Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File: pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier: HbjBalewrZU9TPq8RWnk4tzLIZBtNYOZQWq0oZafu6o=
Subject key identifier: B5:81:24:27:B0:7C:47:92:65:59:65:9D:02:01:1A:4F:38:B1:DF:BB
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer: /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial: 0194BBCE8CD549D9E033C6A7596692D0C2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: M1+t35+qJoTEsij1qyajyi57VZhqcQQj/nJvq0co3ng=)
2: t403LtXkOSW8w7w_vK-2ppXvWVA.roa (hash: kUS7ckaNEkh4qS4uYt0WI3yhqZiJYbt1KK2dO98adJY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8c:d5:49:d9:e0:33:c6:a7:59:66:92:d0:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=b5812427b07c47926559659d02011a4f38b1dfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:73:53:41:e0:14:7e:96:97:1a:ad:6e:27:
65:e5:97:ac:4a:18:12:a9:44:da:38:a9:58:ad:18:
13:49:db:98:59:c0:a9:52:81:33:2a:ff:aa:49:f1:
cd:e2:68:86:ed:bc:4b:eb:d4:8a:4c:90:fd:09:f2:
1b:de:23:18:75:67:92:89:ce:60:09:98:d3:e1:bd:
43:58:03:72:15:3b:1b:09:0f:5c:85:3c:4c:05:23:
ff:ed:f9:50:41:4d:84:5d:4a:0a:eb:98:50:89:6d:
00:b1:f6:72:c6:1f:f4:cf:33:c1:93:7c:70:62:ee:
27:cd:60:f5:b5:3d:34:e2:53:69:bf:ae:ae:df:16:
4d:65:4e:17:e0:72:2e:c6:93:fb:3d:3b:66:1d:55:
bc:49:0c:8d:89:ef:3a:e5:fe:6d:c5:23:f9:9a:a0:
53:0e:c9:81:ac:68:fb:49:59:ec:0c:a3:7a:f1:ac:
8f:a8:39:0e:75:82:f5:c2:5b:aa:7d:fe:6d:be:c6:
4c:34:9c:0c:9d:be:2e:5b:ed:5e:72:fe:9d:80:d7:
a3:16:f6:b5:c7:ba:4d:d9:27:f3:f2:e5:0a:e0:d3:
ed:16:41:9e:79:a9:a2:29:61:f8:b2:dc:03:18:26:
f2:a8:98:99:af:35:50:c6:5e:47:ad:a9:37:80:3a:
00:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:81:24:27:B0:7C:47:92:65:59:65:9D:02:01:1A:4F:38:B1:DF:BB
X509v3 Authority Key Identifier:
keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7f:d8:ab:71:4b:8d:bf:6f:b4:0d:b6:0c:5d:7e:ee:6d:e4:
76:a7:90:25:e8:87:98:39:56:da:28:07:73:0c:ee:ee:f8:8c:
0c:5f:dd:67:21:65:2e:38:45:4d:1d:8a:4f:3c:c1:0a:e7:76:
04:44:d6:72:5e:e5:41:6e:a6:e2:51:f0:9f:6e:57:7b:36:bf:
ed:1f:42:8b:bc:50:10:05:1b:f5:b4:8a:d5:13:26:ff:2d:09:
94:60:f0:15:54:5b:30:ba:fc:20:ce:d0:f2:c7:db:2b:b3:db:
6c:d6:5b:d9:8d:81:38:00:40:dc:cd:a1:b0:b6:9c:50:4e:ea:
c3:e4:0a:8e:d0:e8:f0:7d:7c:91:0f:55:92:d1:10:2f:6c:af:
5f:b3:d6:37:49:4d:e4:9c:a4:13:83:5a:f5:f2:e4:51:b5:4c:
4c:b6:97:69:c5:de:7c:fe:50:5c:0b:8e:2c:45:de:5b:9f:58:
e4:91:ad:0b:8f:09:3a:4e:e7:f0:48:93:15:0f:1c:d1:55:c7:
9b:28:2a:f6:06:62:3e:ca:ac:43:6c:d4:48:19:85:f0:41:75:
fd:48:d9:6c:3a:2d:1d:ef:b8:cb:8e:ad:30:51:e3:ea:51:69:
27:d9:6e:d2:04:5a:1f:fc:a9:28:46:b8:b2:76:f2:07:a7:36:
66:12:3b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:06 2025 by rpki-client