hashes: 1: PFU-yLZg-10SicweY3y1-W0pC4Q.crl (hash: t87ezQRbwEjjA9odVh8bJ6axMZ040k7vH0NANWWLSUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5d:2d:c4:44:8e:f5:8d:45:07:c1:ff:e6:e8:fc:e2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c553ec8b660fb5d1289cc1e637cb5f96d290b84
Validity
Not Before: Jan 13 01:01:07 2025 GMT
Not After : Jan 14 01:01:07 2025 GMT
Subject: CN=2d74457e3e577fd873e42148b9620f87f7048fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:4b:02:b7:ce:0c:71:b8:93:01:9e:05:21:
22:8a:16:df:20:3a:cc:4e:a7:f5:53:21:23:68:0f:
a7:f8:64:2d:e9:7a:78:3f:b7:12:dc:70:0e:14:e6:
fa:7b:00:45:68:3e:39:c3:5b:19:1a:27:42:5b:6a:
c5:92:d0:cb:ea:ad:b2:34:e7:3d:5a:f5:c1:8d:1d:
4a:a1:dd:97:9b:28:9a:89:13:48:7b:26:d9:c2:49:
52:b1:d3:ce:ec:bb:b0:a3:2d:3e:7a:a1:06:a7:82:
58:8c:c3:fc:2e:5a:1e:da:45:44:85:7d:d7:82:74:
4a:97:77:4a:8a:4d:9b:73:c8:ff:a3:70:c0:90:a2:
3a:b4:c7:77:c3:97:ef:a0:bd:49:9e:8e:43:53:7e:
63:5c:9c:87:e3:c5:4c:85:1c:4e:e7:e5:bb:86:f9:
a4:6c:76:80:1c:dc:ab:92:6c:cf:b6:ef:a1:29:fe:
fc:1d:5b:42:cf:e4:b2:88:a8:41:34:e5:4a:65:8d:
96:b7:0b:b7:5d:c1:98:e5:8e:e7:83:7f:d9:36:7c:
78:8b:75:a8:96:a0:3d:a7:86:89:54:77:59:11:3a:
64:e2:2f:86:d3:db:07:c2:9e:45:1a:d9:c9:ec:aa:
fc:91:46:40:9a:4b:7a:97:e9:05:45:37:2e:e0:4b:
27:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:74:45:7E:3E:57:7F:D8:73:E4:21:48:B9:62:0F:87:F7:04:8F:DB
X509v3 Authority Key Identifier:
keyid:3C:55:3E:C8:B6:60:FB:5D:12:89:CC:1E:63:7C:B5:F9:6D:29:0B:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFU-yLZg-10SicweY3y1-W0pC4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f6679e-b5d9-4406-91f7-118da08f42de/1/PFU-yLZg-10SicweY3y1-W0pC4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f6679e-b5d9-4406-91f7-118da08f42de/1/PFU-yLZg-10SicweY3y1-W0pC4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:30:d3:2b:c7:0f:03:63:6c:4d:96:4a:56:ab:90:28:62:14:
3d:2e:da:e5:8f:42:ac:a9:81:4f:f0:9f:fd:63:01:c9:54:1b:
94:0b:d8:e3:7e:9d:c6:57:b9:51:a8:eb:f7:a6:cd:34:df:c9:
a9:a6:0c:b7:9d:3f:59:73:c7:6c:68:31:4d:30:fa:5d:a1:09:
5a:74:82:12:28:79:93:c0:0f:14:f1:50:bf:5c:c6:83:48:66:
ae:ca:a8:b4:d6:3a:46:14:7d:6e:7a:a9:47:fc:1a:0d:2d:15:
d6:8c:f8:8a:89:98:dc:b2:1f:63:8b:70:9e:1d:a2:d9:d8:65:
8c:3d:c0:cd:6f:20:63:af:0f:d7:d2:56:40:fd:76:aa:69:02:
e6:df:8a:8b:4d:84:f2:87:1d:d5:a2:41:68:d8:a2:8e:e7:10:
84:e6:30:e8:1c:08:f7:1d:25:11:94:9e:ce:a0:81:f0:f9:14:
20:76:40:4c:f6:91:3d:69:4f:f0:90:72:85:ce:51:de:7a:87:
95:69:a2:c9:d0:90:b1:1e:8d:73:2f:6d:06:3d:b7:bd:8c:36:
4f:ce:96:58:60:f9:ca:44:fa:1a:dd:23:78:fe:72:78:04:63:
7d:79:06:50:c7:ef:3f:ee:fa:7c:74:27:84:92:13:94:01:50:
5e:08:dd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:03:45 2025 by rpki-client