Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: cK9Z4KPPF1fFIyqghYnuCpQNfUGWMxpVBqzc9x+eISE=
Subject key identifier: 5D:55:23:39:D4:81:5E:5E:4F:99:20:85:FE:D7:7B:4F:7D:41:99:27
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 0194BBCEFFCDB6A6E74222AF7E09EB424673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 0593
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: nrUK9CZvCXLERCPeyp/ZAhA7THI/Hnq2vXWjyA/uRdY=)
2: rIcxsp5sz0dlPPDFoVMkw-kijLA.roa (hash: 0KgN5QUZAAHsy9G448/+3BQRGi6qn4R8WGa6FVROC2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ff:cd:b6:a6:e7:42:22:af:7e:09:eb:42:46:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=5d552339d4815e5e4f992085fed77b4f7d419927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:44:be:ea:d5:7c:9f:11:e6:87:d8:f4:51:20:
2a:98:62:7a:9f:d3:01:92:52:ac:4a:5e:29:25:2c:
fa:0a:f9:01:46:d1:46:0a:26:e9:87:a0:ad:35:ef:
54:03:c8:bc:95:d3:b3:e2:b3:bf:d8:40:f0:f7:c5:
12:75:d6:66:9a:ae:20:52:fd:a0:67:b9:0a:ed:30:
d3:98:15:51:72:1a:3b:c6:f7:16:47:85:bb:fe:21:
00:13:d1:37:6b:bc:69:41:ee:3e:51:c0:92:87:8e:
55:6b:a0:5f:a9:6b:c3:57:c3:39:10:86:98:2d:a9:
49:f5:e8:9e:a6:0e:f8:15:f7:8f:15:e2:22:0b:11:
93:31:de:81:7f:6c:5b:7b:cb:31:98:e0:db:0e:be:
01:6e:78:ec:f2:19:ca:b9:22:bc:f3:a1:3b:6f:eb:
05:4e:bb:6e:f3:84:9c:ae:a4:00:ac:50:63:35:a2:
61:84:f7:3c:de:0d:21:dc:b1:8a:ec:e8:2c:30:f4:
9c:b0:89:93:5c:1c:52:e1:9f:e0:6d:b5:d0:1f:c4:
6a:ef:96:d9:5a:80:f9:17:54:b5:96:da:f1:36:af:
e5:e2:1c:36:58:4e:52:07:6c:11:58:e3:31:86:4a:
3d:0c:4a:dc:49:37:25:1b:b9:c9:65:16:39:80:0c:
9b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:55:23:39:D4:81:5E:5E:4F:99:20:85:FE:D7:7B:4F:7D:41:99:27
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:33:14:b3:26:45:0f:31:7c:4d:e2:ae:ea:b3:6a:71:a6:1f:
53:34:02:ac:d8:45:75:fd:37:98:df:ce:90:17:9d:25:d4:9a:
d2:1e:95:81:0e:7c:5e:c9:c5:45:13:89:27:8f:14:2f:23:c2:
54:89:17:09:84:73:d1:37:65:cd:0b:b7:94:f7:bb:a6:fd:81:
a3:19:69:60:19:21:65:7c:a0:d3:95:c8:86:83:91:a7:c7:45:
99:13:a7:94:0f:92:60:37:27:3c:4b:ca:44:ed:9a:df:8f:d6:
32:67:78:2b:3a:f9:b6:52:c6:52:3d:c2:96:59:8a:6d:d9:a7:
50:3b:06:4d:b4:9d:5e:82:19:b3:3c:e0:8f:57:f9:34:78:36:
33:82:19:56:b8:4e:03:19:cb:bc:5e:b8:f4:66:25:b5:c8:61:
ea:94:ad:d2:2a:e6:43:8f:a7:7d:d7:2b:ff:96:fc:3b:5b:34:
41:17:04:34:7e:f8:95:dc:8a:d4:1a:47:47:3e:b8:0d:94:fc:
68:6d:d1:71:c6:da:ce:71:16:7c:3e:3d:54:28:54:6d:0d:d1:
be:e1:18:a6:5a:80:01:aa:36:b9:50:12:32:13:31:bb:94:72:
9e:39:d4:91:99:73:8f:8f:b1:5b:e7:b0:af:18:59:a3:70:77:
84:f6:c4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:52:21 2025 by rpki-client