Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
File: pLZdoXU_tO7tuG_ah906-mnYYtA.mft (raw, json)
Hash identifier: ibWRCwGkAL1O8NPgPacR0NAR9dbcbzY4lvY2ws3eShA=
Subject key identifier: 55:18:3C:99:7F:3B:CA:36:5A:67:86:6E:BE:19:4D:05:A5:60:9A:4D
Authority key identifier: A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0
Certificate issuer: /CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
Certificate serial: 0194BD8553A2A37C0457972EB8343C75480E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
Manifest number: 07A5
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: 9VAtH6rT9AmgMjM5y2MsDg-1uuk.roa (hash: wQrCWKGL3Sn9wGoFnk6i9VJ1UdYXoGTZv1+i2lw0LfY=)
2: pLZdoXU_tO7tuG_ah906-mnYYtA.crl (hash: mR9XWkie++OCp5PmMwJWWG041ro77sEghJw2Xa4hdRo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:53:a2:a3:7c:04:57:97:2e:b8:34:3c:75:48:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=55183c997f3bca365a67866ebe194d05a5609a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:57:50:6d:bc:11:4b:97:07:e3:68:53:f4:
11:51:f1:0e:19:db:b5:42:3d:84:4a:3a:51:b8:56:
e7:06:48:13:df:ff:b5:a8:4f:9e:2a:66:64:da:74:
f0:fa:ee:f6:04:6a:3c:39:52:07:9d:82:4b:78:8b:
42:64:63:04:d7:fd:9a:12:8d:5d:79:59:35:13:d9:
ea:a1:b5:6a:46:1f:2f:f1:e0:d8:bd:82:43:bc:66:
ec:94:2d:f7:3b:e4:d3:ac:88:73:d4:06:94:7e:04:
cb:70:85:a8:45:76:41:97:d7:51:98:19:07:4c:85:
a1:ba:bb:3f:63:a2:4b:4f:e7:83:dc:c2:e0:b5:0e:
b4:60:2a:1e:f2:f7:17:4b:1b:d4:f6:64:0b:f6:c9:
93:b8:4c:ce:99:86:5b:1e:8c:98:39:d5:79:73:1f:
1d:ae:78:29:42:e1:bd:60:e5:b7:9a:d0:dc:73:05:
f4:42:39:82:e7:71:1f:b1:f6:28:c6:18:f4:ca:08:
22:54:a3:fc:88:b7:4d:9e:ea:49:17:ec:99:c6:de:
8e:8a:da:c7:14:77:c2:fc:9c:ea:30:e9:e2:ba:3f:
8c:be:ff:f2:6c:0d:0c:f4:43:85:6e:d8:d9:b4:c9:
eb:e9:e8:0f:73:7d:83:38:de:27:ff:57:17:64:50:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:18:3C:99:7F:3B:CA:36:5A:67:86:6E:BE:19:4D:05:A5:60:9A:4D
X509v3 Authority Key Identifier:
keyid:A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:bf:67:ea:9b:d4:19:8f:57:f8:ab:bd:71:01:0b:ac:4b:33:
0f:40:8e:b7:8c:3c:7c:cc:f9:b3:f0:d8:44:b5:05:0f:12:92:
b9:ad:fe:25:2d:5c:f5:81:75:fa:21:62:94:6f:34:4f:a5:28:
43:fa:c1:ce:5c:c1:b9:08:d0:fd:9b:59:1a:55:dd:b6:af:64:
ef:c9:dd:d8:f8:d3:c6:06:b5:ca:f4:84:2f:b4:fa:19:02:11:
35:0d:99:63:3f:9c:41:16:c0:21:ab:34:d8:ad:6a:22:56:3a:
aa:e7:51:87:66:c0:51:69:20:98:3c:68:f3:26:49:43:a7:7b:
c0:99:48:9c:0c:de:3b:e0:6f:2b:14:d2:e9:b2:08:c3:ef:14:
19:26:5e:45:d8:ec:d2:ba:99:9b:bd:35:4a:41:a2:62:55:b6:
4b:92:31:81:6a:14:b8:29:27:85:59:73:54:db:04:9e:5c:33:
f4:c6:18:c4:b3:4d:30:46:4e:b6:cd:35:eb:56:45:ce:7b:c3:
b0:8d:54:ca:2d:98:83:67:4f:82:6a:b8:a8:e0:52:0f:72:9b:
55:4e:99:26:40:f1:63:0f:2d:5b:08:d9:21:66:d4:2e:20:6b:
28:4c:1b:1c:78:55:2a:19:e4:41:b8:8a:a4:8d:55:5a:1e:7f:
6d:0c:62:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:22 2025 by rpki-client