Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: jjZOaYq5Ki7taqrmdggmMY17Fe7j2FkEsMkjbplJdQc=
Subject key identifier: 7A:E6:99:9E:FF:4B:70:C2:30:38:55:EC:CF:78:5A:51:14:4A:BA:61
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 0194BCE07DC4342A7DBF75F0F57A50BD853D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: +2BvaZLorkFf7lXyp/rnH0EZVogEgJ6UxSBbrXvpVKY=)
2: QIZ7oB864tCgRt_o70Ipdd0FOK0.roa (hash: m8Sbl87AQlvrLt/hOAausP00tdMD076gdUCeqvLuA8c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7d:c4:34:2a:7d:bf:75:f0:f5:7a:50:bd:85:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=7ae6999eff4b70c2303855eccf785a51144aba61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:e7:28:62:eb:4c:3b:a0:a3:93:b5:06:de:
91:9e:02:3c:d0:58:5d:1a:0f:be:a5:3e:31:23:dd:
be:76:68:75:3e:c6:27:08:4c:0d:02:f3:be:94:a4:
6a:8f:38:87:56:b1:bd:20:c5:a3:f9:14:23:f1:c8:
66:8d:0b:f1:28:96:80:74:63:a4:c2:f7:36:7a:33:
79:b8:c5:09:54:1d:87:e1:b2:4e:7a:f8:70:90:a0:
d8:e4:8b:9e:7b:bf:fe:e8:b1:dd:61:58:23:15:0f:
0f:6a:46:66:d4:33:40:0d:b4:6d:f1:27:ad:87:f3:
67:94:a3:e5:c2:78:c6:7f:80:d3:22:3d:a9:f2:a8:
ba:f4:2c:94:e1:27:65:83:20:14:4d:c7:4c:11:1e:
9c:7f:39:ec:72:57:d3:50:c8:ce:f5:f3:c1:50:86:
8b:79:aa:b4:b1:b4:2a:84:90:a5:9b:c0:09:49:df:
91:c0:3c:03:53:e3:04:d9:7a:cf:d6:a7:18:12:9c:
43:a1:1c:72:8a:2c:66:8e:6b:b3:2b:57:60:c4:29:
9d:1e:db:49:91:d4:c1:27:35:65:42:f8:cc:37:4d:
6f:e9:76:ec:a6:a8:79:f7:63:25:c4:74:6a:0a:37:
a3:57:d9:4a:16:10:9d:01:66:c0:b2:c0:b6:14:ab:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E6:99:9E:FF:4B:70:C2:30:38:55:EC:CF:78:5A:51:14:4A:BA:61
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ad:c2:b3:83:85:e7:be:78:c4:f4:e9:67:66:ed:3c:7b:05:
05:13:17:a9:ad:bb:da:3a:1a:27:26:70:ab:86:fa:b1:99:73:
63:88:12:47:34:80:a9:26:42:87:b6:10:2e:b9:ae:43:e4:8a:
ba:31:50:69:7c:7d:83:34:e6:54:62:e4:d6:65:24:36:1c:e7:
11:98:c6:a8:fd:64:34:fb:02:07:c2:d3:2c:76:da:ec:49:3a:
2d:f8:d5:fa:23:3c:97:37:a6:3b:64:65:f8:1a:56:e9:db:04:
e8:e1:ba:fa:8b:57:f8:1c:4a:b5:11:48:b4:43:aa:95:57:01:
83:19:d3:3e:30:5f:09:eb:66:25:f7:4c:1a:f3:ad:49:f9:5a:
89:83:70:b1:61:f9:b7:ce:6c:a1:6c:64:6b:49:65:70:d4:18:
ba:41:3f:93:5c:c3:a1:a2:33:20:5e:bd:46:73:3f:a4:3a:df:
c9:b2:86:01:16:0b:7f:6b:a1:04:64:da:a0:e6:df:53:1a:18:
17:60:45:48:dd:8a:a8:0b:c0:90:97:48:54:0f:2f:23:3a:ef:
bf:87:ee:15:49:f1:49:b2:9b:5d:c6:14:57:a2:45:59:50:2c:
47:6b:34:57:45:2f:fe:33:c7:1b:65:90:21:89:2d:9f:91:78:
12:76:f3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:30 2025 by rpki-client