Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
File: pJ0uULdziu0KzBoOwv7jAIAlWDg.mft (raw, json)
Hash identifier: p8HcrluH+Y3FmPufsiefIo18k0EtKIofKDlUSwLfIr4=
Subject key identifier: F9:1C:36:80:4B:B8:9E:98:1A:C1:71:44:BC:20:4B:E5:83:25:26:93
Authority key identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
Certificate issuer: /CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Certificate serial: 0194BD17D3B28D0C1736A35409CC366CD4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
Manifest number: 076C
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: cGGNHHL2taAbcfw5rMUB84kQw_k.roa (hash: J56YjCbrct/bNrc5fidg1pLfrEEsu9MaAGzXOMhbxY8=)
2: pJ0uULdziu0KzBoOwv7jAIAlWDg.crl (hash: CM74Hx5MpoxPK1R9MrrSN695u6+r354kq1LhnOjQ4/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d3:b2:8d:0c:17:36:a3:54:09:cc:36:6c:d4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=f91c36804bb89e981ac17144bc204be583252693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:45:20:fb:1c:1e:4f:36:0b:dc:3a:c8:93:
5b:7d:74:38:30:87:4f:ca:6e:91:1f:3a:73:b4:f1:
de:6f:cd:b6:81:de:4e:22:28:a9:d5:ad:ea:c6:3a:
b0:46:18:f6:e3:1f:89:ed:81:94:7d:9c:d2:c7:1c:
f4:6e:8a:fb:c4:72:cb:a8:db:c6:8a:0e:34:af:74:
04:f3:7e:f1:6e:a9:59:7b:37:f2:0a:b0:c8:74:11:
dd:cb:d3:17:70:40:ac:bf:6c:b0:3a:f3:7d:d9:f3:
22:8f:60:ef:f9:9c:63:41:a6:1b:fe:da:2f:72:90:
89:62:77:ac:70:20:2e:5f:06:2c:31:bb:72:52:f3:
e7:0d:db:90:b6:db:c2:96:11:b3:28:05:d3:39:eb:
31:54:d7:1f:d5:94:a0:01:1e:5b:52:e9:6a:f4:11:
7f:e4:63:d0:ab:73:0c:3d:55:65:80:c8:eb:ee:43:
3c:84:aa:6c:d5:64:e3:95:07:c5:c6:dc:db:30:66:
e6:c1:d3:f7:52:38:98:52:62:9b:90:ec:a6:5d:1d:
84:07:9b:b3:be:7f:9c:be:05:1b:73:34:07:82:cc:
c4:cc:87:4a:40:83:9d:c7:49:24:e6:d3:89:5d:a4:
4d:19:2b:e8:dd:10:79:8a:bc:03:bf:84:1c:9d:ac:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1C:36:80:4B:B8:9E:98:1A:C1:71:44:BC:20:4B:E5:83:25:26:93
X509v3 Authority Key Identifier:
keyid:A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a1:32:11:84:b6:a7:a8:21:82:1b:ec:48:e3:87:56:fe:2a:
0e:9b:1d:a5:ea:b2:c3:e4:6a:7a:7c:e4:5b:b5:b4:40:63:12:
c8:46:49:2b:4a:85:9d:aa:83:aa:3b:48:93:7a:6a:4b:b9:18:
c0:34:69:f4:0e:3e:cd:26:9e:6d:db:25:aa:c4:4e:3c:19:0d:
47:4c:43:d7:03:a7:8a:b8:85:45:42:63:ec:0e:3c:7b:16:a1:
f7:d4:02:3c:d9:0d:94:c0:ba:69:d4:24:c3:6a:0f:a6:fd:4c:
f9:6a:d6:e1:d4:5d:f7:5c:3c:15:dd:cf:5c:09:a8:47:ae:dd:
5c:f4:42:95:03:2a:6d:05:45:8f:f0:f8:da:eb:84:e7:d7:4f:
2a:fc:46:48:0d:24:5d:e3:46:d1:cb:28:86:a1:51:29:0b:a6:
cf:47:f3:eb:b0:37:b9:76:bf:b5:03:d0:28:c9:7e:66:ac:aa:
21:f0:d7:bd:f8:e0:7f:87:d3:d0:08:a5:5f:27:ed:33:ce:6f:
d6:8c:b6:f6:03:71:d5:b4:b7:ea:50:2a:05:4b:9c:24:e5:73:
fa:4b:f3:f0:12:67:e2:20:93:53:f6:9c:7a:cf:d7:88:eb:49:
71:12:f9:ed:72:00:a3:b0:eb:cf:cc:0a:a8:96:5a:41:0c:4c:
b8:1f:d7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:18:12 2025 by rpki-client