Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
File: pJKfzWHcadzPvgHV_wA1tBrJUmA.mft (raw, json)
Hash identifier: tXq2o5nXXkouBS3ozVYBiYMEbWknNu+B+3qEc5pw5uI=
Subject key identifier: 90:5E:D8:B7:01:D5:74:5A:B5:C9:A4:F5:DD:56:86:AD:7A:12:D0:07
Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Certificate issuer: /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Certificate serial: 0195DFD8E5697F17CDD932F29543B9F4CD86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
Manifest number: 0DD6
Signing time: Sat 29 Mar 2025 03:01:28 +0000
Manifest this update: Sat 29 Mar 2025 03:01:28 +0000
Manifest next update: Sun 30 Mar 2025 03:01:28 +0000
Files and hashes: 1: FMd4ncvFc0vMJ63ZqH_KhMZqr00.roa (hash: GAIpznWNN7ttQuk7XL5JgmFjADI10rnA9JaXxJOak4g=)
2: pJKfzWHcadzPvgHV_wA1tBrJUmA.crl (hash: OUV7werisMSahNMjVyTdqH5MPTouo+paTrXmxYSWmNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:e5:69:7f:17:cd:d9:32:f2:95:43:b9:f4:cd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Validity
Not Before: Mar 29 03:01:28 2025 GMT
Not After : Mar 30 03:01:28 2025 GMT
Subject: CN=905ed8b701d5745ab5c9a4f5dd5686ad7a12d007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:4b:33:e0:28:1b:9e:6d:cd:f1:d0:9c:d5:
cd:4c:da:6c:ca:3d:fa:65:64:e7:f2:db:c8:f1:9c:
09:ee:02:17:bc:bb:df:49:25:2c:54:2a:d9:15:2e:
01:e5:17:65:ea:0f:3b:82:9b:b3:15:76:32:79:59:
24:9a:67:64:99:2c:7b:54:fe:be:bf:36:8f:b2:69:
6c:df:ff:78:16:79:93:69:80:5e:59:f2:9b:dd:cb:
4f:52:3c:db:9c:92:06:a3:03:fd:68:6a:0d:d4:5b:
93:96:6a:b6:70:8e:db:9d:f1:34:47:5b:c4:07:a0:
3a:c7:c3:fd:f0:41:3b:fc:dd:48:b4:c5:9b:34:87:
72:e6:2e:38:08:ea:ba:5b:a4:2d:aa:24:30:9b:1d:
d9:a3:02:69:b1:f2:93:89:77:66:21:cc:33:56:5f:
24:45:8a:a9:47:ca:83:9f:25:e2:6f:c3:37:ff:54:
75:d4:79:f0:93:c7:46:b1:75:ac:cc:6d:a7:c6:26:
86:a6:2b:90:89:9e:0c:ac:dd:3d:23:ec:3b:09:82:
d5:fd:76:8e:22:5e:a3:ae:73:4b:4e:32:8f:12:b8:
4e:a0:96:cb:60:5a:fe:5d:a8:2c:8e:0e:51:f8:dd:
9a:0c:70:78:bd:0b:ff:d5:8d:47:e4:ba:ba:4d:3e:
26:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5E:D8:B7:01:D5:74:5A:B5:C9:A4:F5:DD:56:86:AD:7A:12:D0:07
X509v3 Authority Key Identifier:
keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1a:5a:8d:c5:68:9f:29:61:60:08:79:fe:ab:18:0d:d1:b4:
e3:fa:dd:81:a9:6e:77:50:a7:45:26:9d:89:6c:a5:ee:13:fe:
eb:02:db:2d:f4:83:7a:bc:a8:05:77:85:e0:3d:f0:2a:4d:0b:
c3:b1:03:0a:64:0b:b8:be:1f:9f:a4:95:07:d3:99:12:b2:22:
ca:79:16:51:2e:dd:94:be:50:b8:cd:a5:1c:52:e9:05:50:9a:
d6:2b:99:78:85:30:1f:6c:b9:d8:8f:c5:55:34:df:ec:19:ca:
10:af:35:b8:db:49:61:80:1b:1d:9a:60:29:33:1f:b3:a9:d9:
84:40:ca:92:16:20:f5:b5:4f:f0:82:5a:5c:08:73:cf:65:a8:
17:3f:d6:de:f8:c5:a7:cc:d9:6c:38:cc:f4:79:fb:5b:80:82:
12:9b:20:ab:33:04:f1:28:9d:3d:9d:d0:53:96:42:c7:51:d0:
d4:6c:2f:d0:d0:59:e0:ec:fb:41:b2:c6:3c:93:88:30:7a:21:
7a:f7:cb:8a:b5:4b:c2:0f:0d:33:97:b3:e4:a3:8b:0c:15:07:
06:4d:37:93:64:00:48:b0:35:7b:3d:ed:69:c4:9c:c7:4c:0c:
cf:1d:6e:63:c5:ae:d4:e2:ea:1c:95:e8:73:bb:e0:25:63:57:
83:19:f5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:32:12 2025 by rpki-client