Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
File: pjx_KbiD9LPCQ22WPchTKhpjTMo.mft (raw, json)
Hash identifier: +DO6TDcJivfuH4YeGjuKNiTj3E2RU9lSPsEj0XY7FcQ=
Subject key identifier: 4A:2C:13:20:7B:9D:5B:3C:A2:7B:64:A4:37:38:02:34:B7:3D:4E:9F
Authority key identifier: A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
Certificate issuer: /CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Certificate serial: 0194BBCECE655F89C1359D5A42E42C491FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: pjx_KbiD9LPCQ22WPchTKhpjTMo.crl (hash: 0vpU962xejRK3/DYP9zg/6itl8OG37mFIsvEXTS1aBw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ce:65:5f:89:c1:35:9d:5a:42:e4:2c:49:1f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=4a2c13207b9d5b3ca27b64a437380234b73d4e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:50:be:4e:1d:ae:62:56:30:2d:c9:84:c6:04:
ae:5f:a4:6e:b9:e6:26:16:e5:61:25:d8:4f:2a:8b:
f2:18:c0:b7:85:08:e7:0e:17:49:66:1e:1f:b5:63:
4d:9b:ee:24:99:cf:fa:2a:00:03:95:26:bb:02:fe:
e8:dc:a5:9d:dc:58:d8:d1:2d:af:f7:a4:43:5e:97:
1c:1c:3b:45:67:fc:48:28:c9:10:38:4d:01:0c:c8:
53:27:6f:3e:25:57:ad:bd:60:06:5c:34:ee:dd:ac:
5f:8c:6b:a6:2c:33:5a:a8:43:a4:8d:12:ff:bc:fe:
13:72:68:c2:c8:60:64:0f:12:37:5a:cf:be:ea:b0:
66:f4:c7:f8:9f:b6:c5:25:df:6d:7e:e9:5b:f8:a4:
b0:32:d8:95:8c:54:2e:5c:66:77:8e:70:82:d2:ac:
21:45:18:0b:bc:00:ef:21:c6:8a:f8:bf:62:c9:e2:
3f:f0:8f:6a:ec:59:49:55:c2:22:29:5b:ae:29:43:
fc:34:9a:85:b0:00:59:64:a7:ab:aa:48:df:a9:e0:
de:44:23:a7:01:21:3e:bf:16:fa:c0:49:6c:64:eb:
b8:24:a3:0a:cb:1e:bf:4d:4b:a6:b9:4c:87:c5:54:
ad:bb:97:69:71:77:2e:65:4e:10:1c:0c:1b:94:5f:
8b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2C:13:20:7B:9D:5B:3C:A2:7B:64:A4:37:38:02:34:B7:3D:4E:9F
X509v3 Authority Key Identifier:
keyid:A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:88:c1:c2:99:0e:45:c2:86:27:a3:c7:8c:f4:c9:90:dc:a0:
23:f4:64:2d:ca:5e:8a:3e:ef:49:df:fc:f8:6b:1a:4d:bf:fb:
25:91:36:6f:39:f1:a5:26:ba:c9:12:d8:96:0b:52:81:79:09:
46:f3:6b:47:5c:8d:59:3c:0b:b2:8d:85:99:4f:a6:94:10:a5:
76:9e:9e:cc:2d:d2:e7:37:29:96:a0:47:75:f8:b9:4e:a8:23:
b4:57:8a:de:4a:fb:db:bb:c0:bf:59:97:ce:0d:95:7b:ab:dd:
5f:59:46:be:cd:48:25:24:ae:af:db:cb:03:92:67:00:ee:38:
64:77:f8:4a:6a:d5:1a:aa:e6:6a:3d:a5:98:53:22:2c:f9:b9:
40:5c:f7:04:a7:86:ca:72:c8:2b:e6:7c:c5:a1:6d:cc:67:6f:
6d:e3:40:34:2b:2b:25:7c:09:88:12:1e:24:17:13:40:0b:70:
7b:4f:76:3d:a5:91:87:f9:e5:3f:38:7e:58:8c:49:41:7b:98:
24:73:ee:16:e3:e3:fa:f1:9f:f9:c5:06:d8:9f:d2:46:84:a9:
3d:62:b3:cc:33:bd:b8:bf:b5:5c:a9:12:0b:95:86:e3:10:50:
12:f4:a9:45:84:95:06:43:85:ea:b7:f0:83:91:00:1d:65:f6:
33:f3:fe:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:18 2025 by rpki-client