Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json)
Hash identifier: sntn5smc07LeIngkEn5PeJ6fK5UnPyPItSbbu943/V8=
Subject key identifier: 1C:43:19:E4:41:0E:FB:B3:38:B9:7A:3F:D7:83:43:7F:F3:C9:22:41
Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Certificate serial: 0194BD17C069D982F419254C08C428D24910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
Manifest number: 0ECA
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: 352IfVYr+FxEuF7S2nKJg6t5jeTjJvKelrBMujSieZY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c0:69:d9:82:f4:19:25:4c:08:c4:28:d2:49:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=1c4319e4410efbb338b97a3fd783437ff3c92241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:bc:1a:24:cb:74:83:40:ce:ed:38:f0:09:
a8:b6:93:3e:c0:5b:65:84:5d:70:ec:ab:bf:1b:82:
7b:91:65:1e:5c:a3:98:9c:67:1c:b9:26:b4:e6:57:
ae:46:27:2a:b2:26:f2:49:73:57:bf:94:6b:07:6f:
c1:ec:f0:6b:50:d3:ed:d3:d9:30:97:cc:1d:4b:80:
81:c0:df:34:d0:82:dd:27:11:00:72:52:c2:6a:8d:
da:73:96:2a:90:e9:e9:31:e2:0c:d7:bb:c5:61:bc:
93:80:10:3b:c4:32:80:0c:ef:42:d3:95:c2:56:07:
cf:b7:c0:12:cd:7f:b5:b6:ba:ec:ec:50:b1:4b:f2:
8b:2c:8e:01:6b:ea:cf:72:fe:f3:f2:0a:99:36:d2:
c2:66:ee:4b:09:a2:9f:c2:95:5b:f6:08:2f:df:ca:
9a:90:f1:47:b1:d3:b7:5f:28:90:8a:e1:22:a8:c1:
f2:6b:d0:16:26:77:d0:78:c8:f4:c7:88:df:bb:24:
89:ef:c8:4b:d8:05:52:27:5e:0f:ae:1b:0f:18:06:
37:7e:74:44:b3:ef:78:e8:12:f6:89:d7:32:1d:aa:
1d:26:d6:bd:db:c0:cf:62:f6:bb:90:6c:d6:d4:bd:
b5:50:b8:a4:d1:46:a4:34:4b:10:0a:c8:ab:35:bd:
e6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:43:19:E4:41:0E:FB:B3:38:B9:7A:3F:D7:83:43:7F:F3:C9:22:41
X509v3 Authority Key Identifier:
keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:93:b4:ec:67:bf:37:a2:bc:81:c3:23:4b:7f:af:24:6b:91:
ab:ef:6c:be:ed:31:eb:2e:ad:b0:74:ce:58:7c:b8:be:4a:8e:
50:be:1e:f6:f8:9a:20:e1:05:4f:a9:58:56:aa:33:89:65:89:
f8:d9:6a:43:01:63:d1:da:9c:97:4e:e7:19:ec:8e:d8:2c:31:
f9:d0:ea:8d:7f:1d:d2:85:1d:da:c0:58:95:e0:83:29:05:36:
a0:bb:ec:6f:dc:1a:11:b5:f5:8e:a0:ec:69:45:ee:65:3d:f8:
ef:b4:e5:99:71:ae:74:b8:1a:9f:32:3c:d0:1a:ea:df:e5:6c:
20:a2:ca:92:24:9e:63:f1:7c:a0:af:99:87:0f:07:0c:dc:6d:
17:34:4d:5c:13:64:d1:08:95:5e:61:60:98:9c:3c:37:ef:14:
ea:5a:84:76:3f:dc:b4:cc:cc:cc:f0:a9:c3:d0:8d:88:10:0e:
52:e6:62:87:5a:52:da:ad:a4:7b:f0:9d:08:36:d0:e7:83:c5:
63:2c:25:dd:3e:04:35:df:11:ab:70:4b:3c:ca:d7:1a:50:1c:
59:a6:52:20:63:73:94:2e:2e:58:ef:a7:b2:38:f3:87:3d:27:
85:51:0e:0e:cd:af:7e:17:2a:ca:06:5d:8a:e8:c4:6d:62:65:
9c:df:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:52 2025 by rpki-client