Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
File: PzTUjYQaUqQifUn6PvhbpavyIkg.mft (raw, json)
Hash identifier: UDMTvw7N7tml+akh+IOwkRxnqoZCx8NeXdbYIRjaDKE=
Subject key identifier: BA:12:B2:E5:FF:A4:D6:0A:B0:27:06:70:E1:C4:66:8B:5A:10:DE:9B
Authority key identifier: 3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48
Certificate issuer: /CN=3f34d48d841a52a4227d49fa3ef85ba5abf22248
Certificate serial: 0194BD8548307C95AC6A3ADE3B16657C2B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
Manifest number: 0340
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: 4boeBlk7o1BaTuZdEOVxwc-y71c.roa (hash: RGuBRtk99FPER/w90B0w3hwMlxFq4HdA7ruV2FfydxY=)
2: PzTUjYQaUqQifUn6PvhbpavyIkg.crl (hash: eUfJrUkuyVZYGJB0nUKy0k4oVjYXVWQ76d6WwVapdjI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:48:30:7c:95:ac:6a:3a:de:3b:16:65:7c:2b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f34d48d841a52a4227d49fa3ef85ba5abf22248
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=ba12b2e5ffa4d60ab0270670e1c4668b5a10de9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:24:b8:e6:ba:0f:6d:bd:ed:01:01:05:db:9a:
d2:df:5d:b3:c6:7f:26:6e:d6:f1:2b:a5:c6:ee:e2:
ca:e9:2b:21:a0:6d:ce:af:b4:e5:e7:c0:ad:bf:28:
d8:16:56:62:99:33:be:d5:bf:9d:03:c5:9a:e1:a7:
82:4a:8e:5d:82:2f:7f:45:cd:52:0a:d1:75:bb:16:
44:5d:4e:47:8f:9e:7e:fa:0a:24:6a:0a:09:cd:9d:
c5:98:26:c4:cd:89:a0:be:6e:2a:72:62:57:60:17:
74:3f:0f:c2:bb:a9:d1:ae:cd:c3:fc:60:4c:a6:03:
a6:3a:82:12:25:5a:89:5b:bc:7a:46:dd:f7:be:00:
50:5f:9a:8c:a3:06:83:a0:72:44:2b:aa:0e:f3:cd:
40:49:be:bc:c1:3c:9e:bf:e9:5b:cb:1b:46:52:31:
5f:3c:f5:9c:00:b2:f7:f5:0b:c5:da:11:da:5e:df:
55:d8:e3:a5:90:1a:1d:5c:af:6e:78:cf:80:20:2e:
14:e3:76:2f:61:fe:f0:95:bc:d6:24:b5:2a:cc:dd:
7f:a2:91:84:73:d0:56:89:3d:3f:b5:3f:ee:b2:ee:
3f:59:d0:48:16:a2:4e:2a:ef:b5:29:e8:e6:80:39:
f7:19:34:3c:4d:f7:7c:19:58:a8:23:3f:51:d1:4d:
ec:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:12:B2:E5:FF:A4:D6:0A:B0:27:06:70:E1:C4:66:8B:5A:10:DE:9B
X509v3 Authority Key Identifier:
keyid:3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:97:dc:ce:3c:37:cf:c4:d1:24:49:99:b2:1d:c3:3d:cb:04:
eb:b4:51:a9:38:22:c5:32:ac:11:6d:32:37:0f:01:0d:b8:4b:
07:3b:e1:ba:de:51:87:2c:e7:da:4b:cb:56:93:79:bb:7e:7d:
83:e9:1d:83:4c:79:72:78:62:5b:27:6c:67:33:8a:17:b5:56:
ac:c7:a1:3c:45:12:da:4f:28:27:38:3b:56:83:62:88:e8:8e:
92:53:c1:8b:33:d2:a2:8b:9a:ac:ba:17:2c:e9:62:55:b9:3b:
43:55:90:58:1b:54:22:fc:f9:ff:0a:4e:e7:97:1a:46:ab:f9:
2a:0b:dc:85:7c:7e:9e:da:f4:7f:be:62:90:fe:5f:2a:9c:2e:
42:22:af:09:77:62:64:f5:fa:49:bb:ef:b1:ce:3a:a1:b5:7e:
d9:18:03:15:bc:cd:41:f9:db:a5:e0:e0:36:00:a3:eb:d4:4d:
14:d7:bd:14:42:4f:8b:be:8d:71:78:3d:45:3d:4b:49:97:73:
07:09:54:be:dc:46:45:e4:d7:9d:86:17:8b:6e:ca:0e:96:b8:
4a:0e:da:b6:48:92:1f:a7:87:ce:a8:62:32:fb:48:c9:55:e4:
cf:d1:3e:08:68:47:83:a1:e2:f1:01:94:ce:5a:6b:10:44:54:
74:e4:59:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:13 2025 by rpki-client