Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
File: PZ--FcPNteA0NeJM9i8W-2xiOWw.mft (raw, json)
Hash identifier: qc8CfrEXir7GUC5DtcYaanWeDmciSNCg8qcKxb+6mvE=
Subject key identifier: 4C:A2:A5:AD:D8:BA:6C:A9:BE:64:EA:C6:69:3A:3B:18:FF:92:1C:33
Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Certificate serial: 0194BD17AA590332BE3DEC0FDE32CB24ECE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: Du4r0IcScgI4YpWJ-9I9INdoB6g.roa (hash: 5uHGYRf/yqBocoz7nK2AWJUng6JU07jGh7qJ3ZcIHek=)
2: PZ--FcPNteA0NeJM9i8W-2xiOWw.crl (hash: BRGE7QbdXLSkF5KDyw7KXOvHU+IrHThdSuIPiOWQp3o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:aa:59:03:32:be:3d:ec:0f:de:32:cb:24:ec:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=4ca2a5add8ba6ca9be64eac6693a3b18ff921c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:09:fb:e8:bf:c9:48:1a:48:fa:4a:23:10:d6:
cd:31:7d:99:92:a1:e1:63:97:ee:01:5d:14:3b:39:
42:ea:fc:e5:d1:03:4d:52:98:58:cb:5a:da:91:36:
36:10:c7:b5:d8:c4:da:b8:8e:2e:bf:1a:e2:10:31:
9c:79:ca:ad:90:0c:98:ec:eb:65:a8:a5:4a:46:53:
5c:d8:1d:2d:d6:f4:22:47:18:0d:4f:c0:31:f3:74:
a7:98:ef:a7:ff:1e:29:11:7d:e9:9f:5a:6e:c4:dd:
53:38:db:27:f5:fe:c4:52:5a:8c:96:97:43:6d:be:
05:f0:f2:a7:8c:3b:99:be:1c:4b:9c:c2:d3:6f:9b:
7f:df:29:c8:44:f8:4f:88:ba:79:9a:0a:db:08:a0:
b4:5f:6c:b3:3f:36:7b:cc:e1:12:a1:26:dc:35:ba:
2a:bb:6a:79:18:56:41:28:43:c8:78:4a:95:cd:fb:
ef:94:cb:33:7e:5a:4e:7f:ef:62:35:89:d5:b2:ad:
7f:5f:69:47:15:3a:84:cc:cf:74:61:8f:0b:6d:83:
30:69:1a:92:e9:ed:e6:40:eb:15:79:ff:3d:ab:41:
e8:d9:ff:52:1f:ea:36:73:0c:85:94:14:a3:98:fa:
d2:52:20:12:32:cd:5f:b4:e3:93:07:bf:09:25:dc:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A2:A5:AD:D8:BA:6C:A9:BE:64:EA:C6:69:3A:3B:18:FF:92:1C:33
X509v3 Authority Key Identifier:
keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:59:ab:49:a2:ca:bc:5a:d2:08:d6:dd:12:f1:19:8f:29:c5:
92:a2:57:2c:a2:cf:06:d7:10:4b:44:52:cb:57:29:fb:b3:d8:
49:5f:05:ed:a2:9f:72:cd:75:87:cf:64:38:a0:2b:c3:e7:7a:
5b:05:d7:a3:6d:a0:f5:ae:e2:6f:17:d5:df:54:d3:5d:f8:d8:
62:58:c3:a3:34:04:45:e4:cf:da:94:3d:e1:41:b8:ed:27:83:
03:e5:66:f8:51:6f:8c:d4:07:0d:cd:6a:fb:6b:59:59:03:e0:
ef:56:04:a0:fa:b9:34:6d:83:ee:6d:f0:1c:c8:56:c9:a2:72:
2c:9f:69:cb:b5:55:d3:6d:e8:ba:96:f7:0c:4a:08:14:c2:3e:
26:0b:6a:8e:46:17:3b:14:88:b9:e1:5a:ea:ce:45:05:46:e4:
6f:d9:40:a3:a3:a2:90:20:ee:d6:1d:44:a3:85:13:b6:98:ff:
18:89:bb:68:df:a5:25:f2:4d:a5:05:a2:36:40:75:30:87:d4:
e0:75:04:44:bf:0d:dd:2e:06:f8:60:43:ac:f0:d7:c8:70:c8:
13:63:1b:8c:5b:26:5e:94:a8:d2:16:a4:ce:9f:91:f9:54:a9:
64:1d:cd:1c:ae:23:30:e9:84:a3:6c:f3:e9:5b:bc:83:51:12:
ff:07:c6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:54 2025 by rpki-client