Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
File: pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft (raw, json)
Hash identifier: sIZRU+puTRDBW1L7i11ZkX/9tLqhToUqqwFR6hC+35g=
Subject key identifier: 2E:CB:D1:2B:A0:49:43:FC:1E:F2:D3:63:B9:BF:60:AA:C5:9E:FA:B7
Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
Certificate issuer: /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Certificate serial: 0194BC3CA6CC9551777FF2B391487F2D3D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:18 +0000
Manifest this update: Fri 31 Jan 2025 12:01:18 +0000
Manifest next update: Sat 01 Feb 2025 12:01:18 +0000
Files and hashes: 1: 1-y3mku53CxfcZTDAjLzjGLNjKug.roa (hash: tkrqALFJZS9oKOrZg8mNnpPdOdg26RzEKwv9Z2r59k4=)
2: pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl (hash: IZ6DUD0Fi3AinWKv5vDxaslCWOvcFO+Ar9Ug6RdOXds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a6:cc:95:51:77:7f:f2:b3:91:48:7f:2d:3d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Validity
Not Before: Jan 31 12:01:18 2025 GMT
Not After : Feb 1 12:01:18 2025 GMT
Subject: CN=2ecbd12ba04943fc1ef2d363b9bf60aac59efab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bd:50:05:01:e6:cd:df:0f:68:f1:62:8f:a7:
52:30:ca:59:cd:bf:a1:66:9f:6c:15:12:7c:ff:77:
13:d8:0e:83:f7:ac:17:d5:63:5d:77:f8:45:e9:12:
f3:0f:b4:21:c0:31:f1:7a:dc:69:06:b5:d6:2c:87:
99:a9:69:55:b3:8f:2b:4e:cf:91:2f:5e:f1:b1:c7:
b1:40:01:b8:32:09:3f:01:b2:06:05:1c:27:a2:60:
71:ea:c4:ce:8a:79:a7:60:ed:61:fb:3f:94:e9:33:
e3:bc:b3:09:59:a7:56:45:fa:d4:85:f8:2f:3c:a7:
1b:c1:ef:d0:c8:01:71:39:de:83:bf:39:73:da:d1:
d6:4c:ad:6f:55:63:b3:52:8a:67:48:86:37:fe:4a:
cb:9d:38:de:87:99:fc:b2:b1:6d:2a:59:b2:77:58:
f7:6a:24:e8:30:16:30:8a:62:a0:45:c0:82:35:74:
e0:43:b5:52:c8:9f:0a:f7:4b:91:a4:3c:d6:a7:ff:
f1:9c:15:2c:1c:61:bf:54:b2:20:46:76:e5:21:07:
39:b5:d0:6a:d9:82:61:cc:92:ee:72:0c:f1:86:f0:
4f:41:14:f2:45:7b:8f:f2:10:48:d1:be:22:19:bb:
cc:75:06:48:78:99:ff:39:dd:73:89:7c:fb:22:ed:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CB:D1:2B:A0:49:43:FC:1E:F2:D3:63:B9:BF:60:AA:C5:9E:FA:B7
X509v3 Authority Key Identifier:
keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7a:2a:ef:de:b4:4d:81:f2:7f:ec:68:6b:b0:1f:f2:43:70:
18:81:bf:5e:f0:24:25:d5:ce:44:e9:6d:42:c9:34:e0:88:64:
f4:b9:4f:30:41:c6:99:75:c5:08:57:7f:1f:43:02:2a:93:de:
d6:3f:ca:29:c9:52:da:ad:ab:fc:8e:70:01:f8:8b:c8:cd:6b:
a3:0e:90:31:89:6a:9c:1f:8d:fe:14:50:56:31:ec:29:87:8f:
e1:21:5e:fd:9b:a2:91:bd:3c:97:9a:0f:dd:15:00:f0:30:bd:
8f:b0:cc:b0:9a:17:6e:62:26:62:04:03:3f:e3:96:98:6f:91:
42:4b:b1:06:e9:d6:f6:8c:3d:52:3c:4c:c6:78:c0:f4:14:ed:
2a:63:1b:c9:2b:57:30:e1:36:85:53:17:a5:e1:30:45:ed:30:
2b:3e:47:f1:8e:ba:39:de:b0:d8:84:71:3d:0b:27:76:bd:9e:
99:99:94:2d:b4:01:df:15:7d:83:b9:10:af:c4:53:28:e5:ae:
80:50:94:15:61:7c:0e:79:24:2c:e9:0f:f6:92:45:98:7d:47:
d0:50:ed:36:a6:2f:63:fe:12:dc:f4:6c:60:e1:59:66:7d:d9:
70:41:d2:a7:11:1f:08:86:d3:40:61:07:f4:15:2f:55:21:9b:
5d:58:d4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:14 2025 by rpki-client