Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
File: pFIjl-wNFJkgGvD6nqKgS31c-mo.mft (raw, json)
Hash identifier: FFYspISWIeVCqHZfUeN+CcK2dO7GO+wQb0EMdhREWSk=
Subject key identifier: 5A:94:CC:05:F1:A4:E1:9A:12:D1:7D:5F:10:84:F9:6B:10:49:B6:E1
Authority key identifier: A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
Certificate issuer: /CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Certificate serial: 0194BC3C233DC67987B5BBF14997035BFF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
Manifest number: 0112
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: 3zuNm_rolfFNztpZzjMDGM_7wOs.roa (hash: 6DVW+skCd5kOszHOwiH8v1Z8QoCm6yJygVbagRePo+4=)
2: pFIjl-wNFJkgGvD6nqKgS31c-mo.crl (hash: 38dE0oGAKGE3C6d7H4SGvrp4O2+2tkSawTeWPslbQNM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:23:3d:c6:79:87:b5:bb:f1:49:97:03:5b:ff:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=5a94cc05f1a4e19a12d17d5f1084f96b1049b6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:c4:16:60:6d:ed:f6:41:d4:95:fa:9d:a7:
39:d9:1a:77:06:b8:ae:6b:8c:ae:b7:12:86:13:24:
87:15:16:f0:39:f8:f1:7d:c7:e7:e2:3c:54:16:9e:
7a:a5:7f:29:f2:e4:41:17:f3:c9:fe:b1:d3:e0:9c:
02:f2:4d:5e:9e:91:7b:fb:61:62:9a:7c:4c:df:40:
f6:46:8c:4d:3d:1d:01:eb:b8:e0:f5:61:da:f5:19:
37:d3:9d:b3:c9:e4:10:3a:a7:7a:fa:d5:ed:19:08:
4c:87:5b:b7:f0:b4:61:56:33:8a:5d:f4:16:1d:3e:
be:c9:81:0a:7b:0f:0c:de:3a:f7:9a:54:00:1f:1f:
bb:ce:0f:5b:16:f2:a1:22:cd:a8:61:de:b2:57:90:
a1:2d:6d:53:f3:e1:6b:4c:81:08:5e:e0:50:e8:91:
a5:9a:76:3c:54:ec:1e:e5:33:c0:93:5b:2d:2c:c6:
50:e1:ce:98:82:85:76:15:86:31:f0:c2:10:20:30:
88:b4:db:85:04:eb:2b:3a:7f:cf:e7:1f:56:8b:06:
f9:5a:bb:f1:c5:9b:45:b5:24:f6:9c:86:90:a5:74:
a4:de:c5:45:50:32:08:c9:a0:03:64:a6:eb:69:06:
d1:8a:4c:fb:e8:91:3b:3d:bb:34:fd:31:50:0e:5a:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:94:CC:05:F1:A4:E1:9A:12:D1:7D:5F:10:84:F9:6B:10:49:B6:E1
X509v3 Authority Key Identifier:
keyid:A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:78:7c:92:1a:a8:6c:e3:aa:6d:ad:c5:bb:c0:cb:ff:f0:8e:
bd:c9:4a:7f:4b:55:6d:2d:36:1c:fc:f1:2a:fe:89:ba:07:86:
ea:c2:06:3e:aa:3e:96:ac:c3:d5:5f:6a:8d:cb:a4:92:1d:67:
72:9c:ee:1a:8f:58:3b:49:8d:a1:0d:af:bc:4e:77:03:ff:86:
ab:a7:10:6b:fd:10:1e:7b:bf:36:7f:d6:92:61:09:ea:17:d0:
cb:a8:0e:56:c8:c9:94:26:71:95:6f:73:81:3e:16:12:6f:8a:
c3:fd:b6:db:08:3e:65:ad:3e:49:eb:5b:30:28:18:92:a1:5d:
8b:83:2f:00:db:7d:23:84:71:70:e7:9e:af:d1:9e:72:62:4e:
6e:c9:a9:03:4e:1c:6f:0b:c9:e5:eb:6f:b1:c8:b3:d8:91:64:
5e:c7:30:9c:ec:1c:2f:3c:09:d9:6f:c9:b7:9e:d4:f6:5f:ce:
fc:38:3a:58:58:47:03:85:6a:82:d1:a1:b6:f1:d5:9a:46:0b:
bd:4f:4b:9e:f7:de:8c:d9:8d:53:d7:8c:db:48:58:25:46:43:
2e:f4:b9:31:55:9b:ef:73:ba:f7:d8:ca:ef:74:c3:07:75:b8:
36:66:d9:90:df:57:43:e1:4e:eb:56:06:02:0c:64:b3:ab:ba:
39:43:0c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:25:34 2025 by rpki-client