Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aec107-93e9-40a7-868e-c91c5debd5b7/1/pziV78cIO7fqppbPh2s6ZuJ5wdM.mft
File: pziV78cIO7fqppbPh2s6ZuJ5wdM.mft (raw, json)
Hash identifier: jrtC9v/evzdKgxQpst5JZo+k/FGLHOuSmURJqc9DDK0=
Subject key identifier: 2E:E0:30:EE:0B:06:76:2E:F9:3B:04:70:99:52:00:5E:25:27:31:E3
Authority key identifier: A7:38:95:EF:C7:08:3B:B7:EA:A6:96:CF:87:6B:3A:66:E2:79:C1:D3
Certificate issuer: /CN=a73895efc7083bb7eaa696cf876b3a66e279c1d3
Certificate serial: 0194BCA98901F8DBE8BA50C1C58F75ABABA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pziV78cIO7fqppbPh2s6ZuJ5wdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aec107-93e9-40a7-868e-c91c5debd5b7/1/pziV78cIO7fqppbPh2s6ZuJ5wdM.mft
Manifest number: 08B2
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: pziV78cIO7fqppbPh2s6ZuJ5wdM.crl (hash: KqA9PylV3aBuNWJFO31YrlM2V06LTaOoVTv/8vZkRYQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:89:01:f8:db:e8:ba:50:c1:c5:8f:75:ab:ab:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73895efc7083bb7eaa696cf876b3a66e279c1d3
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=2ee030ee0b06762ef93b04709952005e252731e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:8b:17:3c:9d:19:8d:a5:49:c6:3a:5b:14:
df:d5:93:d5:b4:e7:a0:4e:55:02:63:3d:04:a9:d4:
d8:05:e1:78:af:b8:62:c9:12:98:cc:3e:c6:8e:7d:
7e:d4:ae:14:04:a4:44:d8:87:12:45:9b:ad:aa:af:
17:0c:7f:b8:9c:8d:11:72:50:f0:7f:aa:4a:c6:d4:
d0:b5:b3:30:09:e7:f4:53:15:99:a7:73:13:19:31:
64:0c:31:26:d2:e1:db:79:00:b9:37:7b:fd:89:1f:
99:be:32:26:e0:1f:a5:a0:ae:56:3a:28:7d:e3:d3:
af:5b:19:dd:9c:61:f8:bb:b3:26:c5:11:87:00:03:
5c:4f:95:f4:21:07:1d:9d:4f:2a:4f:54:b2:c5:3e:
7d:3b:d9:aa:f9:fe:d6:fc:35:be:21:5c:96:d8:8d:
b1:8a:84:de:53:71:f8:be:e9:3b:56:b1:96:3f:5b:
d9:e2:ed:81:00:2d:e6:7a:35:19:98:a6:b5:f8:c3:
1b:a1:f2:d4:30:4a:86:dc:2a:18:2c:00:31:68:b1:
c5:2a:61:14:5d:b6:48:80:2b:0d:c4:85:3d:0a:ee:
4d:39:e7:33:d7:dd:f2:c5:5e:cd:70:d5:4d:d2:aa:
26:85:31:f2:86:42:b7:37:05:52:47:29:33:e1:4a:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E0:30:EE:0B:06:76:2E:F9:3B:04:70:99:52:00:5E:25:27:31:E3
X509v3 Authority Key Identifier:
keyid:A7:38:95:EF:C7:08:3B:B7:EA:A6:96:CF:87:6B:3A:66:E2:79:C1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pziV78cIO7fqppbPh2s6ZuJ5wdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aec107-93e9-40a7-868e-c91c5debd5b7/1/pziV78cIO7fqppbPh2s6ZuJ5wdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aec107-93e9-40a7-868e-c91c5debd5b7/1/pziV78cIO7fqppbPh2s6ZuJ5wdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a6:70:47:8c:0b:b9:5f:55:6a:e3:8a:75:17:c8:85:b0:e1:
5c:7d:59:22:0f:51:ae:94:b4:82:20:ce:66:4f:a3:9f:48:84:
79:b6:d6:ba:da:95:2d:3e:be:e1:0a:7d:a5:38:4f:79:ef:c8:
4e:de:f5:c4:c2:42:0b:3d:ac:f9:16:7b:f6:f5:bc:41:48:d6:
20:ac:01:17:1c:e7:00:1e:62:27:65:b4:76:0f:fc:21:47:32:
bf:68:54:9a:99:cb:32:a5:bf:3b:ad:cd:1a:7c:43:99:fb:0b:
b4:ec:b3:1f:90:d9:61:4c:9d:a3:af:ac:fd:35:98:3c:b5:93:
c8:2b:4a:ff:24:89:09:ac:df:a9:d1:27:77:af:c7:21:13:c1:
b9:33:62:44:0e:95:4a:2e:cd:56:67:a8:33:f2:35:f2:90:2f:
50:b4:0b:07:b5:9c:22:fe:0b:63:f8:4d:0b:06:a8:11:e1:a1:
0a:0e:22:33:1d:b0:21:89:c2:49:eb:5a:9f:d1:ba:44:c4:47:
6c:a0:c4:e9:50:5a:3c:bf:9e:93:52:35:6c:ef:8c:c4:d1:62:
e6:3b:bc:b1:d9:6a:c1:a5:2c:77:f4:9f:38:18:eb:bb:f6:52:
5b:2b:a2:c6:1f:77:c3:48:f4:b2:3c:99:26:87:6d:58:c9:a2:
21:ff:11:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:52:50 2025 by rpki-client