Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
File: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft (raw, json)
Hash identifier: xHJf+fLrRzmgJ0qATzsJYm2qsDBqgkK8d8G0UQS9Suo=
Subject key identifier: 2C:D1:4F:E7:D9:97:1F:57:16:61:7E:0E:14:22:0D:6C:0A:27:A3:E2
Authority key identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
Certificate issuer: /CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Certificate serial: 0194BBCDFAD40C28A557B8D80E3C29128830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
Manifest number: 0A04
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: CyEvz68_PuSD2VXrrDfN85-80B0.roa (hash: iumx0jfFgEFRTvhq+tByJZI5kHgTeLx3n+N6ZSqFUeI=)
2: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl (hash: ssZVYNnPwvKSpyusYEUqmeZdLgirNoBYOfud7D/iIh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fa:d4:0c:28:a5:57:b8:d8:0e:3c:29:12:88:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=2cd14fe7d9971f5716617e0e14220d6c0a27a3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:26:75:72:1d:f9:d0:0e:51:9d:a3:ba:d0:
64:13:a9:6d:93:40:01:65:b9:be:ee:f4:32:b3:54:
8f:69:53:b8:ee:0a:0e:9a:b5:ff:b2:7f:4f:64:dd:
89:85:21:5f:c7:b7:99:5e:86:e4:fa:db:f2:ee:96:
ee:b4:57:a7:9b:b0:42:13:2d:20:21:eb:4c:ea:64:
4a:ba:a4:40:25:85:e8:b5:98:b0:e8:89:8b:0e:14:
82:64:0c:43:d7:ee:8d:51:50:49:a4:46:13:a0:55:
58:27:62:24:9d:5e:5d:c9:c2:97:57:22:d2:8b:44:
c5:85:ee:2f:af:5c:47:09:66:51:2d:de:6e:b1:06:
ff:be:43:6a:d3:4f:a8:1f:d4:14:56:99:7b:c2:f2:
33:27:ab:4d:c2:8a:3e:de:5b:3d:9b:37:57:7b:a7:
ec:02:83:2a:cf:a1:aa:67:99:86:1a:0e:c0:ea:5a:
7a:ac:b7:e2:d0:ef:98:bb:f5:4c:01:3b:36:36:c7:
c2:9d:f1:cd:cf:28:8c:5a:60:b7:37:b6:86:52:89:
c9:27:25:64:c5:08:bd:b9:4e:3c:38:8f:4f:56:e1:
96:3f:0e:8f:f3:d8:69:f0:6e:e4:1d:5b:ff:72:18:
07:78:ee:34:49:cf:77:4f:15:9b:a5:38:29:fe:29:
c9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D1:4F:E7:D9:97:1F:57:16:61:7E:0E:14:22:0D:6C:0A:27:A3:E2
X509v3 Authority Key Identifier:
keyid:A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:20:65:ef:2a:1c:e3:0c:a6:39:9d:a9:4c:88:eb:9e:e6:4b:
f0:64:dc:06:70:b8:0a:10:c1:d9:6d:4a:8b:f7:72:4a:27:62:
e9:77:09:d7:ab:96:62:d2:56:ea:37:fe:f1:34:21:03:48:f8:
71:7d:44:c8:9a:7d:08:d0:e3:43:fd:91:72:67:2f:af:f8:3a:
5a:df:62:dc:a7:2f:4b:91:23:e7:75:ba:68:f8:cb:13:c3:fe:
ac:04:e5:70:9c:43:ff:03:4f:19:fd:0a:97:5c:b3:3f:49:56:
0e:3b:91:53:4a:d0:35:76:6d:e1:19:07:08:1b:bd:2c:d0:75:
e1:03:6f:14:a8:ef:e5:42:e2:6e:b5:60:88:e6:1c:70:95:85:
4a:2a:90:43:bb:b4:9b:56:9c:b6:2b:52:b2:77:20:24:98:4a:
d4:1b:8c:67:d6:c2:17:86:a7:4a:7d:25:4b:d2:20:6c:6d:ac:
b9:76:1f:d3:ca:e8:da:22:4b:b8:d1:cb:45:62:b7:32:08:32:
85:34:59:54:fe:4c:87:5c:b3:a3:cd:39:c0:b7:41:d8:b5:85:
2f:7e:e2:45:a0:6a:e6:b3:cd:02:9c:40:90:7c:f6:6e:05:1d:
61:55:dc:09:8c:7b:22:cf:a9:ff:94:42:c4:de:e3:c6:8b:15:
d0:a0:ce:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:37 2025 by rpki-client