Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
File: pJR6ZT3sU9F51XJPJRTHJW22nfg.mft (raw, json)
Hash identifier: ZTydrcrGrlLZ0r6uZRQrarX+Wg9mphhiifdycX11/k0=
Subject key identifier: 79:A7:C9:25:9F:32:8F:27:78:4C:C2:39:1D:76:1E:3B:6B:4D:73:6B
Authority key identifier: A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
Certificate issuer: /CN=a4947a653dec53d179d5724f2514c7256db69df8
Certificate serial: 0194BCE073CC50328875C7EA82D5C10AD75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
Manifest number: 0D58
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: pJR6ZT3sU9F51XJPJRTHJW22nfg.crl (hash: xs3Jbn9ROgDoCezyl7tFtUBQ1JPkA7IjNbt8tKQYm10=)
2: qOhrpnYZCzUpUKZB3MFNa4-HHEI.roa (hash: 6oJMsP2H8bztySGaS8Vu2F0xQVmbFj5CBgjWIqAhkAo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:73:cc:50:32:88:75:c7:ea:82:d5:c1:0a:d7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4947a653dec53d179d5724f2514c7256db69df8
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=79a7c9259f328f27784cc2391d761e3b6b4d736b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:a5:3d:97:9f:0d:8b:b9:ad:0d:31:76:77:
84:f6:a7:84:1c:6d:7e:f2:0e:c2:52:b5:cd:a1:85:
1b:e7:62:d2:ba:3b:d2:7c:0c:4e:1f:70:1e:ca:e5:
ee:ac:67:a4:df:0a:4c:50:a4:1b:86:4d:85:7a:86:
e8:7a:35:3b:6e:b3:d9:ec:39:51:2e:8e:7c:81:f7:
90:22:76:0c:9e:3c:f8:09:22:e4:ce:04:c5:d2:cb:
d1:b3:43:8a:3c:fc:98:9f:64:85:61:cf:d4:62:cb:
72:80:08:ad:7c:51:8c:9b:0f:b5:c6:94:54:f7:da:
be:3d:b3:11:a7:46:e5:a5:cf:92:b5:62:d1:22:46:
78:3c:3a:a7:2f:54:97:4a:86:9f:1f:f2:1f:85:78:
84:e3:79:e3:92:96:98:b7:55:71:e9:05:d5:a6:d8:
1a:62:59:9d:ec:8f:34:7e:42:ac:ca:08:06:00:a8:
a7:bc:1b:18:99:4e:35:f2:60:54:9d:a7:1a:c5:78:
dc:5c:91:ba:79:0a:22:98:69:45:ac:69:e9:d7:3b:
fb:fb:ec:6e:fb:b0:e9:af:00:b8:f8:28:0a:ac:00:
f1:95:fe:e9:57:a1:e2:b6:b6:65:1f:47:f1:e6:11:
30:23:e7:cb:a6:4c:58:41:2b:3a:d5:72:7b:49:0a:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A7:C9:25:9F:32:8F:27:78:4C:C2:39:1D:76:1E:3B:6B:4D:73:6B
X509v3 Authority Key Identifier:
keyid:A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:69:3d:5e:8f:15:19:f8:71:94:cc:6f:90:b8:2e:d7:b7:1f:
01:d8:70:9d:c3:e9:11:01:2a:6b:d0:d3:f1:de:f3:f3:2e:97:
65:f0:c9:f2:6e:6a:c6:fd:97:5e:45:73:38:b5:1c:5f:1c:9e:
d4:8e:d3:f3:e5:b2:45:d5:13:c1:df:01:2a:ac:c3:f8:be:ef:
b2:cc:cc:bd:a3:44:df:23:20:9c:aa:6c:18:04:8e:7c:48:92:
32:2a:c2:2d:ad:e3:d2:a7:a9:26:a3:2b:8e:a0:c7:94:d6:dd:
64:e4:bc:9d:08:d2:d1:07:4f:72:61:c2:a2:09:46:1f:66:8c:
0c:c3:cf:db:25:96:b9:5f:56:28:36:a0:a8:6a:b8:c5:5d:b0:
85:c4:af:b8:35:2d:0c:3d:53:20:9b:46:ad:f7:32:91:85:49:
dc:8f:75:46:39:85:3a:60:a4:93:f7:90:f1:8d:b8:b4:fc:ec:
59:c6:a5:48:9f:2f:7f:41:f5:e2:0a:2a:42:6d:84:5d:6c:48:
85:88:b3:7b:6d:01:56:fe:05:2b:f8:fa:6e:4c:93:d7:1b:25:
10:73:f9:44:2d:4c:25:b6:be:34:0f:87:6f:fb:11:a2:e8:2d:
56:76:86:ad:fe:4d:68:8b:90:66:58:f2:5a:6d:f4:ec:91:a4:
36:12:19:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:59 2025 by rpki-client