Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier: LXkWPLoP2eTciyP4yY3nOD1SxeIvRPiYYz5/poO834o=
Subject key identifier: F9:96:C0:06:4B:95:32:5F:21:DC:CA:34:12:71:B5:CF:59:D8:B3:5A
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 0194BC72A3997E1C25C65EE036B5BD3D4AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number: 0642
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: LN9Y4VYuBPHcqnOfi1whRTolirA.roa (hash: oKsBnnzz1/szS+noOPKG/sq6k5F0SOG+hrVgu4395L0=)
2: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: GccAVUTWWx5iZDADQYVjuk40z7Fbjoet7dzBSnVXqSk=)
3: aOjeQ_LFlj3ColO7fwm2y03noI8.roa (hash: ZPkI6QIM1mrIPNFFrmXcy/CvfmDUl8kYYI0d126tg6Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a3:99:7e:1c:25:c6:5e:e0:36:b5:bd:3d:4a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=f996c0064b95325f21dcca341271b5cf59d8b35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:54:98:a8:6a:f4:4b:05:18:8e:ea:01:db:
87:09:c4:54:1d:40:19:9f:50:7d:c5:84:08:48:3c:
46:ed:07:21:1c:a9:99:53:30:68:20:48:14:f1:f7:
74:44:51:f5:79:17:91:04:27:18:be:83:e6:d4:74:
fe:86:6b:3d:ed:44:f0:92:1f:1a:2b:d3:59:d9:4d:
af:a5:eb:65:ff:57:c7:bf:01:bf:cd:42:d3:10:85:
92:28:70:50:d0:a5:61:5a:9a:ed:fc:80:d0:66:cc:
a0:68:05:21:ec:88:c4:f3:0d:af:6d:70:d9:c3:6f:
b4:35:a6:e4:aa:03:2e:57:d8:ce:62:b5:0e:f4:5a:
d5:b5:46:37:57:85:4e:d0:75:e2:7e:6f:19:14:03:
40:3e:24:73:20:48:c6:d0:0c:b7:94:af:ec:b4:0e:
38:4d:14:bc:9c:fc:3a:38:5f:66:36:8d:c6:47:2c:
db:76:87:90:08:c5:7d:db:ea:16:af:a0:73:b8:31:
c2:00:db:f4:ad:36:96:21:c4:f6:98:51:b6:ef:14:
ec:d3:5c:7d:d4:46:af:46:b6:91:17:e8:6d:66:e0:
fe:eb:4e:e5:b4:22:16:d6:3f:3f:98:53:35:2b:0e:
23:53:de:97:59:61:60:88:16:2f:79:78:6d:9d:dd:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:96:C0:06:4B:95:32:5F:21:DC:CA:34:12:71:B5:CF:59:D8:B3:5A
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9d:e7:c4:8e:d8:fc:7c:ea:e0:eb:a8:cc:a5:51:75:e5:22:
38:38:31:55:40:b9:2c:98:8c:4c:27:d4:bc:94:b7:7b:85:48:
3e:c2:e5:13:29:6c:04:21:21:05:6b:c7:ec:94:ea:07:20:40:
44:c8:76:d2:fd:1c:c5:8b:e4:ae:35:f1:4f:b9:d0:bd:f0:c4:
24:f5:ab:69:4d:8c:2c:06:4e:44:96:30:81:6b:e2:84:13:cb:
e1:45:1e:db:b2:22:4e:f9:31:33:e1:59:24:58:81:b1:e0:71:
34:cc:89:9f:00:96:5f:6a:8b:18:1f:ed:02:5d:af:51:2a:f1:
19:8b:2e:91:c2:f0:a0:12:20:c3:16:a4:a9:0a:42:03:c4:61:
ca:aa:fa:c2:d3:97:05:03:5a:95:95:38:22:40:97:70:ec:c0:
d3:c1:be:ae:a2:9f:09:fa:ea:0c:42:c4:41:c6:2b:14:29:b4:
7d:44:e9:e5:db:72:5e:90:bf:0e:33:b6:37:3f:6b:06:4e:05:
1a:0c:2e:48:6e:1d:d6:97:95:08:07:3e:ca:14:aa:d9:82:65:
f8:c5:26:8e:f7:37:ec:81:05:45:c5:01:8a:ef:d2:c8:02:f1:
fb:b3:5d:5b:c2:44:60:63:9c:0f:9e:92:25:f5:7f:95:bb:a2:
05:db:2a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:41 2025 by rpki-client