Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
File: pJMvpJVkpXamFD5F-BVmjyANdjc.mft (raw, json)
Hash identifier: 8v/VOqhdvvpQMTowwFJ1THZpBg1qtbfcYR9eAF/j44w=
Subject key identifier: A1:AF:68:EC:48:0A:17:AD:75:F5:4C:CD:3C:F2:28:71:BD:EF:95:42
Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
Certificate issuer: /CN=a4932fa49564a576a6143e45f815668f200d7637
Certificate serial: 0194BBCDFB6FF0A94E32A4C9DE5EA404A43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
Manifest number: 04D6
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: nbFO3tETAKU90cGGwpaCKUOKTLY.roa (hash: cquJx46DtG8x6pISzm/UdeY5xz+jlo5riwT4Pb8N/jw=)
2: pJMvpJVkpXamFD5F-BVmjyANdjc.crl (hash: 1vRIKkGCm0edwHiZv2okGvpFhmvVLFBgchLERKWuMdc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fb:6f:f0:a9:4e:32:a4:c9:de:5e:a4:04:a4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=a1af68ec480a17ad75f54ccd3cf22871bdef9542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:f9:1f:20:d8:83:1a:ff:e6:a4:3b:a9:cd:
a5:55:e4:07:c9:cb:c2:cc:51:dc:72:5a:39:02:aa:
b2:6f:1b:76:b7:14:9c:29:88:ec:85:70:f4:bb:c9:
1b:f9:78:68:bb:8b:ba:e1:d9:08:f2:5f:1b:31:02:
25:4d:53:00:91:af:47:c6:4a:6c:76:86:36:5a:0f:
a3:e1:61:41:6c:ff:ee:7c:14:dc:0c:e0:42:10:28:
ec:ba:0e:2f:2e:13:c9:e1:f1:76:04:95:aa:96:df:
7b:46:12:11:ac:e7:82:d2:47:61:20:53:10:c4:2e:
68:a7:48:a4:05:67:17:1e:20:c8:47:70:60:92:fb:
63:7b:1f:8f:05:2c:aa:a5:88:9e:68:01:01:40:4f:
3c:df:49:91:e4:82:10:af:22:07:ba:7d:02:ed:56:
70:54:db:50:3a:6b:70:2c:37:de:de:e2:8d:fe:5a:
a2:93:6d:91:12:bb:89:49:67:9f:5b:c3:78:57:30:
b8:f5:63:d0:57:22:0b:86:4c:ad:a8:35:de:9f:2e:
9c:c2:9c:e3:0a:d4:a2:81:9c:b0:36:0a:b3:4d:d4:
7b:7e:8c:0f:39:45:89:13:2a:5e:ff:33:89:4a:56:
81:f6:1d:29:72:99:cb:ce:1e:c9:d8:b9:3c:1e:4a:
38:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AF:68:EC:48:0A:17:AD:75:F5:4C:CD:3C:F2:28:71:BD:EF:95:42
X509v3 Authority Key Identifier:
keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e6:b2:a8:76:a3:ec:87:dd:7e:4c:72:91:68:dc:77:48:de:
94:6d:b6:e7:e1:ef:83:1b:1c:d4:e0:65:32:b9:e4:ba:fc:a8:
67:05:27:45:72:5d:1a:28:58:d2:5e:58:f6:f2:24:81:2d:63:
c3:e1:6f:2d:80:8b:41:91:e1:39:d6:00:ae:be:d4:73:ff:86:
69:b9:0b:7d:1c:bf:f6:dc:23:ab:9f:82:95:47:d5:45:3f:16:
a2:63:20:99:06:9f:96:0f:27:5c:46:2f:33:f9:d5:a1:da:c0:
75:f9:63:c7:0b:48:08:da:64:2b:61:8b:07:1b:21:c9:d9:df:
38:f8:17:ad:6c:80:8b:22:dc:03:f3:a3:35:f6:c5:24:c7:c4:
a9:2a:f3:da:3c:2b:9d:d7:9a:ab:7e:ae:e4:a2:ab:8a:4d:09:
99:22:17:7e:42:fc:89:a6:75:17:cb:5a:ae:c1:40:b2:a0:35:
f6:7a:c0:95:3a:8b:b2:85:bc:61:ce:e8:26:75:c2:8e:c4:16:
39:98:35:3c:53:b1:9f:02:67:4a:31:eb:71:a7:df:a6:bc:62:
6a:c9:25:02:a4:7a:6e:bf:8d:31:ea:1b:8d:41:8b:e1:19:8e:
0f:4c:78:51:07:1f:dd:6f:fe:7e:f6:93:66:ff:64:b7:e7:17:
32:4d:51:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:35 2025 by rpki-client