Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
File: PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft (raw, json)
Hash identifier: lJz0Cwp8eOQK9ikuSNUQtcDSamIXjWJeUu1aqT0tzyc=
Subject key identifier: FA:22:4C:A9:F5:E7:68:11:3A:69:11:3D:18:E4:51:1D:DF:1D:6D:73
Authority key identifier: 3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83
Certificate issuer: /CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
Certificate serial: 0194BC3BE4728C957F1A63F4EFC773236AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
Manifest number: 0D6F
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl (hash: s98mxR1ip2mejkqLTiaYO3J+7GimbdpH7x/v1qZC0Eg=)
2: he1zzqscDQVrqbAH6ruuBRGptHQ.roa (hash: pIEmG6D6JQGwEUn6Yp/QlQoXb08gkZ0Iha980hmaQQ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e4:72:8c:95:7f:1a:63:f4:ef:c7:73:23:6a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=fa224ca9f5e768113a69113d18e4511ddf1d6d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:83:6d:8d:e8:4d:aa:12:99:a3:8d:00:44:
37:3f:67:ad:5c:ef:1c:03:28:4e:9a:69:78:02:a2:
9e:96:4d:25:c4:65:3b:0e:6a:c3:67:3a:9b:4b:36:
05:87:f2:63:db:41:02:21:a1:79:ea:a0:23:5e:91:
43:df:a7:8a:1d:24:57:5c:a6:a5:53:66:38:6a:fd:
38:de:f8:81:22:45:d4:57:22:22:4e:38:7e:d8:15:
8d:44:9f:ab:b2:26:0e:42:fa:14:ae:b1:86:1b:e8:
8d:18:43:be:ec:e9:9b:fb:e7:b0:41:83:29:76:9e:
fc:a6:83:5f:5d:d5:53:e1:ac:7e:52:63:2a:05:62:
da:4f:75:2d:11:17:0e:b7:0a:d4:eb:4d:f1:84:98:
c2:35:e7:89:78:ed:42:40:5b:48:82:2c:8b:e8:86:
e7:3f:4b:0d:b4:e4:46:1d:05:41:93:0a:30:96:8c:
f4:f6:e1:ac:7f:19:bf:32:99:b1:91:da:ed:52:a8:
6d:78:49:21:4b:d2:2e:6d:01:15:ce:11:64:39:81:
01:dd:bb:12:82:a7:cd:ef:3c:21:95:31:b3:4e:da:
80:25:de:a8:ce:3f:ef:d8:22:b9:f9:bf:23:e0:06:
5e:6f:31:4f:b3:5f:c5:56:bd:ae:5b:6e:76:7f:d2:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:22:4C:A9:F5:E7:68:11:3A:69:11:3D:18:E4:51:1D:DF:1D:6D:73
X509v3 Authority Key Identifier:
keyid:3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:f8:18:4d:03:e3:a1:86:92:7d:73:4f:dd:72:12:22:2c:8c:
1e:aa:0a:46:54:89:86:4f:a0:66:b7:3e:18:bd:4f:12:5c:9b:
bd:10:c3:59:eb:17:7e:31:cd:82:4e:ce:b2:c2:69:fb:ba:05:
04:ee:90:53:d4:98:74:5d:af:d4:85:cf:ad:22:ec:33:ea:97:
2a:5f:c5:f9:81:56:f0:c1:4c:05:06:5c:84:f3:09:03:09:99:
e0:ae:5e:4a:67:62:f6:dd:da:c7:0e:99:d7:3a:1f:f2:9d:b5:
db:ff:5b:c9:9f:72:c2:7c:9f:0f:95:76:6b:10:80:a2:fd:5f:
60:57:bd:d8:09:c7:8c:5f:01:d3:a8:8c:2b:e3:3c:04:c1:64:
54:82:2e:9b:c4:8d:2a:72:36:59:fa:1e:ab:9b:54:b0:2a:54:
88:1e:ca:13:4c:c2:4a:41:11:8c:7b:b7:d1:8c:c3:0c:6c:b2:
3a:dc:1a:af:ae:ea:c1:19:e1:f7:c7:c4:81:8e:24:9a:8d:a0:
c0:19:d2:1a:99:fd:4c:67:3b:16:76:cb:c5:10:04:29:07:bc:
56:13:bb:02:c1:0f:05:4a:92:20:94:3c:bf:d6:89:95:66:d0:
d1:84:ba:e5:66:de:13:f0:78:f4:ea:fa:88:0d:64:2a:42:96:
e7:42:20:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:01 2025 by rpki-client