Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
File: Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json)
Hash identifier: mT216vD/EJRg8rtA+JQ+sXMS8gJNCUFxw/tNm233rGo=
Subject key identifier: 5D:3F:62:41:95:82:CA:B3:9D:E1:A0:FC:BB:89:D7:C9:22:D0:8D:31
Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Certificate serial: 0194BCE0C00E2C55BC7B477F494E005C96B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
Manifest number: 0FE0
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: eHuDe6UdwpzVhUQf8HO95x7IwDJpe4h7KAcLBL6miak=)
2: mvLDmuyuUuZFiCTIw_g9i8uNgFg.roa (hash: GZj+Xi5SIMQUMGweRfOhuKIks60lK9TTGOmmhsaxut8=)
3: zURslIPoCzmuF9cVBs91SF_jfZs.roa (hash: PBlZSBkxr5D+YnPFObnzHQvndsM2zZG1fAG0x5+wRk4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c0:0e:2c:55:bc:7b:47:7f:49:4e:00:5c:96:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=5d3f62419582cab39de1a0fcbb89d7c922d08d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:ce:15:c9:2c:dd:fe:fe:07:6d:23:76:91:
64:e6:d6:8e:a5:63:ff:0a:aa:ce:a1:85:2a:6b:8c:
30:c1:c4:f1:c9:62:9b:72:2a:d5:cb:73:5b:81:80:
86:fc:cd:f9:7e:3a:fe:2a:b9:e1:63:1f:bc:2b:43:
8a:d4:68:b2:10:d3:a3:18:cf:c0:6c:93:d9:bd:01:
17:6e:68:96:0a:54:50:fc:f6:29:a2:8d:ad:31:fa:
51:89:23:5c:ca:ed:ea:8f:96:fb:23:e2:fd:13:21:
b7:5f:9a:9d:4b:96:77:e1:f9:b9:43:77:e9:d5:e9:
33:ee:5b:59:d4:ec:48:18:20:09:e3:99:f5:43:b0:
5e:3d:d0:ee:c2:de:96:54:9c:a1:17:c4:49:9c:88:
11:54:cf:c1:60:2a:6c:54:a5:59:6c:e4:76:90:79:
74:b5:1e:0d:4b:7b:44:c0:1f:44:59:6e:bc:c0:1a:
66:3f:3b:9b:78:a5:54:84:ab:88:a0:d6:e8:90:b9:
43:6c:d4:7c:17:59:03:4c:2c:5a:77:e8:6c:b4:ee:
35:94:78:ae:30:76:b6:2f:cc:d9:6d:42:3a:a1:65:
ab:e3:25:f9:ca:bd:10:4d:f5:33:8c:b3:4a:b5:15:
8b:7d:68:41:28:48:98:e6:7c:37:55:b9:5e:7e:16:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3F:62:41:95:82:CA:B3:9D:E1:A0:FC:BB:89:D7:C9:22:D0:8D:31
X509v3 Authority Key Identifier:
keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c0:ba:1f:40:11:af:09:46:d1:ca:b9:a4:c6:41:b8:a1:1b:
dc:dd:35:a7:7c:4e:f1:0d:49:f7:8f:24:db:20:bc:dc:51:be:
c8:25:35:c3:e2:97:2a:8a:f2:fb:87:73:d2:0d:53:ca:1a:4c:
0e:a4:2b:01:40:4e:09:70:18:86:02:59:f8:58:30:fc:f9:cd:
c6:13:71:69:78:be:f4:0a:a1:4b:ba:56:7c:d4:c3:c1:d1:96:
bd:1a:82:16:c1:c9:54:e7:e1:a1:f6:27:4a:bb:ec:93:73:e4:
dc:b2:26:02:d8:a4:32:2b:2c:5e:fb:70:94:53:cd:d6:dc:6d:
91:70:da:fc:5f:1c:b2:c0:9b:9f:c1:9a:0a:6c:f7:e0:6b:59:
e8:1d:d4:0c:f5:5b:e2:f9:0c:d6:bf:f4:dc:56:4e:1b:30:5c:
b5:92:e5:75:10:53:01:da:9c:6f:72:b5:b4:d1:95:ff:0c:7c:
a6:ef:99:06:66:54:e1:a6:50:2e:8d:2c:36:49:ea:8f:6f:1b:
67:51:a9:94:97:07:e8:04:26:b6:58:06:07:c0:5b:18:41:0a:
9f:31:50:0b:c0:40:86:d8:09:f8:b3:ff:84:f5:55:b0:c8:86:
6b:5c:b6:5a:fd:98:2c:dd:bd:df:9b:5b:1b:2c:d7:78:ee:11:
38:d1:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:13 2025 by rpki-client