Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
File: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft (raw, json)
Hash identifier: LN3W20V+ZROeW5HshYauHu+mr75MI1DXp6hZCNulBDo=
Subject key identifier: 9F:48:89:04:BD:9C:38:E6:8A:6C:D1:3A:C6:94:8E:14:F4:7E:C5:26
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Certificate issuer: /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial: 0194BD17B5D685881FD33668C359D361741C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
Manifest number: 09AD
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: E8EItKN2__9iKd7VUUHBehRVQCo.roa (hash: mIn23TrAWNsxopm3nGDSwuz19rtPaaB79Dzo0Qrhuqk=)
2: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl (hash: VWP+MpNKgpdACTnYv5pED4m+RQI3bZVGg8POE4pFrBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b5:d6:85:88:1f:d3:36:68:c3:59:d3:61:74:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=9f488904bd9c38e68a6cd13ac6948e14f47ec526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d6:5a:f5:c4:b6:49:6e:b5:af:8d:89:40:c8:
22:02:88:b3:07:f8:6e:87:30:c9:25:90:62:d7:f8:
d2:33:2c:f7:ca:56:a1:5c:3f:a9:0c:5f:16:6b:07:
09:f0:8c:d4:ce:31:0c:40:38:5c:be:e4:6a:18:98:
61:54:c3:51:9e:1f:8c:51:46:5f:05:2e:3b:52:1a:
0c:94:0d:f6:e0:76:1e:8d:a7:2c:68:29:0c:78:63:
22:36:2f:6d:1e:15:0a:b2:69:1a:8d:a7:45:b3:cd:
6b:c0:b3:93:93:82:8b:b2:51:b7:4f:1f:44:9d:bb:
e8:cf:be:8a:d0:98:89:cd:c9:f3:f2:25:5a:22:a4:
51:12:0b:7c:2a:94:6c:45:e8:2c:be:be:eb:15:d2:
a8:8f:b0:58:be:2b:15:2c:af:79:e3:0b:e4:cb:b4:
8a:08:ce:35:a0:4e:60:e6:38:97:5a:ca:d0:8c:d7:
52:ba:45:d8:31:d3:80:1e:b5:e8:1a:17:45:ce:48:
f0:35:0a:e2:84:cd:7b:a6:50:b2:c1:9a:03:89:f2:
2f:37:55:ad:cc:db:34:09:c6:e9:2d:80:c1:6b:2d:
2f:81:e8:aa:53:84:2e:e0:a5:7a:1a:82:0d:ad:56:
af:20:96:38:d2:ac:32:f0:5c:70:a2:18:af:0c:c2:
4a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:48:89:04:BD:9C:38:E6:8A:6C:D1:3A:C6:94:8E:14:F4:7E:C5:26
X509v3 Authority Key Identifier:
keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:7c:e9:00:3d:5a:9f:a6:07:30:66:55:5b:2e:ac:12:a4:63:
4f:fe:4b:d2:ff:70:e8:64:ec:a4:7c:6a:6b:0c:9e:c5:84:c2:
6e:0f:57:4a:6c:d9:ec:63:55:c3:19:7d:29:5e:e1:80:41:c8:
fb:93:eb:49:f7:c0:19:0c:d2:32:8d:89:86:ff:97:04:86:f3:
c6:1a:d8:87:c9:20:dd:13:e8:1f:ae:88:6f:53:d1:41:05:8c:
e2:bd:ec:62:e4:2c:cf:9b:5f:1c:3a:62:9e:85:17:f7:98:45:
42:c2:8b:22:ee:93:32:a8:c7:f4:ad:d3:6a:de:cf:41:67:a1:
5c:2c:8e:28:d0:f4:c0:c8:f6:ce:33:ea:25:6b:f5:28:b1:79:
7b:0d:ff:32:24:f9:5e:71:bf:d7:5a:e9:09:d7:18:41:9b:96:
f5:55:44:33:43:7d:01:64:71:a1:57:7a:f7:f9:a2:28:dd:06:
ad:59:38:73:78:37:31:86:53:aa:92:85:eb:97:19:42:9d:c5:
86:c3:3b:c0:5f:9f:74:d2:b1:0d:df:f8:a9:ff:16:d6:23:19:
44:fa:fb:fd:84:fb:14:3d:5b:45:4e:c0:b2:76:15:ad:99:ad:
92:da:fa:23:00:89:7d:f9:f9:c3:34:33:b4:f8:98:4c:86:2b:
33:9b:0d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:46 2025 by rpki-client