Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: p3c9bYwGhfwBeL1ngvbdU8kLJ01ZL0r+7PZOaJtzl+c=
Subject key identifier: 2B:F1:7D:70:DB:F3:D5:2C:85:5D:23:28:31:8A:03:73:16:E2:53:66
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 0194BC3C9F25EE61744D4FC45AF776B11AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 136A
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=)
2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: ha9wMfaXkJi1p8iMq76bXbngGFrQ9YsZe+qivqwr1cM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9f:25:ee:61:74:4d:4f:c4:5a:f7:76:b1:1a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=2bf17d70dbf3d52c855d2328318a037316e25366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9a:a1:66:c8:88:b1:64:fe:c1:f6:69:0c:93:
81:b4:68:c7:b3:a8:c8:fc:2c:b5:b6:3d:69:36:61:
b6:82:cf:db:c0:68:61:e0:bf:99:31:3b:56:4e:0e:
d0:cd:7c:73:72:47:67:68:cc:90:99:a2:c1:c8:de:
bf:db:e8:30:31:f5:ab:3e:5a:cb:93:d9:8f:43:96:
e0:d2:9d:b5:3d:4f:a7:3e:4b:b6:34:a0:49:ec:8e:
00:fb:cc:fd:a9:f7:73:69:88:fe:a5:57:8d:5a:8b:
94:37:51:eb:4b:98:1c:e1:56:f4:83:08:22:ad:4c:
de:8c:75:cc:ab:bd:cf:ae:a8:5f:c7:62:3c:7b:88:
3d:22:81:7b:4d:bb:9f:73:2b:c1:81:28:95:ed:08:
80:95:83:32:8c:d9:53:cf:b1:1c:ba:97:8e:09:e3:
c7:db:b9:c4:bc:ec:31:da:e1:77:03:eb:c3:41:a6:
41:86:42:be:7a:9c:57:03:2f:02:e9:6f:17:56:e9:
a2:98:23:c8:56:ab:12:45:b3:18:37:36:db:72:6d:
38:de:ef:0b:89:7b:8e:eb:ee:5a:b0:d8:d3:95:d8:
85:b3:8c:be:06:d2:92:16:e5:00:6b:ce:93:f9:c9:
8d:12:55:a8:cd:68:f3:57:55:1e:e5:ea:2e:ad:21:
e3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F1:7D:70:DB:F3:D5:2C:85:5D:23:28:31:8A:03:73:16:E2:53:66
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ee:2a:cf:a4:97:88:64:30:59:7e:4a:4c:f7:80:9a:a1:85:
28:22:73:1f:d7:04:1e:1e:88:6c:cd:fe:e1:e3:86:17:ba:68:
19:7d:e2:dc:ab:7b:30:f4:0b:9b:1e:22:43:63:3c:62:52:88:
6b:bb:91:b3:a9:a3:ca:3d:60:52:00:2f:08:c6:67:25:cd:04:
1d:ef:a2:93:70:a0:35:71:cc:ed:7d:41:ba:0c:a4:85:9e:00:
f3:31:b8:91:ce:89:82:12:68:1f:cc:c0:4c:67:d5:c0:2d:e3:
8f:cf:2c:86:8a:ed:d8:a5:2d:7d:5c:bc:cf:61:ed:bc:f0:cc:
2e:f9:bc:15:a2:9d:54:bd:64:05:74:63:38:19:ba:4c:81:3e:
94:9d:8d:c7:fd:ba:76:96:d2:d9:c5:df:81:e0:e2:cd:cc:9e:
b4:93:82:12:aa:64:dd:9f:e4:a8:e6:2f:1d:89:ce:f2:00:33:
5d:f7:ed:8d:c9:a9:3d:ae:37:bb:cf:d2:12:17:02:10:e8:5c:
d6:e6:21:cd:a9:21:8e:bb:81:60:b2:ed:63:6c:e0:64:dd:f7:
c9:2c:63:1d:28:bc:8c:a4:42:81:32:32:c3:a3:50:0c:7c:8b:
b8:40:b4:cd:42:94:7f:c6:9e:30:76:ce:2c:88:a7:04:1e:70:
f1:42:c0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:29 2025 by rpki-client