Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.mft
File: 0PncQczPGwp4tNaiRk59u8YhwCE.mft (raw, json)
Hash identifier: CZGI9XbFHzMrHDSELSG29Ffvl0/xuHQArdidV6xrvdo=
Subject key identifier: 4F:86:7B:0D:8F:71:A6:7D:0D:5B:86:AB:6D:D7:22:20:01:A6:CF:A6
Authority key identifier: D0:F9:DC:41:CC:CF:1B:0A:78:B4:D6:A2:46:4E:7D:BB:C6:21:C0:21
Certificate issuer: /CN=d0f9dc41cccf1b0a78b4d6a2464e7dbbc621c021
Certificate serial: 0195E15A06E9A5D90BE53C687764983F642B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PncQczPGwp4tNaiRk59u8YhwCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.mft
Manifest number: 0456
Signing time: Sat 29 Mar 2025 10:02:08 +0000
Manifest this update: Sat 29 Mar 2025 10:02:08 +0000
Manifest next update: Sun 30 Mar 2025 10:02:08 +0000
Files and hashes: 1: 0PncQczPGwp4tNaiRk59u8YhwCE.crl (hash: 2mbMVSYNkUZJn2lta9Ka5obszl09sgdRO59TgQYDzW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:06:e9:a5:d9:0b:e5:3c:68:77:64:98:3f:64:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f9dc41cccf1b0a78b4d6a2464e7dbbc621c021
Validity
Not Before: Mar 29 10:02:08 2025 GMT
Not After : Mar 30 10:02:08 2025 GMT
Subject: CN=4f867b0d8f71a67d0d5b86ab6dd7222001a6cfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:89:30:d1:37:93:de:3f:92:2a:00:5f:6b:6e:
a6:d8:4b:2f:1b:1a:53:58:21:16:a5:7e:f7:8a:e3:
5a:ed:ce:30:23:07:f2:c1:2c:61:36:d0:6a:a3:20:
24:59:ea:b1:2f:90:35:b3:28:cc:39:50:4a:42:a3:
5e:09:25:17:31:9f:9a:af:d3:90:43:b2:88:fa:e4:
59:02:72:36:c8:f0:15:81:99:08:80:fc:b3:1d:bc:
c0:0f:10:08:a6:6d:53:8e:e5:d1:61:ba:61:96:fe:
6e:8c:1e:66:d6:f1:29:04:69:c0:7e:2b:86:37:06:
bb:d9:f9:14:31:d2:c4:78:15:33:90:a4:08:fc:80:
e8:64:ac:44:37:6a:59:92:27:7d:7c:27:28:32:fd:
b3:ea:a9:2a:5c:7d:92:06:02:55:da:18:3b:e1:da:
39:e7:25:2a:66:b6:62:55:87:e9:b8:63:3d:04:1f:
3e:96:be:38:eb:ad:b9:5f:b6:9c:cb:fe:7c:c6:79:
5b:3f:ca:54:05:8b:79:23:a0:ae:7a:2d:da:d5:b0:
e3:20:0b:d1:3b:44:11:b9:5c:30:2f:35:54:58:0a:
58:d5:b5:86:0e:28:7a:42:c2:17:1d:27:c3:5e:6f:
17:ae:47:c7:74:db:01:fb:f8:37:09:81:f8:8f:bd:
23:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:86:7B:0D:8F:71:A6:7D:0D:5B:86:AB:6D:D7:22:20:01:A6:CF:A6
X509v3 Authority Key Identifier:
keyid:D0:F9:DC:41:CC:CF:1B:0A:78:B4:D6:A2:46:4E:7D:BB:C6:21:C0:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PncQczPGwp4tNaiRk59u8YhwCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:75:ef:a4:d2:26:60:66:5c:95:69:7a:fa:b5:f5:8c:2a:58:
64:47:e0:f5:8b:d1:1f:81:b8:ac:81:27:1b:19:56:77:10:61:
5b:70:e9:5f:8d:a7:6b:92:bc:3b:45:d8:04:c9:dd:ff:15:ec:
64:72:5e:95:81:fa:99:d4:c5:c1:47:52:2e:3c:96:53:bb:8c:
e5:8d:60:29:62:ae:ed:04:08:8f:68:f1:50:13:ba:7e:c7:70:
63:24:51:19:33:4f:05:f5:6e:53:e2:ee:2d:40:2c:5a:ee:0c:
38:8f:74:63:db:b8:92:65:ce:09:06:2a:9a:da:f6:56:cc:dc:
7c:14:94:a5:65:dc:92:ea:4c:2d:0f:34:b2:fe:80:c2:91:77:
d7:30:00:ce:70:ed:13:bc:39:b4:44:98:ad:43:db:83:13:51:
62:18:1a:3f:e7:9e:00:66:c7:7a:a7:02:4a:5d:e4:20:de:90:
94:24:24:97:78:b4:c3:18:3c:6c:6c:9f:35:ad:d6:6d:25:dc:
f6:75:9e:a1:14:53:db:37:05:3b:75:da:93:76:39:f3:ce:44:
3b:b7:23:51:c0:1e:ce:12:0e:f6:b4:9a:25:05:8c:b3:96:ab:
c2:17:31:a6:7f:7b:b6:3d:d5:eb:6c:46:5b:76:ae:f3:ce:4b:
b2:b5:d2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:45 2025 by rpki-client