Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: TTa/oN4AFRA0mwXLFDW0Dk/G0Exif/BuHvDCDcet564=
Subject key identifier: B9:50:C0:AC:40:15:03:C4:C2:3B:F2:C6:84:17:EF:EC:E3:36:CA:29
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 0194BD85272FFD820EB0FEBB801F430E66BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (hash: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=)
2: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: 508lngyrClOxvJyHY/3m+dN0iElzdeRdHtR6TZlC3tQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:27:2f:fd:82:0e:b0:fe:bb:80:1f:43:0e:66:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=b950c0ac401503c4c23bf2c68417efece336ca29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ab:ac:c1:ea:f3:92:a5:5b:21:7e:8c:ea:55:
69:bb:db:b8:f9:51:73:34:16:41:87:1f:6c:b8:17:
e5:6b:1f:8a:8c:07:c5:43:4b:06:11:e7:ce:5a:d2:
c8:1f:0f:9b:05:17:0a:9c:32:03:08:f9:e6:ce:56:
2e:22:3d:c3:af:4e:4a:f9:9e:10:33:23:84:57:6b:
81:aa:c6:7e:31:28:70:e1:ea:34:db:72:65:f6:a9:
f9:d6:72:cb:ea:e3:c0:57:ab:c6:22:d9:9f:40:29:
ce:6a:7a:06:32:38:a0:b6:49:b8:3a:84:32:26:e7:
e8:e4:e5:8d:26:40:32:53:b0:21:fe:2b:96:88:0e:
f4:d8:96:29:1a:c4:73:0d:c3:23:f1:37:f8:5a:5b:
45:1b:90:cb:6e:10:f7:8e:63:1d:63:99:52:bc:bc:
ce:53:19:2f:b2:65:b0:31:5e:3e:69:92:ab:3c:d6:
49:14:a6:15:21:c4:6c:91:7c:bc:19:7e:09:e6:c2:
e5:2b:3f:6e:41:8b:6c:0d:76:04:55:ea:d5:8c:dd:
7c:9e:02:5f:cf:f4:cb:98:eb:55:3d:b1:d1:f9:7f:
d3:6b:80:7a:0f:cc:59:f8:33:dc:20:25:7e:6c:0d:
e7:56:4d:2d:b1:7b:94:6c:c7:29:52:e1:fb:75:a3:
76:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:50:C0:AC:40:15:03:C4:C2:3B:F2:C6:84:17:EF:EC:E3:36:CA:29
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:66:d2:34:ea:e5:bb:05:82:3a:28:9d:c3:21:9c:b9:bc:c7:
f8:7e:52:c1:61:5d:ae:c6:d1:13:19:27:a5:7a:0b:97:e7:59:
ab:6b:62:ca:67:09:87:07:e8:a5:ed:4c:f0:e5:ee:eb:78:78:
d2:12:4c:a3:76:9a:63:19:7c:4e:7f:a2:c0:23:ad:fe:bc:1e:
4a:70:2a:e4:e0:1f:bb:1e:a5:fa:85:1f:23:b7:56:76:d7:53:
ab:85:6e:a2:14:b9:70:65:90:28:fa:96:56:97:43:80:5b:7f:
33:0b:e5:8e:72:96:c6:e9:78:68:55:9a:90:10:e7:f3:5e:f4:
64:d5:47:8f:17:0c:ae:f4:2e:9c:83:80:f5:e9:fa:b8:95:8a:
64:0f:cf:70:33:8b:09:99:47:d1:bd:2f:b6:27:02:11:49:01:
b9:f1:44:18:b8:06:d1:63:44:a2:b3:d4:b7:0e:20:5e:1d:1b:
88:ae:04:0f:d6:93:a7:cd:a1:26:75:67:bd:b4:ef:f3:da:c2:
85:a6:2a:3b:4f:36:d6:47:17:cf:db:51:54:a0:ea:01:f6:33:
82:55:80:ac:c8:66:44:ee:99:a1:c9:ff:96:d6:57:72:a6:ff:
3f:c5:ac:f3:d2:53:0e:06:bb:ec:44:fc:1e:33:c2:47:83:5b:
0b:3a:ad:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:34:51 2025 by rpki-client