Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
File: pzh53iWUz91MnkIlVWKBsgjZRhQ.mft (raw, json)
Hash identifier: PLpGpzyNdeIwxXrUqAKgh9PA+GTQC9RwL01e9o4fz2U=
Subject key identifier: 31:53:EB:F9:07:30:0A:C0:40:AB:F7:0E:D4:4F:33:C3:95:CB:DE:FB
Authority key identifier: A7:38:79:DE:25:94:CF:DD:4C:9E:42:25:55:62:81:B2:08:D9:46:14
Certificate issuer: /CN=a73879de2594cfdd4c9e4225556281b208d94614
Certificate serial: 0194BC3BCB1B581143B62D59D8E8D79865EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
Manifest number: 06E6
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: jCdTYmvYMmAVCpwgaEf86kYug58.roa (hash: ztqwVKV63uIGzbrcGebHuh3wlQjH5xZyStSjcOzpGqU=)
2: pzh53iWUz91MnkIlVWKBsgjZRhQ.crl (hash: BAt57XJm249EWIH1nsWwaSyO8LpSvLNga15hTxpHLOg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cb:1b:58:11:43:b6:2d:59:d8:e8:d7:98:65:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73879de2594cfdd4c9e4225556281b208d94614
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=3153ebf907300ac040abf70ed44f33c395cbdefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:b5:93:27:5c:8d:d0:64:06:b0:8b:42:a0:
7e:19:f4:9c:48:ba:2c:47:35:eb:ec:aa:41:b6:b8:
64:c5:01:f0:6f:a1:e8:b1:b1:8a:a9:8b:b8:07:b8:
50:78:f7:41:a2:dc:9f:09:73:5e:27:d1:7f:d9:a4:
47:f9:97:d5:e4:1f:81:4d:36:aa:0c:95:db:28:f0:
4d:a0:4f:c8:fd:15:92:f2:df:0f:a5:9e:22:ab:d2:
d3:81:c5:99:7f:2b:6c:95:41:2f:5a:8b:26:dc:c3:
25:d9:19:b7:4e:68:28:0a:02:d3:07:5d:44:4c:a0:
1e:96:7f:34:cd:52:9c:c7:5e:da:a5:27:59:68:ad:
ec:77:05:50:4a:92:f2:e3:cf:e5:07:50:c5:37:4b:
94:62:67:bf:c4:4d:88:80:29:b0:cf:17:3a:87:e3:
76:0c:27:40:b5:a0:fc:c3:91:82:8d:e3:41:ca:76:
15:dd:db:71:13:c9:c7:b2:d2:4b:8d:63:3f:5a:d0:
5e:e2:ad:cf:41:a6:22:cb:8f:61:e4:a6:16:d8:d8:
1d:5d:32:29:19:fa:2b:54:4a:4f:68:d2:65:e4:dd:
30:ee:d4:00:bc:d6:43:f6:b5:58:89:51:38:07:b3:
5f:ab:c3:28:49:57:03:bc:7b:2d:0b:46:b3:61:dd:
f3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:53:EB:F9:07:30:0A:C0:40:AB:F7:0E:D4:4F:33:C3:95:CB:DE:FB
X509v3 Authority Key Identifier:
keyid:A7:38:79:DE:25:94:CF:DD:4C:9E:42:25:55:62:81:B2:08:D9:46:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7a:ce:be:e3:2d:71:75:d5:3c:f5:39:8b:32:8b:12:bb:12:
37:9f:64:91:b9:b6:d4:4e:13:d4:7e:43:e8:85:b9:76:a3:d8:
d5:b0:06:b1:f5:43:58:a8:9e:d5:7f:4e:10:ab:b4:f1:c0:e7:
9c:03:fb:63:6e:76:f4:4c:da:f1:82:9c:16:be:cb:27:d4:cd:
17:27:23:66:20:0d:dd:39:70:9e:0a:2b:ef:5f:e9:3f:10:ce:
ae:eb:05:1b:02:02:c1:9c:17:5f:75:56:f7:2f:e9:21:03:df:
dd:e8:c7:44:24:4b:1d:2f:00:ea:d4:26:33:14:c3:ae:81:c2:
cc:2b:38:8b:aa:47:b8:8b:96:29:40:19:bc:12:8d:01:b2:5b:
6a:28:86:53:0d:35:f5:4d:d2:97:75:b0:9f:e8:b1:93:dd:9c:
87:9e:13:6e:bb:79:4a:c6:f0:e8:a2:2d:91:e0:cf:c3:3c:d2:
30:f1:cd:7b:2f:0e:a7:32:c3:e0:ba:f9:3e:74:44:c8:b2:4d:
1f:3c:b4:b4:c1:89:d9:2e:42:4d:84:de:03:d3:35:1a:a1:20:
d6:00:b8:69:4d:1c:73:bf:1a:d0:55:45:e2:8b:7b:6b:ed:77:
df:c9:f7:6f:9f:da:d3:cf:5e:e8:41:26:e1:f6:d1:23:f8:b1:
b2:a1:fc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:20 2025 by rpki-client