Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
File: PijW8T41ndC7RTSiRlWXTFfSsP4.mft (raw, json)
Hash identifier: n9b27NDKFyy56N52dGo73kXHO2ri3voo5mcjLXSDk+0=
Subject key identifier: 99:22:B4:C3:A1:A6:A8:DF:03:9F:19:9A:0D:50:BB:CC:E4:62:33:1F
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 0194BCAA3BFAD7A1BD43BC786F89D6BF35F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
Manifest number: 06B7
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: PijW8T41ndC7RTSiRlWXTFfSsP4.crl (hash: NDStUdWCf0EkEm/1nwWlrnfbzVJDXIPmqf4K+ocMhYY=)
2: quGmI9u7kZ_srTH3LAyxtNKvCAo.roa (hash: RhLYYew4zXRTIVHsFT/3lhPwJj/c1cXNf2IyJ1qOi6w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3b:fa:d7:a1:bd:43:bc:78:6f:89:d6:bf:35:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=9922b4c3a1a6a8df039f199a0d50bbcce462331f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:ed:af:00:b6:2e:c3:66:66:ab:96:88:1c:
db:5f:19:c1:35:db:95:61:ca:95:4b:07:7c:d2:e0:
be:55:e5:3b:57:ea:61:80:a3:31:a2:ce:4d:cb:c0:
98:e1:cb:dd:0e:e3:f0:53:f1:64:dc:a2:c2:47:68:
5e:89:00:82:b9:27:cd:76:ed:27:70:96:75:67:ab:
83:0a:96:18:60:b4:ba:ef:a1:06:98:cc:99:4c:0e:
d5:72:82:b6:1d:35:cf:92:97:d6:eb:ce:41:39:e9:
7a:56:6c:4d:a4:6c:d0:0e:4a:6b:ac:15:12:a2:1b:
d5:58:52:e2:84:e3:5b:54:aa:dd:c6:dd:2d:bc:04:
dc:b3:37:46:04:09:d4:45:ee:f9:08:35:69:dc:37:
a1:4e:9d:30:08:24:9b:6e:21:0a:97:fa:26:78:3c:
44:34:9e:4b:c7:28:53:94:c5:2b:55:9a:5b:bf:45:
b6:9b:03:49:18:ef:fd:15:5c:2c:c7:3d:51:cb:5b:
c5:a3:99:6d:0a:00:17:c8:bf:85:96:e8:60:4a:3e:
95:b1:f2:57:1a:23:a4:bf:1c:d2:24:cd:db:32:d7:
59:60:25:90:36:04:66:f2:53:7c:37:d1:18:15:5a:
21:07:4f:a7:4f:01:5a:5c:af:a3:4f:18:4c:4c:bb:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:22:B4:C3:A1:A6:A8:DF:03:9F:19:9A:0D:50:BB:CC:E4:62:33:1F
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:76:56:b1:11:15:39:e0:8a:b9:bb:a7:bf:9f:87:e8:f3:95:
0d:3b:c9:d3:b3:34:49:77:0a:19:01:8e:23:f0:fe:89:c7:6e:
72:c5:84:e9:6f:c3:c5:5f:c2:19:f7:66:af:c2:30:50:33:7e:
29:96:20:b4:ab:d6:6e:3e:d2:32:2e:e1:d3:f2:db:be:02:dd:
20:83:cf:03:f9:d2:ff:d7:29:5c:55:63:d7:49:ca:3b:c0:7e:
d8:ef:c8:bf:8c:0a:fa:be:38:f0:e6:74:3c:7d:7a:cd:94:f3:
b3:24:c1:23:62:f0:cc:d4:3b:34:45:20:a5:69:05:10:ec:74:
70:35:45:0e:a8:15:0e:a1:54:e4:eb:ab:f3:fa:a6:07:66:fb:
24:ba:ef:70:d5:ea:8f:da:8c:cb:8a:2e:15:81:6e:ea:48:dd:
b5:d8:7b:56:fa:9f:01:c0:56:ce:27:2a:1e:ce:48:fa:fc:83:
c5:26:c6:ee:e1:c1:27:aa:ca:d8:b2:46:43:6f:60:65:c7:3a:
d3:2d:6f:e3:02:b8:5a:59:08:4b:ba:e5:87:f7:9c:cf:2f:51:
c3:dc:c4:02:52:26:c3:5a:4e:ac:d8:01:31:a5:fd:90:17:6d:
f6:fa:d8:30:50:7a:82:1b:12:ba:13:e4:a0:8f:e1:34:e1:1b:
65:aa:64:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:57 2025 by rpki-client