Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
File: PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft (raw, json)
Hash identifier: 1tRny1yo7WyH9mc1Q1wlIJL9Mm3kOlmGzP0BvvwFy3o=
Subject key identifier: E7:16:51:B9:AE:55:A1:57:98:E9:B6:F3:60:34:7F:DB:C0:2B:05:2E
Authority key identifier: 3C:92:19:DA:C3:58:49:86:E7:8B:41:DC:9F:FB:62:26:23:B4:AC:61
Certificate issuer: /CN=3c9219dac3584986e78b41dc9ffb622623b4ac61
Certificate serial: 0194BC3CAB4CAD293903E1DAAE73C5071536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
Manifest number: 011D
Signing time: Fri 31 Jan 2025 12:01:20 +0000
Manifest this update: Fri 31 Jan 2025 12:01:20 +0000
Manifest next update: Sat 01 Feb 2025 12:01:20 +0000
Files and hashes: 1: PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl (hash: 0mosTmDHlhNhgmizJYF2HTpwGum6vkrrxkvBmUFbJl8=)
2: x_RfurRNedmEj2hSqHVNcrKbV_E.roa (hash: 8G+RNYkhEQwOffPjlh7thkZsriDB79Nwv1PSXlUOkh8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:ab:4c:ad:29:39:03:e1:da:ae:73:c5:07:15:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9219dac3584986e78b41dc9ffb622623b4ac61
Validity
Not Before: Jan 31 12:01:20 2025 GMT
Not After : Feb 1 12:01:20 2025 GMT
Subject: CN=e71651b9ae55a15798e9b6f360347fdbc02b052e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:72:37:c1:c2:b7:ad:59:b6:57:69:5c:20:42:
36:cd:d1:a7:4f:02:ca:3d:7c:bd:be:b6:6a:67:8f:
81:00:ef:b2:8f:9d:3e:65:76:7c:7d:1e:68:02:b2:
dd:b2:93:f3:ea:0c:c9:5c:6d:2b:5f:74:b3:2c:85:
69:29:da:bc:60:a5:4b:e7:5f:24:36:d0:d5:3e:2f:
08:a2:96:51:4c:52:b6:4e:99:78:59:c9:ac:a0:a9:
f0:a8:da:39:c8:8c:44:93:a5:99:b7:67:7d:23:03:
ad:29:c8:2f:98:a7:56:23:3b:6a:43:34:d7:9e:57:
33:23:fe:d4:01:60:90:3e:89:bb:96:a7:81:f5:90:
7a:ac:b1:f5:4e:99:a6:bf:d8:3a:fe:52:99:8d:03:
7b:78:7d:14:6e:7d:a3:11:fa:f0:e9:91:1d:13:5b:
0d:86:d3:ed:41:47:65:bf:e8:47:fc:a9:6f:b8:3d:
1e:3a:bb:73:57:87:bc:a2:e8:02:73:00:4c:dc:69:
f7:82:8a:c9:f4:51:0b:a4:45:19:eb:d4:27:b5:41:
e5:5d:28:8d:a7:d5:e1:c2:eb:df:1b:b3:60:ab:5a:
55:3b:b1:17:83:9e:e0:73:f2:08:bd:69:16:3d:4d:
26:23:68:de:9a:48:7a:0e:fb:95:ed:44:8e:53:e3:
ed:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:16:51:B9:AE:55:A1:57:98:E9:B6:F3:60:34:7F:DB:C0:2B:05:2E
X509v3 Authority Key Identifier:
keyid:3C:92:19:DA:C3:58:49:86:E7:8B:41:DC:9F:FB:62:26:23:B4:AC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a1:39:5d:fe:e0:a8:81:b8:8a:02:25:b5:11:b7:00:f2:a3:
d0:4b:77:04:c7:94:10:8c:f7:79:81:99:13:28:08:16:e9:42:
60:08:89:fe:65:27:6e:38:55:9f:bf:d8:34:71:1a:85:dd:a8:
13:04:2f:a2:d8:a2:51:d7:74:62:b1:49:df:39:e0:ed:7f:ab:
d0:36:0e:12:6f:33:30:a9:12:e9:23:32:3a:f0:2e:df:a5:bf:
b5:76:49:d3:03:e6:9e:57:ec:11:e2:92:1c:5d:17:0c:9a:ab:
24:26:05:15:02:73:60:e3:d2:26:1d:e2:2d:45:4a:be:24:b5:
5a:4d:1f:9d:10:aa:1d:a7:fc:be:2c:70:a9:b5:c7:30:19:70:
d2:19:d1:58:7b:e8:14:3f:c7:2f:db:4e:38:99:14:e6:ed:8a:
f9:aa:4f:28:4c:3b:63:11:7c:60:3f:35:84:62:76:79:fd:0e:
e3:3e:c6:28:1c:6e:1a:7a:67:f5:73:cd:70:f5:62:f5:96:66:
92:3a:48:19:9e:9d:50:34:03:e5:d2:57:b0:f8:f4:66:27:bb:
59:29:9e:cf:8d:76:41:28:27:ef:17:08:e8:09:19:4d:86:db:
4c:68:41:0c:e2:94:ba:67:fd:46:88:e2:cd:07:0b:33:8d:7b:
69:d6:5f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:23:00 2025 by rpki-client