Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/974b29-7ece-41ce-b88b-4750c0b2116a/1/pCxsGvKPP4VmrR80IDC_Bg92Vnc.mft
File: pCxsGvKPP4VmrR80IDC_Bg92Vnc.mft (raw, json)
Hash identifier: IoOFtEIPG0IbHwHhTxohx2qwJWviRykzJDPvV1xD6mc=
Subject key identifier: E5:D9:F0:88:D5:88:4B:C1:8F:DE:6C:95:EB:74:32:FD:90:69:0F:33
Authority key identifier: A4:2C:6C:1A:F2:8F:3F:85:66:AD:1F:34:20:30:BF:06:0F:76:56:77
Certificate issuer: /CN=a42c6c1af28f3f8566ad1f342030bf060f765677
Certificate serial: 0195E1595690215FCA3B649A698E7EE87F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCxsGvKPP4VmrR80IDC_Bg92Vnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/974b29-7ece-41ce-b88b-4750c0b2116a/1/pCxsGvKPP4VmrR80IDC_Bg92Vnc.mft
Manifest number: 0532
Signing time: Sat 29 Mar 2025 10:01:23 +0000
Manifest this update: Sat 29 Mar 2025 10:01:23 +0000
Manifest next update: Sun 30 Mar 2025 10:01:23 +0000
Files and hashes: 1: pCxsGvKPP4VmrR80IDC_Bg92Vnc.crl (hash: v3LEPxnK+BmFYZtjVPV2CKd/BoEZE06i1ERgNcWZdS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:56:90:21:5f:ca:3b:64:9a:69:8e:7e:e8:7f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42c6c1af28f3f8566ad1f342030bf060f765677
Validity
Not Before: Mar 29 10:01:23 2025 GMT
Not After : Mar 30 10:01:23 2025 GMT
Subject: CN=e5d9f088d5884bc18fde6c95eb7432fd90690f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:b5:82:37:fd:fe:8a:d9:2d:7c:71:02:14:
24:7f:3e:a5:b6:b1:21:a8:39:37:d6:fc:40:22:10:
dd:35:42:d0:ff:2a:3c:23:40:91:9f:75:6b:95:49:
21:02:28:dd:9a:81:30:cd:3c:a9:ac:6f:54:8d:cd:
2e:d1:4d:60:46:07:e2:a2:af:9c:ac:6e:83:5a:35:
78:83:4d:0f:3a:49:da:39:ae:19:8f:05:31:20:a6:
2b:23:4d:f2:be:0f:f1:87:38:f5:19:3c:92:d1:77:
d7:13:46:c2:6f:1e:92:d2:d0:1c:26:f4:81:6e:78:
79:24:5c:c1:e7:cb:7d:4d:06:37:3b:54:e0:2c:d6:
d5:cb:3e:c2:e8:f0:1b:16:e5:a2:fd:77:4c:87:92:
f7:43:64:db:32:27:4d:bd:35:96:2c:10:dd:a8:d6:
6d:1d:c8:11:54:6c:b1:2b:3e:dd:62:b7:5a:c1:45:
87:bc:8a:c5:9b:d2:f1:a1:92:66:ab:c0:fd:7d:51:
60:e3:14:b7:47:c2:b6:ec:e7:5d:1b:35:e4:3c:00:
f6:3f:26:7c:37:0c:c6:42:da:9e:ab:c7:ea:95:70:
fb:cb:9f:14:37:25:0e:82:23:40:45:5c:2c:6e:5c:
0b:b6:8f:df:f2:85:a8:98:5b:a7:89:ba:ff:db:2b:
83:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D9:F0:88:D5:88:4B:C1:8F:DE:6C:95:EB:74:32:FD:90:69:0F:33
X509v3 Authority Key Identifier:
keyid:A4:2C:6C:1A:F2:8F:3F:85:66:AD:1F:34:20:30:BF:06:0F:76:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCxsGvKPP4VmrR80IDC_Bg92Vnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/974b29-7ece-41ce-b88b-4750c0b2116a/1/pCxsGvKPP4VmrR80IDC_Bg92Vnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/974b29-7ece-41ce-b88b-4750c0b2116a/1/pCxsGvKPP4VmrR80IDC_Bg92Vnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:50:43:ed:42:6b:68:17:9a:25:88:a1:ce:9d:41:28:14:e3:
e8:a7:84:e1:f6:d9:47:b7:6f:94:99:63:46:cc:b2:a3:2b:90:
bb:40:ba:4f:cd:e9:5e:eb:14:f2:4a:49:b7:fb:98:2f:5b:fc:
45:28:48:c9:34:f1:39:c5:63:79:57:79:6c:93:48:58:da:b8:
3f:e4:e4:95:c4:37:24:55:69:c3:d0:13:5f:81:0c:e5:d9:9f:
46:94:01:1d:34:b8:55:a3:83:8d:e8:cc:30:9e:14:20:6d:c3:
cf:b4:4c:ae:14:57:7e:92:7f:a1:cf:bf:5e:48:5a:53:8b:a2:
d9:92:db:34:e9:c4:75:7c:6f:12:ad:51:54:31:7a:b3:bc:6a:
c7:7b:0c:58:26:f2:8b:91:db:09:4f:68:43:68:8e:a4:b1:82:
61:e9:b1:3b:4a:6d:08:15:fb:0c:ba:35:c6:5b:b2:ce:fa:9e:
ed:a5:ee:e2:49:e3:6b:ca:fd:6e:56:b3:1a:68:73:49:f0:d1:
b9:c0:79:0f:15:71:92:52:26:58:19:5f:75:33:99:b8:36:2d:
86:b6:44:bf:0f:a9:42:59:bb:cf:59:58:8c:a9:b7:58:6a:7d:
d5:8e:b3:02:92:66:82:44:b2:13:f3:22:48:e0:9d:e6:d9:e5:
10:2a:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:42 2025 by rpki-client