Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
File: pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft (raw, json)
Hash identifier: Gh3Ly2N84S+5uuA0aHGm5bY7Z8p34dkaqDE7WLPHNd0=
Subject key identifier: 77:BD:32:AA:A5:D0:81:72:4D:AB:DB:FC:45:25:2E:B4:CB:F1:EA:B2
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial: 0194BBCDE7F58403CE47E3F6E9DC46D1A97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: SMwI-Rnmis2eePW_F_GRyzsQVwc.roa (hash: tdRLxodAQZWX8dKW9xJOxhOQI+ocU2apdjVD9eeaSWc=)
2: jHM5InJQV_3L354P4EcDRlzLqQg.roa (hash: YagEFBVsay86X4xOyFCoWFnHQNGB7P3cKZT9Ojcer8U=)
3: p60T_9BRDnROvd9U0mIYWu3JYG4.roa (hash: CASmZCb6AimtCFSZaoN9/6dcpSXZ9rOo6eQFeAX0PBw=)
4: pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl (hash: rmpdXp+5oGihuMIawPdOzf8wk92gEvc8Txk3W1853is=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e7:f5:84:03:ce:47:e3:f6:e9:dc:46:d1:a9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=77bd32aaa5d081724dabdbfc45252eb4cbf1eab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a3:95:e1:5d:d4:aa:08:1c:40:05:31:3c:5c:
9e:03:78:72:59:3e:3a:3f:af:4f:f8:8a:0d:fe:30:
f0:3b:84:87:90:46:15:88:96:c7:37:f1:9b:54:27:
81:0a:9f:b9:33:a1:db:b7:28:21:1b:a2:1e:60:1a:
b1:90:78:59:03:f6:d0:fc:f7:90:24:98:7d:6b:52:
4a:d0:ee:e3:50:0a:0c:2d:c0:15:fd:fe:46:09:ee:
d0:3e:50:07:8a:00:c3:aa:8a:8d:a5:ec:65:7a:fa:
bb:07:10:ee:3e:9d:30:4a:e7:fd:48:8b:7a:5b:4c:
92:4f:0c:c8:f3:17:64:79:20:0e:34:d2:51:32:e8:
c4:b6:8d:8c:04:e2:b9:95:6e:70:eb:6b:8d:2c:21:
b6:5b:d2:9a:52:a7:1d:ee:45:92:58:50:db:2e:7c:
31:6d:1d:6e:bc:a6:f6:79:77:5f:c1:b4:6e:38:92:
bd:10:db:a6:1f:92:4a:26:45:23:17:29:fe:28:98:
d7:ea:79:71:b4:1f:a7:73:85:f8:fc:21:a0:1f:17:
b4:e2:d5:8c:95:7b:74:b4:f5:c6:93:5e:a8:db:14:
70:54:46:a1:98:59:7d:3e:a8:12:b4:2d:be:ee:66:
8f:9d:11:04:86:c7:97:66:02:93:1c:c4:e0:2a:ae:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BD:32:AA:A5:D0:81:72:4D:AB:DB:FC:45:25:2E:B4:CB:F1:EA:B2
X509v3 Authority Key Identifier:
keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f4:d5:c7:35:ee:dd:bd:98:1a:f2:41:42:0a:88:8b:e7:3b:
d5:a5:45:91:03:a3:9e:5d:21:47:4d:45:0f:a0:8c:23:32:d7:
a8:1e:d5:89:18:24:7d:4c:c9:51:52:c6:54:56:d4:93:c6:b7:
e8:06:70:69:cf:03:cb:6d:dd:16:bc:fd:fd:06:f9:6b:00:bc:
75:d5:07:f2:21:5d:1e:85:40:c3:39:ae:a2:41:47:72:dd:12:
36:4f:b7:61:ca:4a:cf:5b:ce:00:be:d7:9d:c9:a1:e6:74:b1:
e3:7c:6d:99:04:42:92:5b:ce:92:47:fc:e3:73:8a:16:8c:9d:
3d:2a:a3:3e:03:2f:08:8d:25:ea:0e:e0:e6:72:39:3c:87:e7:
25:75:fd:82:d2:f9:98:92:fd:51:fc:e8:26:1a:5d:ab:e4:d1:
b1:22:08:af:59:6a:64:62:29:2d:13:5d:58:50:2e:e6:eb:c4:
e1:2e:54:bb:95:38:65:44:aa:5d:9f:35:63:06:1e:57:9e:5c:
00:6f:8c:20:67:50:85:37:e6:df:9f:61:9b:6d:48:4b:95:98:
88:06:a9:ce:72:4e:b6:aa:a1:63:29:f4:5e:f0:7b:00:97:32:
f8:27:83:8b:41:1c:96:12:90:44:ab:ce:fa:b4:54:4b:00:06:
d7:e9:2f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:31 2025 by rpki-client