Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft
File: pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft (raw, json)
Hash identifier: 8ka+7vyUkDHkXmqzgyHtkdLiOoCOFySy4u089A+BJ4A=
Subject key identifier: B1:60:97:1F:DA:1B:92:6B:23:B0:D5:C7:EC:03:3C:17:45:47:52:BC
Authority key identifier: A6:5F:99:56:03:66:3A:56:94:30:CC:C6:17:28:7E:91:9D:F1:44:A0
Certificate issuer: /CN=a65f995603663a569430ccc617287e919df144a0
Certificate serial: 0194BCA9B4D9F2A7C5337685519F21BD3372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft
Manifest number: 0F49
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: bOKc5OfkNTYPFxlTts0wqCFe3RM.roa (hash: V84JFOGtu1RZTKKpVLc0/478v9UFmxFvSlNuGf0rXZ4=)
2: pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.crl (hash: E2raZiRNL3qJBpzSs7279+xSxG7z9fHVkbJTD3EqUHI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b4:d9:f2:a7:c5:33:76:85:51:9f:21:bd:33:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65f995603663a569430ccc617287e919df144a0
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=b160971fda1b926b23b0d5c7ec033c17454752bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:da:51:7c:f9:2a:6d:ea:23:0c:01:fc:d6:
e4:30:ca:a7:be:21:32:28:d8:c7:29:5b:fe:17:c0:
93:f2:a0:67:2d:89:0d:a4:f6:a9:b1:70:49:a8:20:
d5:12:30:29:a1:f0:d8:9e:4f:00:56:7f:77:dc:00:
00:e8:96:c0:79:73:2b:c1:5c:48:dc:9d:56:19:0b:
ac:b5:23:d1:82:f0:cd:e9:3d:0c:a5:27:ae:8d:62:
f0:d8:17:a7:1a:e6:7d:34:74:8e:cf:01:e9:24:f7:
14:ee:ec:95:54:b0:31:7d:7f:0d:73:ea:f5:6d:09:
b7:65:4a:85:19:4e:27:2e:ce:2a:f0:df:25:df:23:
dc:b2:12:85:bf:f6:40:0e:6d:8c:41:a9:2c:4a:57:
d9:33:b3:03:fa:83:53:3d:7f:e1:fe:99:fd:13:96:
92:33:aa:15:15:e3:4d:35:f5:ab:db:47:2b:b3:b6:
e4:15:45:57:11:e1:ec:26:48:86:d7:dd:c4:44:d1:
c5:57:56:ce:04:9f:e3:54:c8:fc:dc:3d:55:09:df:
0a:0b:79:17:e7:ff:64:9d:e5:68:d6:ef:35:0e:3c:
4d:54:90:70:f2:5f:8f:b6:bc:d3:bf:9f:9a:d6:56:
98:95:9a:d5:84:4f:05:eb:11:b9:73:14:9b:64:43:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:60:97:1F:DA:1B:92:6B:23:B0:D5:C7:EC:03:3C:17:45:47:52:BC
X509v3 Authority Key Identifier:
keyid:A6:5F:99:56:03:66:3A:56:94:30:CC:C6:17:28:7E:91:9D:F1:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a0:5c:50:a7:cb:7a:ff:a2:11:b7:a7:81:82:01:a5:54:c0:
1e:9e:12:4c:62:47:1e:88:1f:ad:b4:18:06:5e:1a:b8:a7:cd:
68:1b:6f:af:be:df:b5:81:de:c7:13:e0:50:7f:39:2a:ba:60:
56:a4:6f:7d:6c:11:f4:6b:f7:7a:7e:31:56:e3:a3:8c:df:13:
83:6a:68:26:ba:99:ec:73:73:df:f7:cf:37:61:9e:a0:90:d6:
a7:3f:97:99:ff:51:1e:73:eb:c0:82:8d:01:34:cf:a9:6e:25:
9a:bf:e3:25:9f:10:0d:83:8f:15:13:0a:c3:b8:49:4f:df:48:
5c:69:58:a1:8d:64:cc:44:b4:5e:7c:88:2f:45:d5:94:ef:56:
85:48:14:83:58:46:04:25:9a:83:ba:41:71:ba:c3:5d:00:a7:
15:bb:5b:58:32:b9:60:36:ca:76:fa:fd:32:4c:1c:58:65:9b:
40:9c:09:ea:de:a6:e8:0a:25:df:9b:36:fc:0a:ea:00:6e:95:
d7:7f:65:31:94:f6:98:7e:c5:99:dd:8a:6a:9a:57:3e:4b:19:
5d:6f:54:94:0f:d9:b0:98:44:e2:8a:97:1b:86:19:de:79:9d:
2f:26:ed:2f:ec:ff:2c:87:dd:4a:5b:df:4f:f2:8a:c9:42:d7:
d1:90:3b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:29 2025 by rpki-client