Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/PZ-b4gVgNHgTFBdJoXlTM5mWUus.mft
File: PZ-b4gVgNHgTFBdJoXlTM5mWUus.mft (raw, json)
Hash identifier: AMWflOTjG0OhgZltIoNZ7f4jzWjY2ryfYpQLgmuo4Ns=
Subject key identifier: DB:B0:67:B1:83:42:67:AF:7F:99:AE:EA:66:8A:C4:D9:E3:FB:50:8E
Authority key identifier: 3D:9F:9B:E2:05:60:34:78:13:14:17:49:A1:79:53:33:99:96:52:EB
Certificate issuer: /CN=3d9f9be20560347813141749a1795333999652eb
Certificate serial: 01896640E55A26420E3038370DDCC27BF1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ-b4gVgNHgTFBdJoXlTM5mWUus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/PZ-b4gVgNHgTFBdJoXlTM5mWUus.mft
Manifest number: 0E3D
Signing time: Mon 17 Jul 2023 23:47:56 +0000
Manifest this update: Mon 17 Jul 2023 23:47:56 +0000
Manifest next update: Tue 18 Jul 2023 23:47:56 +0000
Files and hashes: 1: PZ-b4gVgNHgTFBdJoXlTM5mWUus.crl (hash: 7yvkauTIqAq/uELE1v2wARqSgfw1dNujBAq4YX2Pj+Q=)
2: y4XyX_hkWnhXFd0TnDSW4J7-wpo.roa (hash: XATEqXb6+AipygLjp4TpZ+ZsAPM2IGMrk/BbX6aoPpo=)
3: yTwVST57WTT1XQVifT1V-3qyLg4.roa (hash: nCo49aPuDeBQi+wWl1ZvJ/bThbRz1b4k0poboekQXUc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:66:40:e5:5a:26:42:0e:30:38:37:0d:dc:c2:7b:f1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9f9be20560347813141749a1795333999652eb
Validity
Not Before: Jul 17 23:47:56 2023 GMT
Not After : Jul 18 23:47:56 2023 GMT
Subject: CN=dbb067b1834267af7f99aeea668ac4d9e3fb508e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:fd:14:5e:57:8c:9c:a5:5b:76:70:c3:1f:
7c:81:be:d5:23:a7:81:ec:df:da:cd:84:7a:d4:2c:
53:11:be:37:72:a5:5c:1d:c4:af:1d:26:48:e7:9f:
17:e6:d5:64:e9:ba:88:95:8c:b3:0c:71:21:57:ea:
66:57:c6:29:ee:b3:1a:f2:a8:99:84:0f:f2:1d:36:
2c:bf:10:ef:00:24:b1:45:ba:b3:aa:e3:55:f5:43:
09:0c:5b:a3:b3:cb:12:be:7f:62:df:a5:7e:27:00:
8d:7b:f1:cc:b5:2a:8e:6a:d1:88:d2:ed:33:3c:07:
7a:bc:70:cc:a4:ca:81:8b:f8:60:5a:7f:f4:56:a6:
0d:42:91:4b:90:04:41:35:42:b4:44:89:31:3f:5c:
9d:3b:ce:3b:58:bd:ce:c0:d9:8d:90:9b:92:cd:05:
60:5b:d8:2a:73:68:07:ac:46:62:75:fb:d1:8a:d4:
0c:ca:c9:0f:1a:6e:0c:6e:a1:ff:b5:da:3f:14:ed:
44:37:04:3e:c8:1b:7d:f5:24:6f:e4:25:d0:b9:6e:
7e:1d:2f:5c:18:5d:90:30:2d:33:4c:d7:a4:95:f1:
60:56:8d:40:fa:1b:1b:7f:a5:32:f3:cb:e9:f6:5f:
44:21:a0:a5:86:1a:71:81:1f:bb:35:eb:d1:83:89:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B0:67:B1:83:42:67:AF:7F:99:AE:EA:66:8A:C4:D9:E3:FB:50:8E
X509v3 Authority Key Identifier:
keyid:3D:9F:9B:E2:05:60:34:78:13:14:17:49:A1:79:53:33:99:96:52:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ-b4gVgNHgTFBdJoXlTM5mWUus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/PZ-b4gVgNHgTFBdJoXlTM5mWUus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/PZ-b4gVgNHgTFBdJoXlTM5mWUus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:68:f9:28:8a:06:8b:1c:8b:a1:9f:af:37:74:fa:82:05:0b:
aa:29:13:e9:99:5e:71:38:1e:76:f4:f4:db:39:5a:4e:de:e4:
98:f1:df:b5:07:25:d5:9e:97:c4:a4:c6:82:f4:2f:f9:27:1b:
f0:b2:7f:8c:62:ac:40:33:82:7e:d9:c3:2e:ee:dd:c4:3b:a8:
b3:a5:cd:cc:a0:28:fe:15:cd:37:20:c3:16:3d:33:d0:f8:23:
54:3b:b5:e2:73:9e:61:5a:9d:f8:79:4d:56:c0:a4:98:d6:86:
ac:76:32:de:dd:75:a6:04:91:b0:f1:94:78:ee:54:d5:19:1a:
32:98:0f:46:fe:42:6c:04:1f:76:71:80:80:20:9c:0e:e5:61:
72:b4:63:ff:61:77:3e:7a:91:da:82:28:a5:24:c2:fe:ea:b2:
1f:7a:e5:1b:46:0d:fd:b6:a4:0c:ef:19:9d:29:5b:f5:6b:35:
a0:c8:fc:d1:1e:bd:da:11:70:4b:be:53:3f:51:a5:4c:52:de:
a5:36:37:39:32:05:3c:bd:92:b7:1c:12:b7:05:e3:7c:dc:ec:
18:15:55:f8:4b:8d:80:9b:77:96:63:0e:bc:57:aa:04:3f:64:
59:43:77:92:19:8f:59:de:b8:3a:f7:ad:3a:be:51:ea:e1:64:
4d:78:82:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:59 2025 by rpki-client