Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
File: pJKfzWHcadzPvgHV_wA1tBrJUmA.mft (raw, json)
Hash identifier: T258nSSW2aMjXDW/xJLqtGtYFY63cgm4ZcS8TsNZUc4=
Subject key identifier: F4:B5:E7:AB:36:C9:57:08:91:A0:2E:27:27:98:DC:B1:48:51:4B:0D
Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Certificate issuer: /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Certificate serial: 0194BC3C93564CD704E86196F0CB447340B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
Manifest number: 0D3F
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: FMd4ncvFc0vMJ63ZqH_KhMZqr00.roa (hash: GAIpznWNN7ttQuk7XL5JgmFjADI10rnA9JaXxJOak4g=)
2: pJKfzWHcadzPvgHV_wA1tBrJUmA.crl (hash: GRkGDEjhYShW3M11daVf5pyLZ4KLnJTDtGakkJ3wfJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:93:56:4c:d7:04:e8:61:96:f0:cb:44:73:40:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=f4b5e7ab36c9570891a02e272798dcb148514b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:60:00:92:d6:22:4f:24:83:99:3d:14:71:
cd:fd:95:24:b5:ce:52:1e:00:f5:b8:20:5c:03:cc:
55:ec:e4:d8:ca:4c:da:20:b4:d9:0c:7f:70:ab:01:
68:cc:02:11:a0:e5:72:66:63:59:df:70:d5:da:84:
75:43:e1:5d:ff:b6:2b:45:d2:16:34:c8:a2:3c:56:
c6:d3:bb:26:e4:b1:4c:78:8d:8b:58:93:04:b6:58:
b8:05:d9:64:5a:0e:fa:83:a0:df:29:9b:38:56:88:
75:03:b4:fc:36:15:61:c2:a0:3c:18:a9:35:48:77:
19:81:ae:25:49:97:c4:d2:35:5c:bf:b4:e0:09:ef:
2f:f8:94:33:18:37:05:fa:fd:68:45:a8:ee:4d:1a:
70:d5:ed:45:31:f9:87:cb:bd:7d:4f:98:9e:fb:cf:
2f:53:34:b6:8a:8b:5a:a1:c4:c5:ee:58:e1:58:ab:
47:31:3c:2e:a0:f0:7e:97:92:6b:9c:d6:75:bc:2a:
25:e0:e8:88:17:6b:8b:cb:2a:f1:bc:af:c4:07:c9:
78:b6:82:15:26:23:3e:90:e7:b7:5f:23:ee:23:52:
ee:2e:4c:b9:56:8d:cf:19:c5:92:e3:eb:fb:a6:c7:
99:0a:c0:0c:61:07:b3:e1:65:e2:e4:22:c1:3d:6d:
e5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B5:E7:AB:36:C9:57:08:91:A0:2E:27:27:98:DC:B1:48:51:4B:0D
X509v3 Authority Key Identifier:
keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:98:3f:d4:7a:46:0c:a5:67:9e:4a:4d:99:50:47:ec:68:2a:
a8:87:94:83:32:f6:22:a1:28:6f:45:c1:fd:cb:76:31:4e:9c:
4f:84:39:bd:96:c4:25:ef:c4:28:b6:86:23:8f:f2:6e:fd:b9:
2f:8d:d1:3b:11:ec:94:9d:1d:24:96:28:9b:84:b7:74:4e:8d:
88:0b:a8:ae:e5:30:d1:f6:29:14:94:92:d5:a7:35:74:8a:7f:
7a:6e:7b:4f:3b:47:a5:63:e0:fd:83:94:1e:a8:63:95:cf:5d:
02:3d:a4:5e:6e:87:f7:1d:55:99:84:4c:e9:dd:7a:16:3a:16:
3d:9e:e6:42:2f:6e:63:84:9a:6b:df:7a:55:c9:e6:7a:44:63:
73:fa:6c:1a:18:c9:ee:da:9a:f7:6c:5a:3b:db:81:4a:7a:b7:
19:bd:c5:6f:f2:bd:c0:00:d2:e9:43:25:c0:a5:be:47:77:35:
48:4d:65:fe:e8:c9:d8:a9:fe:75:07:da:f0:55:e9:8a:71:b8:
95:4a:24:ca:7a:ec:d9:73:97:c1:cf:79:a6:cf:29:ef:ef:ea:
00:c0:0d:fd:52:3c:52:1f:e5:d0:e6:fd:2d:1a:38:2f:e2:63:
88:fb:d2:ce:0a:ee:c8:70:95:b7:7b:8f:e3:ea:f9:3e:59:fe:
a5:29:44:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:13 2025 by rpki-client