Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9547b0-1b0f-4087-aedc-17daabad0d2a/1/pj9uFFK2slu0CifWiZQg-kXPRD4.mft
File: pj9uFFK2slu0CifWiZQg-kXPRD4.mft (raw, json)
Hash identifier: O0uKuaimDwLB3fMFKHo4Iu0AFABlONEj8dc8jboKty0=
Subject key identifier: C4:8C:D3:F3:DF:48:CC:BA:6D:F2:99:02:20:B6:F0:19:33:F6:97:A8
Authority key identifier: A6:3F:6E:14:52:B6:B2:5B:B4:0A:27:D6:89:94:20:FA:45:CF:44:3E
Certificate issuer: /CN=a63f6e1452b6b25bb40a27d6899420fa45cf443e
Certificate serial: 018949332D2D69267C3651B63D5ACDFB1CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj9uFFK2slu0CifWiZQg-kXPRD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9547b0-1b0f-4087-aedc-17daabad0d2a/1/pj9uFFK2slu0CifWiZQg-kXPRD4.mft
Manifest number: 3A
Signing time: Wed 12 Jul 2023 08:23:57 +0000
Manifest this update: Wed 12 Jul 2023 08:23:57 +0000
Manifest next update: Thu 13 Jul 2023 08:23:57 +0000
Files and hashes: 1: SKbZ5Vim6MsMqsKaiSNMYR6E0LQ.roa (hash: F+KeNjJBAs0LZhVNW1JDNj+LKUfiLuZAPwNvrkbPdms=)
2: pj9uFFK2slu0CifWiZQg-kXPRD4.crl (hash: I96BEy5N8d6c3iZjompscVAPXokIufLWaRGeUGJICdQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:33:2d:2d:69:26:7c:36:51:b6:3d:5a:cd:fb:1c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63f6e1452b6b25bb40a27d6899420fa45cf443e
Validity
Not Before: Jul 12 08:23:57 2023 GMT
Not After : Jul 13 08:23:57 2023 GMT
Subject: CN=c48cd3f3df48ccba6df2990220b6f01933f697a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:97:a5:0d:c6:9c:c8:17:b2:de:fe:d6:88:
0f:c8:00:37:77:0a:eb:c6:61:09:5c:a6:56:ff:85:
9c:92:40:66:bd:6f:0c:27:e7:94:68:7b:f8:6a:bf:
ce:50:f1:23:da:e5:1c:bf:0c:1d:09:82:11:7b:4f:
70:dc:92:6a:2f:e9:58:af:b4:6e:6d:62:b7:2d:87:
93:a5:0a:68:23:66:94:ea:ed:f5:b8:d6:b1:a4:30:
0e:86:99:5f:68:79:3f:cb:1e:c6:68:dc:f3:32:0c:
8d:50:3a:64:b7:a1:3e:e2:db:fe:a4:57:52:6c:ec:
3e:06:e5:74:70:7c:e5:c1:35:a0:85:6c:27:a3:a3:
b2:f5:31:1c:22:e9:a8:af:23:35:74:1e:ac:09:35:
15:9a:50:a6:3d:b7:70:a5:d6:c6:6e:d2:19:2f:74:
90:67:fa:ec:c3:d1:96:6d:da:08:11:18:62:26:5a:
ec:e3:6e:41:c9:20:f4:a2:91:37:55:c0:98:51:4c:
09:97:67:3a:a4:3b:88:eb:63:24:16:3c:39:ca:d2:
e1:07:46:95:a1:fa:5b:6f:5e:6d:b4:c3:e2:85:0b:
88:9a:91:20:f2:78:27:da:97:46:24:51:71:17:aa:
fb:e6:36:80:81:68:1f:f6:de:7a:5d:97:4b:e0:54:
b3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8C:D3:F3:DF:48:CC:BA:6D:F2:99:02:20:B6:F0:19:33:F6:97:A8
X509v3 Authority Key Identifier:
keyid:A6:3F:6E:14:52:B6:B2:5B:B4:0A:27:D6:89:94:20:FA:45:CF:44:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj9uFFK2slu0CifWiZQg-kXPRD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9547b0-1b0f-4087-aedc-17daabad0d2a/1/pj9uFFK2slu0CifWiZQg-kXPRD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9547b0-1b0f-4087-aedc-17daabad0d2a/1/pj9uFFK2slu0CifWiZQg-kXPRD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ba:e6:30:76:8f:a8:74:fa:2a:de:33:f2:1f:60:7b:3d:d6:
7e:77:c1:95:93:09:65:d4:c1:6c:17:c9:d2:8f:0b:63:8c:66:
42:d8:d0:7f:9d:14:37:81:af:be:b2:51:6b:5b:56:4a:fa:63:
26:a3:b3:7e:33:e5:8b:ca:63:ec:3f:13:57:2c:87:87:da:53:
ee:9e:7b:e6:dd:e9:c3:f7:fc:ae:0d:b7:ef:60:27:0e:6a:04:
26:b4:a4:f5:b3:a7:7b:5f:cb:fe:38:33:07:45:12:a9:d7:0d:
57:06:d1:a5:83:25:85:89:7e:76:2f:cb:03:d4:00:9a:7a:fb:
a6:b5:3c:37:f2:14:4b:52:e5:42:24:c9:11:0d:3f:d7:5a:ae:
b6:9d:9d:cb:62:03:5b:b4:0d:47:58:63:56:c2:51:ef:7b:43:
99:e9:a3:5f:f2:02:80:a2:81:d4:02:f1:4c:ee:e7:43:08:02:
76:34:b3:66:b0:98:ea:30:37:a3:55:52:d7:0d:ad:25:be:b6:
bc:e2:8d:c2:8e:17:a4:48:6e:37:bc:9c:06:55:e5:f9:cc:4b:
8d:02:c6:5c:97:a2:e8:8f:50:34:64:27:69:fe:f0:18:cc:89:
4a:b4:d7:a1:9c:a6:87:bb:69:bb:62:d0:26:ae:b7:16:16:3d:
49:72:5e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:38:38 2025 by rpki-client