Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.mft
File: pnknI_UOcyw4kgiUBnCl4KiWzzE.mft (raw, json)
Hash identifier: tBDS8am9t1FGClY2ValiSi/3S25DZ6ivjv5ORQAQQRA=
Subject key identifier: 03:B4:5A:7F:67:47:73:03:BE:F7:B7:A7:7E:5E:3D:16:79:EB:3A:34
Authority key identifier: A6:79:27:23:F5:0E:73:2C:38:92:08:94:06:70:A5:E0:A8:96:CF:31
Certificate issuer: /CN=a6792723f50e732c389208940670a5e0a896cf31
Certificate serial: 0191FFA4F2E71FD2D8AF88D1F1B09358B515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnknI_UOcyw4kgiUBnCl4KiWzzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.mft
Manifest number: 02EA
Signing time: Tue 17 Sep 2024 11:01:25 +0000
Manifest this update: Tue 17 Sep 2024 11:01:25 +0000
Manifest next update: Wed 18 Sep 2024 11:01:25 +0000
Files and hashes: 1: pnknI_UOcyw4kgiUBnCl4KiWzzE.crl (hash: XBBshWr7riyo4nTRtVEqMMBWQBXvxXKmiylwYCUQteQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ff:a4:f2:e7:1f:d2:d8:af:88:d1:f1:b0:93:58:b5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6792723f50e732c389208940670a5e0a896cf31
Validity
Not Before: Sep 17 11:01:25 2024 GMT
Not After : Sep 18 11:01:25 2024 GMT
Subject: CN=03b45a7f67477303bef7b7a77e5e3d1679eb3a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:56:ed:ea:d4:2c:b5:45:54:a3:a7:ae:14:
bf:1f:23:48:6c:f2:6e:c4:44:1f:4c:31:b6:53:0c:
07:90:7b:6c:17:7e:db:76:e0:e3:21:7d:5b:8b:56:
f0:14:ef:ec:ab:de:85:5c:74:3b:ce:98:80:10:31:
60:63:ce:4a:0b:ab:38:56:2d:83:5a:4c:fc:48:f5:
df:79:44:d7:eb:f2:c2:73:84:e7:26:e0:d6:ca:c5:
57:4d:88:3d:49:89:f4:7a:7f:49:13:e2:67:04:a7:
99:f8:09:3d:fb:58:90:9b:68:b8:ce:f6:87:d0:94:
03:2a:35:40:f6:13:df:4b:e4:07:78:ce:ee:6f:f2:
77:ec:49:b4:90:84:93:0a:9e:c0:8e:a7:be:c5:c0:
c5:06:80:81:3e:a8:a2:2b:98:e8:3d:39:17:e6:c9:
39:2b:ff:1f:0d:84:a9:c2:38:d7:0a:65:d0:b1:33:
43:14:48:8a:0c:32:d4:e1:e5:1c:9c:1d:b3:9f:52:
ad:4a:cf:c7:36:b1:be:de:7c:ba:22:75:bb:6d:fe:
ab:26:73:23:47:b1:e3:1e:6f:3b:f3:d7:8a:22:af:
4a:78:78:23:19:95:c9:b3:32:76:b5:6e:57:66:7d:
e3:a9:8c:e5:89:83:8a:34:c4:e2:65:42:1d:f0:6f:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B4:5A:7F:67:47:73:03:BE:F7:B7:A7:7E:5E:3D:16:79:EB:3A:34
X509v3 Authority Key Identifier:
keyid:A6:79:27:23:F5:0E:73:2C:38:92:08:94:06:70:A5:E0:A8:96:CF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnknI_UOcyw4kgiUBnCl4KiWzzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:97:e8:ac:24:7a:13:bb:18:75:ec:a3:32:17:00:20:af:25:
03:99:d6:dd:5e:83:b7:51:2d:81:40:9d:61:f9:50:f7:90:3e:
1f:a5:af:6d:8d:2f:a8:71:58:ba:2d:77:b2:24:04:f0:51:32:
54:1f:58:fd:30:13:3d:97:c7:7a:03:66:d9:d1:4a:c7:f4:2b:
10:85:62:0d:ca:5c:9f:d5:4f:d7:86:22:6f:c2:5c:d8:15:ed:
6e:8f:cd:32:75:7e:d5:4c:a5:ea:85:46:29:4c:a7:b4:ba:05:
39:1b:b4:f6:de:9d:f1:63:02:df:85:6a:13:3c:73:f5:92:73:
a9:56:a0:5e:9d:a6:dd:ba:03:d5:c1:9b:b6:74:be:c5:66:79:
52:18:3a:89:c1:a3:33:9d:bb:a8:69:ed:af:b0:37:f2:b2:85:
05:f4:55:e4:63:2c:2e:bd:77:47:dc:76:bd:fc:96:1c:1b:7e:
7a:1e:ac:15:44:15:3b:23:46:9e:eb:bb:77:eb:d7:65:cd:cb:
c6:6f:5b:45:ab:bc:5b:87:26:a0:66:f2:bc:c9:a8:73:4a:8d:
ec:eb:30:46:cd:cd:6a:67:e7:ef:e5:75:b3:20:04:c3:96:00:
66:65:01:a8:df:c4:af:7d:df:d3:63:d5:7a:a5:14:5b:e6:89:
95:91:c4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:52:06 2025 by rpki-client