Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: F8ToHNVWDpMDtZ2oMCESPgtGnSAnZSS3PznAErk+DL8=
Subject key identifier: 50:6B:C7:A2:EB:4B:20:E7:AA:5F:F5:A2:8C:C7:21:7F:39:0C:91:58
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 0194BD1752A3D182DD1C8D373C0D37E77B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa (hash: awi9blZyXe6dA7Vb92PcI70MUj14FAGRwBheENnmVNg=)
2: XX7w2vPpzXRFuwUhQden5lCVCZQ.roa (hash: qufImvpEF3c9wVcCzVpZb6bGNeux1RbSpnlxjWKOWAA=)
3: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: VrjAvMZlgsAhsIaYs85BeTFU9pnUxzgv8QVSr7BpQh4=)
4: wR0fHEzjCHCPZPB5JGzxge-3qdE.roa (hash: Ll5NNx6rg9HE4x/GGGYOGCvVW3eD8cnr/rDcbdSk/qU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:52:a3:d1:82:dd:1c:8d:37:3c:0d:37:e7:7b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=506bc7a2eb4b20e7aa5ff5a28cc7217f390c9158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:83:62:0c:2a:b5:ed:e8:e5:05:ff:ee:f1:8b:
3a:2b:96:5a:7c:90:40:b6:c2:cc:32:c3:6a:58:66:
b4:2a:79:49:a4:07:59:21:0c:b3:ff:cc:8c:92:b7:
a9:37:9e:20:aa:e6:a3:17:f5:56:73:1b:be:da:a1:
b6:85:85:34:fe:7f:fa:7d:02:eb:ef:19:08:00:b2:
70:5e:df:90:27:95:aa:c5:31:89:fe:12:d7:51:71:
b4:5b:49:28:f9:88:71:7f:86:ea:5a:e0:6b:a2:4b:
8d:19:e0:64:f7:0a:51:fb:c2:0d:06:50:14:87:88:
dc:05:52:ea:cd:5e:a4:8c:3e:5a:45:33:82:85:6b:
ae:35:d4:99:ca:97:6e:ab:a5:f4:16:8b:f5:38:d6:
65:ef:4d:fb:4a:b8:6e:7b:fd:e0:99:83:e1:93:64:
21:9f:e0:d1:ef:2e:4c:db:dd:28:c8:24:5e:8b:55:
95:d7:9d:d9:c0:6c:d0:84:25:4d:79:46:6b:91:5e:
45:0f:7f:66:48:90:30:32:c8:e0:c9:2d:23:0d:1d:
52:92:6e:05:74:7c:66:a8:86:30:a2:22:ed:7c:83:
19:72:63:0c:bd:92:6a:76:f6:cb:6d:cc:8c:18:b2:
20:11:63:31:9d:eb:32:96:30:15:12:db:2e:c8:ec:
ed:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6B:C7:A2:EB:4B:20:E7:AA:5F:F5:A2:8C:C7:21:7F:39:0C:91:58
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2b:70:b3:62:98:c3:1e:ea:08:75:76:70:53:ac:05:54:f0:
22:9e:61:d8:47:a5:05:89:23:c4:f2:39:55:13:2a:28:60:6f:
ba:f2:ac:ec:c1:f3:ef:7b:0f:14:f5:b0:c2:f7:13:d1:69:d0:
0d:f3:31:85:bc:ab:ff:e5:e5:d7:64:42:70:25:ed:32:29:92:
06:99:49:72:0d:bc:72:f5:e6:14:f7:bf:38:ee:49:53:53:1c:
2c:df:a9:9f:9c:1d:bc:c5:95:00:60:e7:80:6d:8b:ba:8f:f2:
15:20:06:81:1b:41:05:05:a0:9c:c5:9f:1b:6b:0b:26:4d:b4:
8f:10:45:ce:73:a7:c4:da:2a:1a:ed:95:e0:ef:90:60:53:e0:
1a:79:97:92:04:b2:ea:7f:61:7c:33:00:19:0d:11:c2:2d:a4:
a3:2c:e8:af:87:01:57:10:f9:be:8b:3e:f5:9e:cf:80:4e:9a:
42:5c:fb:df:28:73:9b:c6:36:94:88:ed:49:48:8e:6b:84:bf:
b4:be:ad:c6:a3:67:42:2c:fb:58:25:81:d3:34:46:45:fc:4a:
b5:be:60:13:8d:37:5d:6c:95:c0:05:8c:7d:ee:00:a4:f4:42:
04:8d:15:b1:d1:30:bf:01:49:e5:c9:9e:fb:74:a4:14:6f:56:
a1:07:8c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:03 2025 by rpki-client