Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
File: PZijti1aux3K9oriP1Me6CJA8gM.mft (raw, json)
Hash identifier: intcobOmUB6FBqJJL+Fvc1mm+WLyUy5UHVgm3gS8MrM=
Subject key identifier: F1:86:87:0F:9F:92:CC:07:93:74:34:1C:7C:02:24:E9:7B:F9:82:10
Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
Certificate issuer: /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Certificate serial: 0194BBCE03476E9A3141FFB80C9BE05E7FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
Manifest number: 0D19
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: K5-cWJf7kTmzFiV3mE-MumP7Txo.roa (hash: d5nxq53iT7Tr8Pdp2k4UnWi9qs3VVT6d+if6Hmi6IVQ=)
2: PZijti1aux3K9oriP1Me6CJA8gM.crl (hash: SlBjo+n1ubnV23e3p4xf0Huh9T3LkTvMUqPG0YaWmGY=)
3: _TX8C92dziQpbg1kfvVVdJSGVvw.roa (hash: M6n2mPn45LSDUrpQyadpeXypeAt/8VqRu1J7jMmEfG8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:03:47:6e:9a:31:41:ff:b8:0c:9b:e0:5e:7f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=f186870f9f92cc079374341c7c0224e97bf98210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:e7:87:a9:45:67:e3:94:32:a5:b0:9f:5d:
98:7d:ae:c9:36:02:a9:ea:2a:9a:dc:42:f1:ca:79:
24:24:1f:46:a7:e5:69:fa:20:35:8d:74:08:da:74:
ee:1c:60:f3:80:79:49:a9:d2:f3:e2:aa:78:f5:c7:
0a:e9:cb:b9:c8:f1:de:8c:d0:12:0c:0c:55:7e:00:
a3:6f:41:18:39:a6:90:f4:30:51:4f:8c:a0:da:c4:
5d:21:e4:ef:4f:1f:61:58:26:65:d8:8d:da:40:08:
b1:49:a3:19:d8:25:07:4e:9a:d9:8d:92:54:c4:6b:
f5:61:37:25:8a:6b:ec:5a:ae:65:f8:ef:c2:d6:fa:
38:19:51:f3:9d:ea:7a:44:11:65:24:e9:9f:3a:69:
1d:9f:cf:9b:70:d9:8a:1c:72:d0:0c:1b:74:58:ec:
08:9b:e3:28:0f:25:a8:3b:a6:ea:46:53:1c:86:36:
ea:ef:25:ed:88:d2:8b:fc:3e:cc:50:6d:15:b6:00:
87:0c:ca:e3:0f:bb:1a:3f:6f:5a:02:cb:c8:dc:c6:
51:8f:32:9a:34:46:e0:86:08:d4:be:c1:1b:a6:a0:
f5:b7:ec:91:5e:58:63:71:b1:64:14:94:11:bb:c9:
47:3a:56:7b:31:b3:ac:3c:f8:16:22:56:77:b5:06:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:86:87:0F:9F:92:CC:07:93:74:34:1C:7C:02:24:E9:7B:F9:82:10
X509v3 Authority Key Identifier:
keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e2:46:51:8d:93:4d:07:9c:e9:38:be:34:0a:19:5f:94:98:
2f:d9:0a:2a:f0:e7:a3:62:35:8c:67:ca:e3:36:3c:e8:b1:c3:
e6:d8:ea:c0:5a:15:3e:c5:c2:07:e0:b1:9c:e1:58:00:5b:51:
ff:58:95:ca:3d:09:d1:37:f3:45:54:5b:77:de:fe:9f:b5:f6:
13:9a:2c:6a:52:b4:e3:85:14:9a:71:18:20:5d:03:04:14:0a:
49:7f:62:8d:7c:94:1c:af:c1:c4:d7:2a:72:80:08:d7:00:09:
e4:2c:5f:ad:bb:57:4d:ae:ad:bc:1a:71:8f:4d:c7:70:6d:30:
f5:f2:d9:6c:58:47:46:79:36:aa:68:a5:09:f1:e9:d7:86:69:
8a:9e:1c:fd:55:25:d2:28:be:e7:ce:46:ed:02:9e:82:71:06:
9e:2a:a8:df:7d:97:1c:9e:db:9c:10:7d:08:09:eb:04:9d:42:
77:6d:f2:d5:d5:a9:57:64:6e:4a:1a:0f:74:ea:a6:c3:76:8d:
90:8d:07:59:4b:ac:79:e6:07:cd:b6:87:cb:da:44:c9:9c:fd:
89:82:cb:8e:39:a6:e1:53:e9:ac:23:1f:aa:b9:e9:29:aa:51:
05:9c:27:f3:51:cd:a1:70:a1:57:d6:70:a5:1a:92:06:af:33:
e3:ef:38:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:11 2025 by rpki-client