Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
File: 36JPgpi-GMimnxgSjwZOcAPh090.mft (raw, json)
Hash identifier: +dwHde1nDUdXskuYS/Rp2EW7y6MjnTPt3P+poNcZ8y8=
Subject key identifier: A9:A3:7F:00:8B:95:EF:83:AF:76:7B:E0:0E:1F:EB:38:70:D0:19:C7
Authority key identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
Certificate issuer: /CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Certificate serial: 0194BD17BE36681B6C3AC22AA85BD4DD4522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
Manifest number: 0B20
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: 36JPgpi-GMimnxgSjwZOcAPh090.crl (hash: TpiqkDGw0cPEilvbShoChE3/KMwOeVxyvQuLnKFFU3w=)
2: Ng0Z_Y8YOqJU-aJwUaovvEl0tDk.roa (hash: hZn0EBlBpjbO2T+dcLbeLS+VLWtfhrO+ME9lcig54Mc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:be:36:68:1b:6c:3a:c2:2a:a8:5b:d4:dd:45:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=a9a37f008b95ef83af767be00e1feb3870d019c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a1:a0:38:4d:c7:f3:6b:72:8b:a4:6b:0c:44:
cf:f9:cc:26:4d:cc:bf:a1:ab:8f:c7:f3:f7:0f:a4:
eb:7f:6b:49:0f:63:ed:ce:78:7c:2e:d9:bf:2a:08:
e3:dc:4e:fa:4e:f8:90:1e:f2:5a:91:0f:fc:8f:0f:
31:6d:5a:82:36:b7:35:00:d6:6b:18:65:39:7c:a5:
ab:59:63:75:6a:c7:85:e3:a2:43:5c:87:3b:04:03:
d1:04:a1:b1:23:6c:a4:22:7e:b3:15:45:f5:b5:a3:
55:17:cb:6b:29:da:79:d9:5b:57:40:8a:c1:31:e6:
da:1d:56:76:4e:ee:8f:12:54:9d:0f:a4:38:ed:0a:
4e:5f:d5:27:7f:f0:87:bd:75:a9:36:f4:c2:cd:a2:
99:4d:c5:f7:3b:0b:08:2a:bd:7f:47:96:d9:1f:be:
a6:1b:b0:cf:b2:1e:53:db:3a:0a:36:1d:24:7b:b7:
65:30:7a:93:2f:ef:0f:64:3f:53:d9:3a:1c:c1:0b:
2e:6a:b9:e0:4f:3d:38:4e:b4:ba:59:71:30:c6:cf:
52:5b:fa:8f:c7:20:e8:15:d6:bf:78:02:de:12:50:
98:bf:ff:2c:06:13:d9:7d:bc:ca:55:a7:08:78:56:
f2:eb:f0:59:60:82:ae:81:63:86:19:43:f3:3a:ee:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A3:7F:00:8B:95:EF:83:AF:76:7B:E0:0E:1F:EB:38:70:D0:19:C7
X509v3 Authority Key Identifier:
keyid:DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:76:4f:f9:98:4b:f3:85:7f:0a:44:a6:bd:cd:d9:d3:21:5d:
54:f2:76:85:60:6e:88:d9:6a:e5:42:de:d3:83:3a:d2:ef:6a:
a8:e2:31:bb:15:05:dc:8c:b1:9f:ac:03:5e:e3:dc:b2:dd:47:
09:08:da:3d:92:38:e7:76:3c:fa:2d:e6:cd:9b:03:8f:20:42:
69:f4:76:0f:72:66:cd:91:92:ba:6d:91:07:7e:e6:16:3b:df:
67:1e:cf:36:ff:d7:07:6e:5b:70:7d:22:6a:51:0c:d9:e3:35:
4d:1b:69:41:62:40:97:62:93:53:cf:13:32:09:b7:eb:6e:01:
e0:5f:84:4c:42:78:74:f8:85:90:d8:eb:90:0d:ca:e5:b2:e3:
b3:8a:95:67:6d:5a:fc:eb:f0:f8:3a:d8:6d:93:f3:3b:39:ad:
36:bb:72:11:96:c6:d1:92:b7:cb:4d:53:06:4a:c5:b0:ca:94:
30:42:1c:92:53:70:9c:91:d4:ce:bc:22:3c:12:96:1c:26:a7:
55:13:19:7b:06:8f:86:1b:65:54:44:98:66:61:d9:a3:82:c3:
be:ce:c4:8c:12:e0:b8:27:fe:03:5b:6d:d8:2f:99:0b:9b:a6:
00:43:0e:c3:a2:e3:0a:04:56:4f:6b:e9:07:b7:b1:40:1c:b1:
06:8e:76:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:56:23 2025 by rpki-client