Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
File: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft (raw, json)
Hash identifier: onIkxgZw7d2PNuWCDuPso+69f/keeL+qgJiIAYMokkU=
Subject key identifier: 55:AF:AE:BA:A3:32:E9:74:02:74:FD:6C:6D:5A:49:0F:E7:F7:01:E1
Authority key identifier: A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
Certificate issuer: /CN=a4917d885b675672fc8efb89d6e14e23675052d9
Certificate serial: 0194BBCE530E58D3A6AE2255A4FC5034FF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
Manifest number: 06A7
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl (hash: A/XxE65FnD/G2xAt+wugdRiTrXAS5zVl6QbCKjBZcjY=)
2: prQrRYa7iRxtGVoZ-fOmbS6yQ1I.roa (hash: tnsyAKD0R4WdSHhtE37JrhpYKkCqh9rly9GAA3vquY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:53:0e:58:d3:a6:ae:22:55:a4:fc:50:34:ff:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4917d885b675672fc8efb89d6e14e23675052d9
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=55afaebaa332e9740274fd6c6d5a490fe7f701e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fe:99:4e:87:f7:b6:64:35:5a:fa:3a:da:b9:
1a:23:c3:cf:4f:ff:85:98:fe:ab:bc:7d:75:08:68:
f9:98:6e:b1:5c:e7:2c:12:d6:27:41:d4:2b:10:e1:
53:05:61:db:a6:8c:d9:41:ca:6f:f1:e1:cf:7f:3f:
40:0b:7b:c4:88:1e:11:34:79:f3:62:cc:03:99:7b:
8e:04:c1:18:f9:d6:83:27:e5:eb:01:83:27:8f:84:
51:d6:82:fb:8c:76:8c:c8:91:d7:d4:2e:ca:46:19:
a0:71:ed:1a:fb:03:61:09:db:04:6e:be:a2:bd:5f:
c0:eb:9e:ab:76:7e:eb:f4:83:2f:14:53:5d:74:99:
7d:05:bc:92:8b:47:01:24:95:89:3e:84:21:63:04:
c5:89:da:e0:83:5e:e5:a0:e4:9c:15:9b:bb:28:f6:
3e:25:a9:0f:26:8c:6b:c0:ec:ee:49:dc:4b:08:ee:
58:3c:ac:eb:0b:2f:3a:d4:4e:8e:9b:de:1f:67:d6:
5e:48:44:94:04:95:f1:a2:7f:d1:f0:7e:21:3f:59:
9b:85:c3:0e:23:ab:7e:16:ff:f4:c1:d8:14:c1:cf:
dd:43:64:a2:c9:e6:67:ff:4c:88:78:89:c8:51:8b:
ea:f2:d2:24:54:66:f9:88:87:a2:b3:0c:a9:12:31:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AF:AE:BA:A3:32:E9:74:02:74:FD:6C:6D:5A:49:0F:E7:F7:01:E1
X509v3 Authority Key Identifier:
keyid:A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:aa:9d:8e:16:d1:d6:6b:b7:32:10:f0:4a:fb:83:97:b2:85:
da:83:a4:0f:73:cb:83:52:e5:5f:0f:44:23:2a:6a:fc:15:6d:
fe:54:be:59:b2:1c:94:50:33:67:32:c8:73:97:b3:6e:5e:28:
82:21:af:20:0e:37:b2:6f:4d:63:3e:d0:e3:12:54:dd:5b:b4:
30:df:e1:09:10:57:04:bd:39:27:69:2e:29:71:92:51:40:c1:
be:1e:8d:8b:6e:3d:41:4c:36:0b:4a:13:73:2e:e9:4d:0e:80:
e1:8f:2a:df:e1:fc:31:aa:c1:1f:d4:54:6d:b1:67:2f:46:e5:
5e:79:bb:97:0d:11:30:ae:9a:83:da:ce:3c:f9:cc:61:76:62:
de:d3:d8:19:36:d9:91:f6:01:d7:23:36:69:38:64:89:43:ff:
1b:fb:89:20:19:81:b4:48:39:94:40:ec:08:45:03:e1:23:0b:
5b:d7:b3:e5:6f:c2:e2:d5:a3:11:0f:de:1b:39:a2:67:0a:9c:
14:e6:d6:e9:4f:96:ed:82:36:19:7d:a7:b5:45:68:4e:ed:a1:
1d:fe:c5:f7:1f:1a:43:f3:6c:89:0a:3a:9d:a7:e1:bc:4e:a3:
7a:64:d5:80:c9:61:7b:21:a8:38:61:34:3a:5e:ee:22:04:24:
c1:7c:08:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:49 2025 by rpki-client