Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
File: pzfikBac_OajOKZrykXP5jXRVEY.mft (raw, json)
Hash identifier: DCXHv0eIiV1q5+M0ELXKsf13OV5Thpo5VxaZhq2tlpw=
Subject key identifier: 73:E4:B7:29:B5:0D:23:0A:4E:0D:0C:94:73:9B:3C:83:E4:DB:62:70
Authority key identifier: A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46
Certificate issuer: /CN=a737e290169cfce6a338a66bca45cfe635d15446
Certificate serial: 0194BC3C16D6332FDDFA26795F8DB85912A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: pzfikBac_OajOKZrykXP5jXRVEY.crl (hash: 9hOEDLFSz/UgaI7QIG2Kx8V/BRcCuY6lfAWi1zs8jpY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:16:d6:33:2f:dd:fa:26:79:5f:8d:b8:59:12:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a737e290169cfce6a338a66bca45cfe635d15446
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=73e4b729b50d230a4e0d0c94739b3c83e4db6270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:88:10:bb:0f:4a:a2:1d:3c:51:b4:14:ca:
08:4a:a7:48:51:05:b7:91:5e:57:d1:2f:de:8a:b6:
7e:37:4f:15:d7:74:bb:e8:f5:39:7b:e9:7a:6e:8a:
ec:28:c3:b4:3a:0d:21:3d:9d:72:cd:2d:6f:23:e9:
41:f5:2f:49:2c:23:07:ac:ab:cc:0d:e2:ed:4b:ea:
b0:37:b1:6f:7c:e4:21:31:40:38:da:35:17:f2:1a:
97:53:ec:ca:62:50:62:5e:b1:e2:64:b0:11:80:db:
9b:b2:ca:d0:0d:86:ea:e8:52:a8:53:ef:a4:d8:60:
5b:ad:bd:25:c0:27:d7:c3:b0:3b:cd:20:bf:7c:df:
a0:15:87:c9:80:eb:f6:84:de:60:f6:aa:09:e8:aa:
a2:f8:b9:e9:af:e2:66:aa:68:aa:f7:a4:2c:01:7c:
e6:fd:cc:e4:7d:b7:10:50:7d:68:73:46:a0:09:06:
37:57:bf:d3:fa:da:b3:78:4b:de:a8:be:d1:d3:e9:
87:8a:b3:32:65:95:82:31:12:f8:cd:6b:58:92:e4:
fb:ab:b4:8f:f4:84:12:ea:8e:a6:2c:4b:51:2e:7d:
04:0f:7f:b6:01:69:74:a1:6c:0f:27:8f:84:4f:4b:
2f:cb:69:19:ed:c7:a7:d1:cf:e9:12:93:4e:a5:dd:
8f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E4:B7:29:B5:0D:23:0A:4E:0D:0C:94:73:9B:3C:83:E4:DB:62:70
X509v3 Authority Key Identifier:
keyid:A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c4:e4:4e:ee:b2:40:fd:cb:2b:bf:05:6f:93:64:cb:af:dd:
9d:b6:70:7f:e1:4c:00:03:ad:c9:93:74:6d:ec:19:19:4f:97:
fd:da:2b:43:f9:4b:08:6f:8b:f8:16:76:7f:63:a2:18:18:3d:
0e:c5:be:3b:c7:c5:e3:71:80:56:96:74:0b:ef:7a:73:95:4b:
4d:98:c7:a4:c7:d5:67:ac:bd:b6:66:58:f7:94:53:45:c5:7e:
f0:85:f3:68:79:a6:94:a3:cc:27:4b:c0:01:b1:cf:c8:0e:21:
0e:b5:e8:91:01:1f:10:c5:a8:a3:3d:50:cf:c6:11:cf:1b:b0:
a1:9f:aa:8a:46:33:90:88:43:bc:02:85:47:31:2d:aa:0d:94:
5a:0c:c1:26:ad:ff:5d:4b:7e:8a:1a:b8:b6:78:73:43:2d:1c:
b6:7f:29:b6:d1:3c:5b:ac:21:fa:6f:90:89:c3:70:fc:44:3d:
81:37:35:a8:f0:d6:6d:59:d3:1d:c5:da:d8:cb:73:4e:15:d0:
ea:14:77:de:bc:5b:83:64:24:85:5e:0d:ec:51:0a:10:90:c3:
19:d0:9a:a5:8c:d3:fd:4d:53:16:bd:36:0d:1f:eb:ae:c4:7d:
fe:42:3a:c9:5b:cc:1b:ae:e0:2b:b5:b5:7e:6d:6c:09:07:e0:
fe:27:e6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:47 2025 by rpki-client