Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
File: PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft (raw, json)
Hash identifier: J4U01ilmQmCiy5YhQXI9PUNIv+llGfFa3h17W6ROkO0=
Subject key identifier: 0D:C3:2E:F7:01:4B:CC:75:7E:0D:D6:E3:21:37:3C:18:2B:96:CE:75
Authority key identifier: 3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
Certificate issuer: /CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Certificate serial: 0194BCE0EDEC282D8B68B5F6CF8C8530854F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
Manifest number: 0947
Signing time: Fri 31 Jan 2025 15:00:45 +0000
Manifest this update: Fri 31 Jan 2025 15:00:45 +0000
Manifest next update: Sat 01 Feb 2025 15:00:45 +0000
Files and hashes: 1: 4HFAWmQXrJvJPwvQ-nacdREAjwA.roa (hash: smesMzM3abS3/IiONa1NHYIBIDWL+noqBcVPlJGz8P8=)
2: PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl (hash: B8SGFQB91Z6eSwwOJDNvMGyGPHSzSli+uiBYmWgIoao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ed:ec:28:2d:8b:68:b5:f6:cf:8c:85:30:85:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Validity
Not Before: Jan 31 15:00:45 2025 GMT
Not After : Feb 1 15:00:45 2025 GMT
Subject: CN=0dc32ef7014bcc757e0dd6e321373c182b96ce75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:02:a1:b7:b1:1f:96:69:99:de:19:06:9f:
43:40:dd:ba:f8:8a:5c:be:5e:9f:3e:ce:de:dd:ee:
67:2e:f0:8b:f1:6c:8e:70:42:65:1c:ca:83:56:c0:
7a:05:25:1a:2c:0e:3e:07:c5:fc:35:d5:53:b9:af:
35:48:88:b7:c6:35:56:bd:42:bc:97:29:97:60:62:
d6:49:47:a9:7a:f7:a5:64:86:74:af:5b:ae:4e:29:
cc:5c:c6:5b:1a:7b:44:dc:1f:5b:2f:ec:29:6c:c7:
6f:e4:26:4d:8e:31:30:06:c6:75:3e:3e:6b:9e:12:
1f:ba:52:b1:75:5f:e5:8b:ad:c0:4b:e6:37:e7:ff:
a0:fc:56:b2:d8:09:bd:b7:99:2b:7d:64:49:55:4e:
62:53:35:4e:55:71:f2:12:26:90:ba:68:c8:43:70:
0c:59:1f:6f:47:2d:96:17:5f:7d:43:dd:46:a5:e1:
ae:88:dc:5d:cf:19:d2:56:32:5b:4d:05:c0:f8:e3:
57:47:27:10:99:ea:c8:36:fe:13:75:42:d6:8d:ce:
67:8b:6a:0a:d3:32:d8:2b:1b:d1:a2:c0:2b:23:36:
43:3b:47:49:b1:80:43:75:93:bb:8c:9e:9b:fb:82:
f9:31:ba:e9:4f:34:2c:09:9c:cb:24:d6:fb:4e:ee:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C3:2E:F7:01:4B:CC:75:7E:0D:D6:E3:21:37:3C:18:2B:96:CE:75
X509v3 Authority Key Identifier:
keyid:3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:da:c9:72:e9:0e:77:a3:94:6f:2c:3c:25:a1:34:24:bc:42:
7a:eb:18:a8:34:8d:2d:fb:c7:af:59:f5:93:40:19:e2:b5:83:
b2:4a:7c:6f:87:21:f8:6d:41:c4:58:27:b1:d7:79:d7:08:5a:
19:b5:58:b6:6c:8c:ff:a9:ce:76:2a:83:1d:31:a0:cf:f1:14:
7a:04:f8:ea:31:04:aa:f8:1a:35:2f:5a:09:2a:09:2c:ae:7e:
ce:7c:f7:0e:26:52:f3:26:df:65:3b:e7:59:fb:7c:2c:e3:4c:
f1:63:7c:9e:4e:ea:27:54:b7:ec:92:b4:82:54:8a:61:bd:a9:
ca:3a:da:80:2a:07:f0:87:6b:37:ab:45:c0:e7:4d:37:39:a6:
47:f8:19:51:6c:3f:ab:f9:48:8e:1e:18:e5:fd:6a:2d:f7:bd:
a8:d2:35:d0:6d:f3:0b:45:56:9b:ce:ec:98:52:f9:a0:17:43:
8b:8d:4b:02:9a:10:c0:23:32:42:14:fb:bd:6f:7a:1d:ba:7c:
c5:e6:34:11:36:b7:5a:ea:ed:13:b6:b6:65:fc:ff:25:60:07:
03:b3:df:82:4b:fc:0b:8f:1f:31:7b:53:a6:64:d0:f5:9d:ad:
0f:5e:b9:b4:e0:e5:6d:1d:b5:9f:fb:a3:89:ce:bb:4c:1e:26:
0f:34:24:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:16 2025 by rpki-client