Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.mft
File: pZIN7G_wCUnoIWFyHrlMxkXjR3Y.mft (raw, json)
Hash identifier: NSMcEmd4mx1HVDxrWmAWoXqwFqLNk7PU9pT9F2dHvB0=
Subject key identifier: D5:EF:03:B1:FD:72:97:D0:26:0C:43:28:BE:3F:64:5C:FC:64:EA:55
Authority key identifier: A5:92:0D:EC:6F:F0:09:49:E8:21:61:72:1E:B9:4C:C6:45:E3:47:76
Certificate issuer: /CN=a5920dec6ff00949e82161721eb94cc645e34776
Certificate serial: 0194BCA9F8180F5AED8BA5FE08A62052EC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.mft
Manifest number: 0EDB
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: YR4ujQ2sFqpF0bDdCJnNqsqvwEU.roa (hash: yGa4f7/iphZYLthfBwuXeS2/L8/Ji+s9D58wXkN4t3E=)
2: pZIN7G_wCUnoIWFyHrlMxkXjR3Y.crl (hash: 47/S2U5Mm/i9MJhZtmpF9/+otAsZhsQdNTe1WeqXrfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f8:18:0f:5a:ed:8b:a5:fe:08:a6:20:52:ec:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5920dec6ff00949e82161721eb94cc645e34776
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=d5ef03b1fd7297d0260c4328be3f645cfc64ea55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:8f:9d:33:d0:85:74:07:1a:5b:a5:ca:a3:
0f:fc:48:82:89:20:cc:1e:04:88:aa:77:2f:e1:a9:
d8:61:cd:ea:0e:ff:9f:d3:27:df:db:5e:51:ad:15:
c3:dc:de:ec:bf:c2:72:03:ed:81:9a:c6:16:e0:6c:
6f:3b:a0:0e:86:a1:4e:d9:b6:56:f7:b8:00:a5:04:
65:9d:c4:a8:94:b2:28:f2:95:6b:27:8b:7c:10:a5:
fc:b7:83:b9:f0:7c:9d:04:6a:ca:48:58:70:1e:8c:
cb:4a:16:46:4f:d8:dc:a1:6f:da:25:ba:50:9f:ed:
3f:f2:3a:b0:7f:c6:de:59:04:bb:3f:8f:68:65:51:
7f:66:ce:ae:59:3a:3d:0e:16:2b:8c:ed:a4:e9:5a:
59:36:fd:8b:bf:69:77:a7:61:41:64:58:c7:df:18:
c4:be:81:ff:0b:97:ea:7f:3d:03:83:08:a8:57:c6:
2f:ba:c5:61:df:31:d8:54:08:dd:52:ee:e3:56:0f:
95:0b:87:44:0a:47:0c:bd:14:d1:99:7d:99:40:47:
17:28:3a:35:c1:fd:dd:03:c2:ed:6a:3d:4a:f2:34:
58:c1:03:9f:be:80:03:a1:43:dc:27:0f:78:2b:a5:
1e:e5:24:7f:78:d3:23:8c:1c:88:36:ec:fb:75:d5:
32:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EF:03:B1:FD:72:97:D0:26:0C:43:28:BE:3F:64:5C:FC:64:EA:55
X509v3 Authority Key Identifier:
keyid:A5:92:0D:EC:6F:F0:09:49:E8:21:61:72:1E:B9:4C:C6:45:E3:47:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:96:f3:b3:01:fc:e5:d8:6d:bd:d3:f1:0d:42:89:66:1f:f3:
62:6c:dc:be:19:e0:62:87:26:43:98:30:93:75:d7:be:81:c1:
2d:72:4c:ba:e6:5e:a8:e0:a4:16:40:72:03:fa:33:88:a9:9a:
da:b9:ff:ba:17:06:16:e7:06:60:72:a5:76:a3:71:98:bb:2d:
2d:d0:0f:aa:6f:69:3a:88:0e:e3:51:9b:6f:9a:b3:e3:ba:ba:
8b:83:28:4c:50:73:40:cb:c2:f8:2c:fc:00:92:37:ba:6e:51:
5a:d6:1d:7c:ae:af:53:56:54:b8:de:41:64:da:c8:e1:a9:4a:
c8:55:b6:8d:dd:94:21:f6:ca:45:c3:91:34:e5:6b:7c:9d:3c:
fa:e5:80:d8:cc:95:0d:84:cc:e4:ee:ed:c1:a2:28:31:36:be:
c7:2d:16:61:69:1b:9c:d9:11:03:e7:a6:98:7f:a4:d5:0e:93:
39:b2:33:40:de:76:61:49:df:14:7e:8d:f2:8a:42:ed:65:96:
fa:c3:dc:c0:a3:b3:ad:c6:15:c4:c1:dd:7a:11:8e:43:f5:ff:
c6:0d:8e:10:75:0a:8f:ee:46:a1:ac:5c:12:c9:1b:bb:6d:cf:
35:2f:3f:40:9b:aa:32:89:f5:0e:05:99:2c:20:97:51:5c:92:
83:d4:11:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:37 2025 by rpki-client