Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/051b82-06c9-48b7-b548-98d5e5d90473/1/Pzb_0WIVIeks8ueBQZDTolPgBjc.mft
File: Pzb_0WIVIeks8ueBQZDTolPgBjc.mft (raw, json)
Hash identifier: vtcrJSrdEtMCF06Vi0dVWPqRz1zWZdV9CvCZGAvW9/I=
Subject key identifier: 34:7E:F0:F9:B1:59:35:49:71:1A:06:0F:C1:5A:F4:9C:77:FE:C9:C0
Authority key identifier: 3F:36:FF:D1:62:15:21:E9:2C:F2:E7:81:41:90:D3:A2:53:E0:06:37
Certificate issuer: /CN=3f36ffd1621521e92cf2e7814190d3a253e00637
Certificate serial: 019488851ACE36CDD0F98F1286D118B79799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzb_0WIVIeks8ueBQZDTolPgBjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/051b82-06c9-48b7-b548-98d5e5d90473/1/Pzb_0WIVIeks8ueBQZDTolPgBjc.mft
Manifest number: 0336
Signing time: Tue 21 Jan 2025 11:00:11 +0000
Manifest this update: Tue 21 Jan 2025 11:00:11 +0000
Manifest next update: Wed 22 Jan 2025 11:00:11 +0000
Files and hashes: 1: Pzb_0WIVIeks8ueBQZDTolPgBjc.crl (hash: e+h51NiQytRQBYPEza39GYIxJhQkZnfC7ftO66J5fQU=)
2: lCCuB0jDyuvAYXLOJTOn_cNgWc8.roa (hash: HjbYsGUKFf1MWsIB+SCbfNSuwlwT3QlGjytiQ5MDhE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:85:1a:ce:36:cd:d0:f9:8f:12:86:d1:18:b7:97:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f36ffd1621521e92cf2e7814190d3a253e00637
Validity
Not Before: Jan 21 11:00:11 2025 GMT
Not After : Jan 22 11:00:11 2025 GMT
Subject: CN=347ef0f9b1593549711a060fc15af49c77fec9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:a3:2d:7c:05:0b:67:a7:9d:99:b6:2f:a3:
32:dd:e3:8a:36:67:d6:f6:95:a5:c5:f6:20:68:0f:
a2:76:24:2e:b3:80:c2:29:98:ba:b7:55:e0:26:6a:
8c:ae:4d:49:96:2c:9d:10:41:7c:1b:fe:e9:8c:35:
0c:4f:6f:c1:20:7f:36:5a:c3:b9:3a:e2:57:c2:33:
e9:d4:11:04:67:d6:19:41:05:a7:af:5a:7b:66:91:
4d:94:2c:a9:1e:12:39:34:16:65:fe:28:60:36:f1:
75:3c:be:7d:8e:a0:63:2a:f4:28:5f:f2:a5:d6:78:
7e:d1:bd:44:67:fd:18:0a:89:df:00:f9:4f:38:44:
1f:d9:29:52:f5:79:4e:74:a6:9f:aa:11:78:a5:85:
e7:1a:41:4c:2a:ea:09:84:36:7d:58:68:3f:42:73:
8c:28:92:6f:5c:ee:58:b9:62:cf:51:b2:d8:31:cd:
a1:8e:c3:5e:6e:3e:a1:be:89:92:4f:a7:a8:63:c5:
ff:6d:1e:45:97:3e:8b:88:ed:a2:7e:04:65:c7:5b:
8c:8f:9a:5c:a4:63:4b:05:ca:1c:d1:6d:84:82:db:
77:19:13:70:38:39:fc:01:a5:26:49:3e:62:ae:32:
8a:e3:98:16:9a:09:1b:d9:fc:50:6e:72:a4:ab:85:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7E:F0:F9:B1:59:35:49:71:1A:06:0F:C1:5A:F4:9C:77:FE:C9:C0
X509v3 Authority Key Identifier:
keyid:3F:36:FF:D1:62:15:21:E9:2C:F2:E7:81:41:90:D3:A2:53:E0:06:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzb_0WIVIeks8ueBQZDTolPgBjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/051b82-06c9-48b7-b548-98d5e5d90473/1/Pzb_0WIVIeks8ueBQZDTolPgBjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/051b82-06c9-48b7-b548-98d5e5d90473/1/Pzb_0WIVIeks8ueBQZDTolPgBjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b2:92:08:e2:db:a7:13:9e:50:ac:4b:05:88:01:15:96:ad:
6d:40:c0:fd:d4:3a:9e:4a:bc:21:61:5b:c2:9e:5f:ff:40:55:
7e:3d:9b:42:9a:15:0f:ec:6c:bc:1c:f3:d9:30:81:0a:a4:19:
0c:58:d0:f2:5a:d9:cf:df:09:9e:87:f0:0d:b1:44:04:f1:0e:
23:91:cf:55:82:7c:14:71:e5:22:c9:d4:4e:ed:89:cd:6c:19:
0a:a7:e1:1b:47:c3:7e:23:4d:55:0e:60:72:b8:d2:49:5b:ae:
08:9c:f9:9f:dd:4c:c6:84:a6:7e:20:79:7e:3d:37:83:c2:f3:
53:52:38:28:2b:a1:b6:cd:45:e7:19:f7:9c:bc:64:53:6a:72:
17:f6:53:c8:08:75:f3:22:7b:69:f2:3c:25:09:58:33:b3:35:
aa:16:1a:cb:1d:88:57:ef:97:1b:9f:d9:93:ff:97:76:e8:35:
1f:04:5a:85:5f:4b:7b:fb:f5:f4:b9:35:d9:16:c7:a7:b7:b8:
33:db:8a:86:db:a8:55:0b:c4:3f:15:bd:38:a6:1a:40:bd:ce:
28:b9:82:04:ca:eb:eb:3f:39:0e:ef:76:40:d0:d9:bc:dd:40:
9b:c3:a8:45:3d:c3:0d:39:a3:b0:98:3d:e8:ac:69:71:9e:8a:
e5:02:85:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:53 2025 by rpki-client