Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bd4e00-4102-4828-a46f-7299a6cc34f6/1/pw-0c8FqjPvdI_OwRIJXf3OE5Rg.mft
File: pw-0c8FqjPvdI_OwRIJXf3OE5Rg.mft (raw, json)
Hash identifier: dLVtQfLCa2Hp/Kl/eDp2NQ3uLIaw4NUy5IHFoToFh7c=
Subject key identifier: 1E:2C:89:02:3B:76:C7:49:FB:96:C9:8C:3D:AA:BF:B0:80:D0:EC:89
Authority key identifier: A7:0F:B4:73:C1:6A:8C:FB:DD:23:F3:B0:44:82:57:7F:73:84:E5:18
Certificate issuer: /CN=a70fb473c16a8cfbdd23f3b04482577f7384e518
Certificate serial: 01946CA03E0FC6F46A3DB1C76CFECDEE7B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pw-0c8FqjPvdI_OwRIJXf3OE5Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bd4e00-4102-4828-a46f-7299a6cc34f6/1/pw-0c8FqjPvdI_OwRIJXf3OE5Rg.mft
Manifest number: 0DE3
Signing time: Thu 16 Jan 2025 01:00:28 +0000
Manifest this update: Thu 16 Jan 2025 01:00:28 +0000
Manifest next update: Fri 17 Jan 2025 01:00:28 +0000
Files and hashes: 1: pw-0c8FqjPvdI_OwRIJXf3OE5Rg.crl (hash: Twh9fZlegVBZ09/KG0CdFoFnj0+Xld+JDms/ACjDp0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6c:a0:3e:0f:c6:f4:6a:3d:b1:c7:6c:fe:cd:ee:7b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a70fb473c16a8cfbdd23f3b04482577f7384e518
Validity
Not Before: Jan 16 01:00:28 2025 GMT
Not After : Jan 17 01:00:28 2025 GMT
Subject: CN=1e2c89023b76c749fb96c98c3daabfb080d0ec89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:73:ff:67:07:b2:e2:fd:df:be:1c:d8:59:
88:30:a5:84:1e:98:1f:aa:54:f8:a4:4e:4b:3c:2a:
1a:26:e7:ee:2e:a7:80:65:34:d9:00:b0:df:2e:d6:
27:40:76:1f:db:ad:f2:83:ed:d9:77:50:bf:48:1f:
63:4a:bf:43:9b:f7:9c:bd:2b:c4:de:9a:93:dc:aa:
e3:a6:e6:04:04:54:63:40:60:1f:ca:44:9d:5e:f4:
ef:9d:78:e9:04:6b:bc:8b:37:df:45:02:f1:89:1e:
5a:4a:6b:74:38:4b:09:d7:82:80:56:cf:d4:f6:d1:
45:13:47:a6:b0:49:96:0d:72:8e:4e:97:72:0a:4e:
72:42:8d:d1:fb:ef:5e:f3:1b:ac:2d:44:f1:2f:38:
2b:48:ad:ec:9c:00:97:ca:5d:4c:8a:84:ba:c7:df:
b0:71:4f:c0:8d:e8:bf:ea:6f:0d:9c:d4:81:a2:be:
5e:11:74:7d:ee:70:43:b7:fd:3b:cd:03:ae:b6:76:
45:b1:a6:7c:db:7a:b4:49:b0:31:e1:6a:bb:3a:8a:
79:73:aa:53:e8:77:2a:bc:1e:f1:c1:6d:e2:ed:fd:
8b:94:a7:04:d3:dd:f9:80:29:6b:b7:d2:73:c7:22:
87:39:a5:6c:c7:e2:16:e5:20:e9:cc:d2:2b:d9:35:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2C:89:02:3B:76:C7:49:FB:96:C9:8C:3D:AA:BF:B0:80:D0:EC:89
X509v3 Authority Key Identifier:
keyid:A7:0F:B4:73:C1:6A:8C:FB:DD:23:F3:B0:44:82:57:7F:73:84:E5:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pw-0c8FqjPvdI_OwRIJXf3OE5Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bd4e00-4102-4828-a46f-7299a6cc34f6/1/pw-0c8FqjPvdI_OwRIJXf3OE5Rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bd4e00-4102-4828-a46f-7299a6cc34f6/1/pw-0c8FqjPvdI_OwRIJXf3OE5Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5f:1e:70:65:b6:14:ba:c6:bc:5b:4b:1f:2a:ce:05:00:10:
b9:b8:67:60:5f:c0:fd:3d:6b:a7:29:84:c5:58:43:c1:9e:66:
ad:14:cd:ac:ee:fd:eb:0d:0c:1f:09:8c:32:cc:01:48:e1:9b:
ac:bd:6c:95:b5:e7:2f:25:8a:08:cf:76:98:7c:9c:2e:e7:48:
dd:ba:5c:32:71:d0:3c:d9:af:42:2f:f5:37:fc:c2:24:40:66:
63:24:55:42:6f:c9:db:50:32:d0:db:77:ed:c5:ed:0e:63:60:
c8:08:88:1a:1c:df:d0:d0:cb:42:17:d2:6a:c6:3b:d6:aa:4a:
4c:d7:53:d9:d1:58:ac:a4:64:ee:fc:bb:1f:0f:f8:a6:05:e3:
51:98:ff:51:af:05:70:5c:e3:79:ea:ed:7a:43:8f:b3:1f:5e:
e0:91:5c:a5:f5:da:7e:2d:4c:ea:1c:ab:6e:49:3a:3b:95:6d:
0b:6c:40:d5:a8:a8:ef:34:b1:7d:e3:0b:74:a4:db:65:68:c2:
21:eb:31:2f:48:4b:8c:79:c8:68:50:8a:14:dc:aa:10:ae:c3:
19:54:24:19:11:54:bd:33:1b:a1:e0:51:dd:94:c2:be:ee:8a:
3c:fa:29:64:cb:20:a8:23:2c:ad:7f:64:b8:48:43:6e:29:21:
82:7b:cd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:32 2025 by rpki-client