Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/52b3c6-5096-458a-8221-2fdd70e1709c/1/PGPlUI3yEK2mVjqpQDlFdMzxq8s.mft
File: PGPlUI3yEK2mVjqpQDlFdMzxq8s.mft (raw, json)
Hash identifier: ZinMAeYNa4k/q17HY5FjTSJY+g69o3ffnhTe/Xty1/4=
Subject key identifier: 6B:E6:2F:C0:2C:02:0F:B7:43:99:DE:11:54:C6:D9:F0:6B:19:CE:B7
Authority key identifier: 3C:63:E5:50:8D:F2:10:AD:A6:56:3A:A9:40:39:45:74:CC:F1:AB:CB
Certificate issuer: /CN=3c63e5508df210ada6563aa940394574ccf1abcb
Certificate serial: 018DBF183C181E90E8686443F3AD015C1B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGPlUI3yEK2mVjqpQDlFdMzxq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/52b3c6-5096-458a-8221-2fdd70e1709c/1/PGPlUI3yEK2mVjqpQDlFdMzxq8s.mft
Manifest number: 0FDA
Signing time: Mon 19 Feb 2024 02:00:52 +0000
Manifest this update: Mon 19 Feb 2024 02:00:52 +0000
Manifest next update: Tue 20 Feb 2024 02:00:52 +0000
Files and hashes: 1: PGPlUI3yEK2mVjqpQDlFdMzxq8s.crl (hash: phFyBSNFohtKrmhkWEAGo+aQg36pOoyf1Lod2h5TsFU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bf:18:3c:18:1e:90:e8:68:64:43:f3:ad:01:5c:1b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c63e5508df210ada6563aa940394574ccf1abcb
Validity
Not Before: Feb 19 02:00:52 2024 GMT
Not After : Feb 20 02:00:52 2024 GMT
Subject: CN=6be62fc02c020fb74399de1154c6d9f06b19ceb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:6c:9a:02:7d:23:ce:1d:f6:5a:4e:91:5b:
a5:00:08:d3:dd:82:3e:fa:26:9e:86:8a:25:ee:03:
64:8d:4a:ba:3e:fe:38:dd:db:7f:8a:71:24:61:b6:
b6:fd:ca:37:ab:18:41:62:84:84:d9:9f:f0:0f:e1:
b6:0b:7a:6e:52:ad:86:55:df:d6:61:05:37:b0:ce:
8c:1c:c7:58:97:5c:af:7e:51:65:3a:0a:0d:06:49:
d4:5e:48:8f:e9:85:16:2f:28:3a:d9:a8:98:67:6c:
9d:4a:bc:d2:31:19:35:8f:89:e0:4b:8d:19:e2:89:
66:87:e2:7f:2c:51:48:23:fd:8d:c3:2f:b7:88:2d:
52:94:42:77:f2:a6:b2:b6:89:4f:3f:61:75:50:87:
e7:82:b7:cf:23:2d:ff:8b:67:30:d1:73:e6:9b:31:
19:a0:7f:8f:78:b0:b3:07:b8:a1:e6:d1:d0:71:3b:
6c:17:a7:cb:be:42:92:63:99:d1:bc:95:4a:56:ff:
b0:12:ae:97:84:8b:4c:2d:2c:39:0b:37:d8:29:84:
63:0a:50:57:bb:b1:8f:97:29:8b:cc:8b:22:96:0c:
49:01:07:3f:f6:86:b2:a2:f4:d0:8d:57:5c:77:9e:
17:11:6f:1b:e7:0f:65:70:9a:72:bc:e5:6f:8e:5b:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E6:2F:C0:2C:02:0F:B7:43:99:DE:11:54:C6:D9:F0:6B:19:CE:B7
X509v3 Authority Key Identifier:
keyid:3C:63:E5:50:8D:F2:10:AD:A6:56:3A:A9:40:39:45:74:CC:F1:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGPlUI3yEK2mVjqpQDlFdMzxq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/52b3c6-5096-458a-8221-2fdd70e1709c/1/PGPlUI3yEK2mVjqpQDlFdMzxq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/52b3c6-5096-458a-8221-2fdd70e1709c/1/PGPlUI3yEK2mVjqpQDlFdMzxq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0c:0a:19:19:e3:53:32:16:42:8a:64:fe:17:f8:0f:36:e6:
34:cd:e8:99:eb:84:ca:3e:9e:02:e9:b3:04:89:48:09:12:0e:
9d:04:00:60:aa:d0:af:16:54:aa:0a:98:ca:a9:5c:94:62:7a:
3d:ef:63:f7:66:a8:f0:03:92:45:0c:50:f1:59:65:a1:ea:67:
bd:d9:07:7f:4c:7e:32:32:95:3b:8b:d1:fe:71:f8:e9:e8:6e:
26:fa:cc:dc:45:cb:01:c3:b1:0a:71:13:34:bd:88:f6:eb:cf:
ab:44:66:2c:07:f4:8a:21:ed:56:56:ea:03:86:7c:95:89:d7:
1e:64:c1:74:6c:da:b4:4a:ce:f8:89:63:de:fe:53:34:b2:22:
e0:a9:ff:dd:69:38:2c:b3:5d:f0:98:c7:d9:5a:d0:f5:26:ea:
a6:e2:a3:54:77:51:da:64:08:9f:7f:bd:86:b8:c3:e1:52:78:
76:95:07:83:61:7d:94:ae:32:8b:0d:f1:76:d1:58:a7:e8:27:
11:3d:11:29:54:97:7e:f8:c6:6f:2e:1a:e0:39:48:b2:59:03:
e6:41:a7:05:7c:80:93:63:62:26:84:80:96:e3:97:f1:9f:e2:
0a:d4:ba:ab:62:00:04:da:e4:1e:01:6c:0a:97:1e:42:9e:a4:
20:c5:9e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:40 2025 by rpki-client