Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
File: PZlE6PVlGxvS8KngBoZfOmuB62E.mft (raw, json)
Hash identifier: 18zTFb+1KKPIg6SpAz4DGNZ/cYzpCiiIXiy8qmAicbg=
Subject key identifier: 29:FB:69:F0:04:7E:14:EB:8B:16:4F:5D:DF:BF:CC:7A:CB:AC:BF:57
Authority key identifier: 3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61
Certificate issuer: /CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61
Certificate serial: 0194BBCE88208FE21189B1293391E931BDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: PZlE6PVlGxvS8KngBoZfOmuB62E.crl (hash: 8jQY+KumEK3Cnou3MxMI6y/sD+/e2rKSvUfIhLrjcSg=)
2: tlchQmDxgjTRo1pLaspfZw12O3A.roa (hash: 6bDu460ilvbyFwMJbm1Vw+QewREO9nGYqnB3iYaAR4Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:88:20:8f:e2:11:89:b1:29:33:91:e9:31:bd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=29fb69f0047e14eb8b164f5ddfbfcc7acbacbf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:af:41:7d:32:05:f1:35:2c:66:45:08:ba:
0c:89:f9:1b:6e:dc:8d:31:e6:4c:a9:a0:a9:46:94:
82:14:ab:b7:b0:d3:51:b8:3a:77:4b:46:a4:50:51:
44:99:da:88:f7:e1:71:99:9f:a3:b0:22:7e:f5:7e:
60:71:e2:c3:21:46:fe:50:af:e4:4d:2d:32:e4:3b:
49:62:a3:21:b9:24:46:93:80:1e:58:c4:d0:1e:96:
3d:42:ea:0b:30:47:56:26:f6:4a:df:d3:d2:40:77:
f6:ef:7b:1f:ff:14:27:a5:f1:17:d6:67:27:47:70:
1d:cb:71:c5:d6:bb:24:be:2e:a0:59:ce:15:12:20:
59:6b:cf:54:51:c6:33:e9:97:1a:72:da:b7:9c:d7:
0d:1b:55:d0:be:22:c0:f2:07:72:72:5b:1c:af:21:
83:1b:b5:be:40:7c:c3:53:02:cd:8b:94:63:88:2a:
e5:32:cf:35:d6:16:f9:d9:78:53:02:4c:47:4c:5e:
15:7c:45:ab:0a:5f:45:96:b3:c3:9b:c9:60:46:56:
51:b9:f5:ab:e9:75:ed:0d:e6:ec:84:a9:bb:e4:11:
37:22:5d:a0:54:de:36:51:bc:0c:15:b7:66:df:e0:
02:e0:9e:57:be:e3:e2:34:d9:4d:28:e9:fb:87:77:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FB:69:F0:04:7E:14:EB:8B:16:4F:5D:DF:BF:CC:7A:CB:AC:BF:57
X509v3 Authority Key Identifier:
keyid:3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:52:5b:c1:a8:3a:f5:dc:d1:95:a0:8f:ba:e7:51:d6:98:e1:
d9:25:9e:64:8f:ca:bc:fb:b1:28:99:28:9a:35:83:46:60:f5:
b4:cf:20:48:09:17:ed:7c:2b:4b:9d:9b:72:53:dd:19:46:2b:
5f:db:04:41:9e:10:5a:db:52:5e:3e:a9:71:c9:b3:73:e6:cc:
47:3a:a5:36:c8:12:77:ff:88:7e:46:c9:96:35:e2:b2:11:85:
6e:b3:c7:ad:0a:09:b5:95:ba:47:35:46:f2:f7:f6:3f:b5:52:
4f:6f:7a:21:57:f1:48:ad:bf:83:a0:7f:9e:5f:e7:6e:cf:d3:
ab:f1:b6:ab:2d:3d:ff:b9:7b:93:2d:4a:d2:19:85:b8:71:4b:
4e:a4:9f:23:70:b0:48:d6:c1:c5:93:4b:95:dc:db:77:d8:c9:
6b:b3:08:f7:80:e2:74:fe:f0:25:21:ad:8a:85:09:04:c8:f3:
46:57:8a:c4:46:76:33:00:b9:37:ef:e5:2a:f2:1e:ad:78:f3:
5f:16:2a:f4:02:01:a8:8f:48:19:24:c4:25:ef:cb:75:44:81:
10:7e:af:ce:86:ea:fe:0f:fb:5b:59:5d:1f:e1:5e:01:6f:ef:
dc:aa:e5:38:2b:6c:e3:b1:23:09:55:d3:68:95:c3:f2:ca:55:
4b:af:4a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:34:45 2025 by rpki-client