Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
File: pz1kDZC_PWfySYE4zDcfZUZH3a0.mft (raw, json)
Hash identifier: dcIBskYF4A6QAH8Kmt1zMATeq8aeu0U93EpZ+zKeuIg=
Subject key identifier: C2:42:1C:8D:00:5A:2F:81:31:FE:38:E3:67:71:EA:C5:07:A6:CE:5B
Authority key identifier: A7:3D:64:0D:90:BF:3D:67:F2:49:81:38:CC:37:1F:65:46:47:DD:AD
Certificate issuer: /CN=a73d640d90bf3d67f2498138cc371f654647ddad
Certificate serial: 0194BBCE61D2A97476848C603DF7CB9E5568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: 5fcpJVl5DXDFgBV-5G0BOvh2tGg.roa (hash: urXegQalP46Ga7kO5s8Ojf4B2voXZNk4EbUTvjtFENw=)
2: pz1kDZC_PWfySYE4zDcfZUZH3a0.crl (hash: USS0DzkfkyeAwyWM21eMysGfELZoz+w2s+Z8nGKdn0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:61:d2:a9:74:76:84:8c:60:3d:f7:cb:9e:55:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73d640d90bf3d67f2498138cc371f654647ddad
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=c2421c8d005a2f8131fe38e36771eac507a6ce5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:86:73:91:33:81:8a:dc:66:dc:86:a3:42:
5a:35:fa:0b:c2:93:a9:1d:e7:cc:75:49:a6:62:1d:
ba:9b:bb:bf:8a:2f:5c:46:bb:4c:81:33:3f:2f:a7:
e1:3c:c5:4d:87:68:05:55:8d:42:37:31:79:a4:ad:
8c:16:13:65:6f:6b:2d:13:c9:86:a8:13:84:75:b9:
4c:1c:c6:af:0d:07:e1:7f:e2:91:fe:53:c5:52:c0:
43:c6:58:3e:eb:05:cd:36:85:1e:cc:dc:fc:b5:84:
59:26:93:68:74:54:b3:33:12:b1:49:6e:d7:66:2d:
9a:59:75:ed:7d:3f:f6:73:33:59:2f:12:5e:80:1f:
cc:13:b2:8a:a3:28:f8:37:0a:86:f9:7e:38:e2:2e:
af:a6:50:4b:4c:87:6f:e9:60:05:c9:db:92:d8:6e:
99:58:0d:3a:5d:e6:f2:ba:b1:6f:99:42:3a:c8:b8:
dd:a6:af:6a:ce:0e:30:d6:e4:9d:e4:d2:be:94:42:
27:ab:4a:50:8a:f0:3b:c5:c1:49:4e:80:b0:07:bd:
27:d9:19:97:c6:87:67:7b:2d:d0:f6:1e:4b:54:a8:
cf:96:06:1f:f3:5b:4b:a6:d5:f7:cb:0f:e7:e4:ee:
12:63:eb:a5:96:26:c5:46:5e:56:08:89:7f:e8:95:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:42:1C:8D:00:5A:2F:81:31:FE:38:E3:67:71:EA:C5:07:A6:CE:5B
X509v3 Authority Key Identifier:
keyid:A7:3D:64:0D:90:BF:3D:67:F2:49:81:38:CC:37:1F:65:46:47:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f3:70:bb:54:85:84:a9:64:25:f1:23:85:09:b4:05:fe:e9:
d3:85:ac:01:01:72:ba:d6:02:a6:59:7d:fb:23:5f:17:c2:d0:
c6:92:cc:49:9d:3d:93:f5:5a:e7:a8:16:c0:96:9a:4e:9e:bb:
21:8b:91:2b:82:d7:9c:b3:2b:43:df:c3:c0:88:e2:f5:f6:6b:
f6:8d:3d:4e:3d:a8:14:35:34:55:72:9e:48:a4:07:db:30:59:
39:ec:f9:bd:de:21:32:6b:4f:f1:ae:e0:f0:bf:65:1d:67:0c:
76:80:84:fb:91:91:68:a7:99:29:a2:08:4a:63:e3:6e:fe:1a:
00:7c:85:f5:c5:63:a8:2d:6d:9a:3a:37:4a:2c:2f:1e:53:92:
f8:cd:6d:63:11:38:de:24:f9:5f:09:13:13:5d:3f:15:99:20:
f4:fc:99:ca:11:0e:8b:1e:aa:e3:87:1d:a0:50:d0:7b:91:51:
fb:41:d5:f5:1a:3f:15:61:52:d1:c0:54:f2:94:75:59:b0:e7:
2e:d0:88:32:34:48:9e:6d:31:a7:8f:cb:e5:0b:fd:33:fa:b8:
9b:db:7a:59:3b:fc:cd:42:e4:9f:4f:56:3b:77:4d:68:dd:ca:
e3:75:c1:62:68:39:29:96:1c:18:20:b4:83:d8:ac:fb:19:ee:
cb:9e:50:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:56 2025 by rpki-client