Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
File: pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json)
Hash identifier: EbeV6WjlzBhOSXHH2ayJ4pMMqVJgWm+PNyA9pJhph+g=
Subject key identifier: 2F:06:6F:DE:E0:88:11:B0:F0:DC:CB:53:EB:7C:C0:22:2E:71:04:C1
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 0194BD8532358F38D565AC64C3C219AA8125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: BC9YAXepVvBWb0SpmFLnGsiu_0U.roa (hash: aM6wNA8MxfdfUppHaLmRAdGV0kYIIUvP9jpBwEyPjpo=)
2: _XoxeAXZ_0NOSgriyXyYImr8sp4.roa (hash: 95zz7gDtzubb5S5SZ2yFR8QhWyDigdhIQZqm7xDPB7s=)
3: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: sZSgV+3Lr3wNMBKbyVE8cWm1OmKjOkdKIhrKB3EjlMY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:32:35:8f:38:d5:65:ac:64:c3:c2:19:aa:81:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=2f066fdee08811b0f0dccb53eb7cc0222e7104c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:d0:2e:04:5e:97:c7:2c:1c:6a:8e:3c:85:
42:93:c5:fc:d2:dc:e2:9a:47:89:2b:66:49:c6:d1:
13:38:70:fb:52:a6:d5:94:20:91:d7:b6:fe:bc:28:
02:3a:32:22:09:e8:77:5f:ce:9d:0b:62:30:20:39:
ec:03:b8:b3:0e:44:b5:61:04:ba:85:df:4d:4f:66:
ad:ae:82:aa:34:9a:e9:50:f6:ee:df:6b:48:8f:9e:
45:b1:70:05:db:9a:5b:b9:62:34:60:a3:59:8e:f5:
2a:7b:4f:7f:02:55:eb:84:58:8b:1d:40:a8:96:5d:
35:04:98:fe:d1:fa:41:88:ae:20:69:0b:05:5b:76:
04:d5:3c:e5:a3:79:26:cc:95:f6:2f:e7:a9:4c:d5:
90:97:a0:4e:b2:86:03:13:ac:58:d9:0e:e5:6d:8c:
36:38:42:b1:ad:5b:3d:6b:3e:45:72:41:e1:1e:a2:
2b:2e:90:5a:b5:2d:a2:45:4b:b5:ca:0f:f8:1a:cf:
f6:cb:50:b3:84:92:e7:32:da:55:2f:b2:a6:03:75:
3f:ad:08:9c:d5:fa:f5:a4:37:8a:8a:6b:e6:81:6e:
9c:9d:82:9b:86:ae:2d:ac:65:3a:29:83:ad:ad:6d:
be:49:c9:e3:ee:29:fc:27:d9:35:54:43:43:3c:99:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:06:6F:DE:E0:88:11:B0:F0:DC:CB:53:EB:7C:C0:22:2E:71:04:C1
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:83:54:91:8c:74:00:fe:a6:35:30:32:82:2b:54:e2:ee:9e:
1a:f1:0c:52:b0:84:0a:b9:c4:36:6b:4f:d6:de:f1:76:44:03:
ff:e6:86:bf:77:d4:8d:fb:f0:80:d5:6d:98:dd:c6:8e:f1:7d:
06:c5:2b:77:00:1a:53:9d:fa:ac:83:5f:90:8b:bf:29:68:4e:
d7:40:a7:cc:65:54:64:08:68:88:60:d3:da:92:2f:b2:a3:a8:
12:14:d2:ff:eb:32:73:76:cc:d7:cc:7b:b9:fd:28:8c:c3:ae:
32:0a:cb:e6:f3:c1:3b:1a:d5:62:46:39:68:a6:ed:50:8e:46:
1b:59:d2:77:0d:8e:d3:79:99:ff:c2:c1:83:4c:e6:90:fa:05:
76:49:e2:d4:95:d1:62:73:03:f8:e8:9b:14:75:0d:d5:14:6a:
00:fa:d0:0f:9e:93:26:38:fc:45:af:08:eb:5e:46:60:c2:e0:
07:5f:4f:68:6a:da:07:97:69:3d:b7:0f:45:c9:06:b0:98:e7:
d8:75:f8:bd:eb:95:6e:e9:ae:1d:25:f0:92:4a:17:6b:96:7c:
7e:c8:da:50:42:fb:85:b0:ef:bd:28:f2:c0:c8:62:e0:a9:92:
e9:3a:9f:58:1a:56:7a:9f:ae:d0:af:91:6a:40:30:0b:ed:8d:
d2:39:88:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:55 2025 by rpki-client