Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
File: pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json)
Hash identifier: Q3AbtnJkQV0ikZirDTtS1UQ+PUo6wGRrvW9FZl2e1fA=
Subject key identifier: C4:B1:A3:32:16:4F:56:4D:F8:8C:8D:7B:A2:29:D4:69:71:F8:2C:E5
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 0194BCA9A9789EF8DF5640C07676371B9FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
Manifest number: 0BE6
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: XZ2L7tby58uG7r0ttQk5HwT9l8k.roa (hash: oQ6DroqRbFL+VaKJERXvf6dbj57Lt/0NRTKEGy5wXFQ=)
2: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: zu1QXqfEUUhNpwd9a6AaDRCTCOlCFq19rb4IyWmRKig=)
3: s9Phn4LRxq3qJKp5WG1zCsRMWlc.roa (hash: 5LFQTKOZRBYzOCfam8/FRn4XdqXt/6yCH7PjQq7YFwE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a9:78:9e:f8:df:56:40:c0:76:76:37:1b:9f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=c4b1a332164f564df88c8d7ba229d46971f82ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:75:cd:af:3b:41:b3:01:5f:32:83:4b:f5:7d:
1b:ce:97:01:d5:22:04:08:01:22:c6:bb:0a:af:c4:
7e:77:0c:7b:ca:c4:b6:36:b0:6c:3a:ef:c6:70:56:
51:3e:6f:d1:9e:0a:2e:38:ec:a8:5a:b5:2c:24:aa:
5c:5e:ed:f1:5e:b7:c4:53:57:6d:f8:da:45:cc:50:
bb:3d:d7:88:5f:fd:ea:c0:de:22:58:21:a8:eb:da:
ea:b5:3f:b0:92:db:63:ca:67:b4:e2:26:e7:1d:54:
7a:6a:97:d8:5f:ae:12:5f:4c:41:54:aa:ae:35:b8:
8b:6f:95:70:ea:37:09:fe:88:b7:c1:67:04:bf:2c:
35:f8:c8:7e:e9:70:cb:b5:7d:a5:9c:b6:da:20:0c:
9b:ba:6e:e6:c4:49:29:33:4f:22:18:e6:a5:cd:44:
d0:c6:77:be:66:31:e0:b0:d0:a8:de:18:07:bb:68:
7d:e7:2c:55:86:67:35:40:39:0d:40:7b:4e:5c:d9:
25:64:8e:45:d9:df:08:eb:71:c7:6d:32:ba:4d:f5:
76:0f:be:7f:e7:ea:5a:62:76:fa:da:ac:1d:86:9e:
2e:4c:c7:73:a7:18:89:a6:28:9b:ff:49:0f:4f:d0:
71:89:e0:be:00:4a:9a:53:3b:36:aa:3d:3f:6e:ac:
ec:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B1:A3:32:16:4F:56:4D:F8:8C:8D:7B:A2:29:D4:69:71:F8:2C:E5
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2b:3a:8a:05:12:be:6a:5d:f3:25:91:00:cd:0f:4a:1a:58:
94:c4:46:5c:29:26:83:0e:4b:a9:0f:b9:1f:70:16:71:4c:f7:
c8:fb:af:7d:9b:e3:30:2b:80:17:df:9f:21:37:27:21:dc:af:
8b:a3:c9:d3:bb:8f:93:7d:28:3d:9a:6a:7b:de:78:81:a4:dd:
df:b4:00:b9:14:da:46:aa:64:15:87:76:84:19:86:8c:58:d8:
dd:8e:f9:03:97:98:82:c3:17:10:e6:c9:70:ee:b5:65:c9:eb:
95:9d:bc:87:80:07:6b:09:4d:f2:0b:70:d7:90:2a:20:13:bd:
3e:cc:9f:97:6e:e1:8d:82:9d:19:62:9c:0c:d4:6b:b6:d8:ac:
87:de:9a:83:85:ef:22:7b:b3:bb:da:1a:3a:4a:3b:e8:b9:b5:
6f:04:6f:48:f1:df:ce:ed:f3:da:be:d8:5d:a1:cf:09:e8:91:
25:29:22:06:3f:b6:76:2e:9e:06:44:86:30:ad:2b:28:1e:fb:
0a:36:82:92:9b:e1:b9:ae:a8:27:e6:3c:e5:7b:71:91:04:f5:
22:0c:76:f5:c7:63:7e:fe:0b:04:94:59:0e:c4:3c:fe:38:76:
04:48:79:58:e6:79:62:e7:5a:97:b2:dd:36:3c:d1:42:de:a7:
01:39:71:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:03 2025 by rpki-client