Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
File: PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft (raw, json)
Hash identifier: jolHf7PVYYkQ+Vhuly1AdMqMpKD3yAbdiUIrLZJn8JM=
Subject key identifier: 90:64:6E:52:45:77:B0:46:7A:0D:50:A5:54:8B:87:5F:E6:73:BC:61
Authority key identifier: 3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
Certificate issuer: /CN=3c9f400f884f7030318eb6be74c528485abe4460
Certificate serial: 0194BD4EB775614C44CFF7705B38B6FB2E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
Manifest number: BE
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: 5CyBpeLyifB2AFAXOFh8yVUvCwE.roa (hash: JsDCYkyYiFX4qZJz2FVAXDqsZF5P1tX4kX3+rULf7lU=)
2: PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl (hash: 91IF89jL0LTwztOhozhNdYmMOYHSL+uVdF8UPfRKN60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b7:75:61:4c:44:cf:f7:70:5b:38:b6:fb:2e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9f400f884f7030318eb6be74c528485abe4460
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=90646e524577b0467a0d50a5548b875fe673bc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bf:75:5e:de:f2:5e:1d:9b:0f:53:01:cb:fe:
25:12:20:e0:f8:03:6b:27:1e:f6:81:83:19:37:a8:
34:b0:72:c2:39:a1:9b:0c:61:9c:70:3b:75:3b:0e:
2e:cf:07:ee:3f:09:77:26:12:eb:df:46:72:c5:63:
4e:62:50:97:d4:d1:3c:6a:d7:06:50:c3:14:d6:da:
e2:5d:65:e3:64:b4:7b:48:df:5b:c9:3e:ae:59:58:
b3:30:10:e0:37:ef:e2:78:97:83:e3:5d:e3:07:a7:
d1:58:65:96:50:37:f6:ca:16:0c:3e:98:fb:3f:43:
f2:93:b4:65:3b:36:63:01:89:fb:49:41:00:af:b9:
82:6d:be:a3:dd:34:f9:95:00:12:df:12:68:42:a6:
a7:c2:a3:06:58:a7:10:e1:36:05:f1:e5:18:8f:c0:
67:6d:e8:71:15:12:9f:cb:f9:87:4c:0e:81:e0:01:
8b:3e:71:e2:1b:93:39:a3:18:77:0f:e1:52:7b:6f:
ce:a5:5a:ea:0a:f9:6a:76:39:06:7d:d0:17:84:0e:
15:12:fb:f1:d2:e1:6b:52:fc:61:7e:3e:42:43:bf:
98:18:f1:76:3a:1c:72:21:b2:62:e6:c3:e5:31:e4:
66:88:07:b0:c1:5a:44:a5:37:9b:28:bb:d2:63:e9:
9d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:64:6E:52:45:77:B0:46:7A:0D:50:A5:54:8B:87:5F:E6:73:BC:61
X509v3 Authority Key Identifier:
keyid:3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f3:74:0c:06:0b:cf:2b:45:eb:26:d7:08:d1:68:46:9d:2c:
7e:03:0c:0e:e2:c4:c1:23:5b:11:ec:9a:23:e1:db:8d:74:52:
78:20:4f:e3:73:0b:86:94:c3:5c:1b:57:85:f9:a3:3d:02:f4:
0a:d1:13:c9:cd:bd:05:d9:14:97:1e:28:26:e5:cc:02:a4:04:
5c:2d:9b:be:83:7a:b1:dc:80:2e:14:1a:80:30:e6:f7:7e:9f:
4e:c9:6a:22:60:d0:be:84:d1:d2:45:49:ad:bc:75:79:e1:2a:
00:af:78:0a:02:37:c2:2d:d2:9c:73:52:f2:57:bb:1f:fa:83:
48:a8:e2:5e:5b:66:46:0e:e1:00:a5:d4:23:f9:1d:8a:36:22:
18:b9:87:ae:e9:39:89:8d:84:40:c4:98:02:4e:92:ee:5d:98:
dc:3f:e3:fc:b9:92:d1:1f:27:9d:50:fd:f1:b4:7d:97:ec:a2:
44:00:a2:fa:47:0e:83:99:fb:92:8b:f5:c5:bd:d3:ae:ef:7e:
d9:2e:66:95:a3:bc:5e:9e:2c:12:55:e8:e5:a4:8b:75:56:d4:
c7:cd:93:33:11:ee:d5:74:0a:07:ed:64:1d:a4:c7:f4:60:9d:
30:81:8f:98:1a:e3:2f:ba:3c:13:66:26:9d:24:e8:b8:e0:3e:
c0:97:e8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:52 2025 by rpki-client