Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
File: PEHqRBeKcCxQcAACPRSp-cRyYOY.mft (raw, json)
Hash identifier: Io5yRDfp1Kh7rfcKf31P3EcFXciFVMD4KrAykP0BJ7U=
Subject key identifier: 47:E3:CF:3A:BA:DD:C1:61:FC:FE:FC:20:67:A9:18:75:FD:90:71:B1
Authority key identifier: 3C:41:EA:44:17:8A:70:2C:50:70:00:02:3D:14:A9:F9:C4:72:60:E6
Certificate issuer: /CN=3c41ea44178a702c507000023d14a9f9c47260e6
Certificate serial: 01962E994DDA48CD1C384A6DDD25AE83C74D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEHqRBeKcCxQcAACPRSp-cRyYOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
Manifest number: 0EEE
Signing time: Sun 13 Apr 2025 10:02:00 +0000
Manifest this update: Sun 13 Apr 2025 10:02:00 +0000
Manifest next update: Mon 14 Apr 2025 10:02:00 +0000
Files and hashes: 1: PEHqRBeKcCxQcAACPRSp-cRyYOY.crl (hash: M5vk5KKggVYSoSgD/S1e8OnbFYYDNfSzb1uxQyoJd7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:4d:da:48:cd:1c:38:4a:6d:dd:25:ae:83:c7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c41ea44178a702c507000023d14a9f9c47260e6
Validity
Not Before: Apr 13 10:02:00 2025 GMT
Not After : Apr 14 10:02:00 2025 GMT
Subject: CN=47e3cf3abaddc161fcfefc2067a91875fd9071b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:96:72:23:b4:d5:9c:c5:e4:81:9b:51:ef:25:
78:b0:70:b2:00:2f:b0:e1:07:64:62:c1:81:6c:f6:
e3:e5:94:99:88:59:45:15:99:e1:ed:06:b0:f7:df:
45:90:33:00:66:66:a9:3b:8a:e8:fb:ba:9d:75:f9:
40:c4:41:54:02:53:68:39:95:d1:aa:89:c5:39:67:
b1:60:11:b0:8b:af:52:f1:9b:f8:09:e9:5d:75:ef:
3b:4f:fc:15:e3:60:26:e8:fc:b2:f2:0e:f4:25:f8:
2a:0a:c3:8a:eb:f6:60:95:a1:e4:2a:25:13:02:77:
9e:74:7c:8d:f0:1c:d6:39:65:0d:38:74:6e:eb:99:
29:ee:ea:6f:df:f9:c4:50:ec:73:a0:bb:99:3e:a6:
8e:7b:0f:4e:f8:f8:29:c3:85:08:43:36:62:76:d5:
05:41:eb:2b:2e:50:c0:84:2f:82:5d:8a:e4:a1:a6:
98:be:56:d1:18:a4:3a:a1:3d:8a:50:d6:ac:59:c2:
e8:90:03:4f:f0:21:25:04:5b:1a:8a:64:6a:27:83:
17:ea:f0:ec:1b:a8:62:f2:8c:5b:97:ca:24:f7:5e:
64:72:71:ae:ec:d4:5c:fa:09:00:6b:a4:30:37:fa:
5d:3b:78:ae:68:88:1a:6d:f5:60:03:5c:ab:8b:00:
5e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E3:CF:3A:BA:DD:C1:61:FC:FE:FC:20:67:A9:18:75:FD:90:71:B1
X509v3 Authority Key Identifier:
keyid:3C:41:EA:44:17:8A:70:2C:50:70:00:02:3D:14:A9:F9:C4:72:60:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEHqRBeKcCxQcAACPRSp-cRyYOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:df:48:b5:75:69:90:2b:4f:31:72:7b:2b:3a:2f:7b:cb:85:
4e:49:7a:48:5c:e4:47:c2:18:ec:d2:69:a9:14:24:62:3a:1f:
06:dc:a1:f0:5e:e5:88:a7:cc:97:e0:54:38:dc:eb:16:2b:95:
bd:0c:fc:84:92:9a:66:2b:5c:a9:c9:3d:5c:b3:1c:a9:c4:9b:
de:be:fd:4d:c0:48:d6:2a:8a:c7:27:41:81:1c:4b:4d:10:8f:
ca:ca:56:3c:cd:a8:c6:0d:05:b3:86:1e:b5:61:5a:9d:0c:d3:
4c:1c:b4:22:0f:a4:ae:83:d5:7d:8b:96:73:7c:ea:b8:eb:77:
36:cc:07:90:d4:3b:b4:b0:a8:4d:9c:14:3d:ac:d5:d5:79:14:
c9:e1:05:e0:4c:21:d0:10:6d:31:32:1f:2f:bb:d0:03:09:ff:
1d:2e:22:c0:a4:07:ea:ce:e7:e2:50:87:dc:10:3e:85:a7:05:
32:d1:f5:0f:67:6d:a5:15:4a:66:3d:35:56:e2:07:69:22:31:
32:c6:c5:0e:e1:7c:5f:b5:47:ae:60:1b:bc:98:4b:56:98:fc:
1f:27:3f:a1:ea:de:05:27:58:84:cc:c6:61:9c:85:af:0a:52:
ee:33:a0:39:45:4e:35:e1:d9:e3:c4:bc:4c:56:c4:38:35:ee:
bc:ea:0d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net