Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json)
Hash identifier: IK1rmOHjKCGBPaTJg2H+ilaTC083mL58lN4uPrcHxJY=
Subject key identifier: 59:4C:DE:80:11:59:22:87:B1:1C:CD:1A:E3:70:9B:52:1B:49:98:9F
Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Certificate serial: 0194BD85376E6CFEE7ACFDB8802744E61B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
Manifest number: 1024
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: 6LczYu9ryKjTocWYecYUFUv673o.roa (hash: tjb/z4zkMDQBH6/Vrji53BKdyb6GsDIQMh6du73aM0A=)
2: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: EYxU9Slny8uj8ONBf8mWhxEk7FDBdY6/kpa5LPdgYLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:37:6e:6c:fe:e7:ac:fd:b8:80:27:44:e6:1b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=594cde8011592287b11ccd1ae3709b521b49989f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:c4:10:f8:cc:0a:49:b5:17:b8:af:81:d7:
e1:fa:c0:18:18:ac:ce:84:87:c0:1b:c5:c1:68:bb:
7f:42:24:03:ca:ac:0c:63:b9:3b:ec:9d:bb:32:e1:
61:8f:93:04:50:6b:45:c0:3f:f6:c0:59:81:ad:62:
2e:3f:5e:c1:aa:d9:d6:41:04:79:5e:fa:cf:51:0b:
38:af:5d:64:67:8d:c5:12:db:59:5d:47:7d:51:7d:
26:b5:4a:28:96:b7:46:a1:b6:86:33:86:f3:0c:44:
2f:7c:d8:18:cf:8c:f6:64:8d:71:35:7b:cd:d8:7b:
b1:4e:7f:88:62:67:a0:ed:19:2f:97:77:40:8e:5d:
f2:c9:3e:5e:82:d4:2a:de:f7:a3:8d:76:0b:fe:a7:
ad:55:4c:60:03:d2:5a:cb:f9:6f:c1:0d:03:68:ae:
e2:85:d6:a8:bb:b6:b1:c1:33:43:42:38:85:38:2a:
91:e7:d4:84:7c:3f:ab:04:9a:3d:04:e4:2d:45:7f:
f5:52:d2:48:33:71:5a:94:b2:b8:98:3d:6d:c6:81:
30:ee:f0:56:20:14:98:b2:85:58:70:ac:03:b8:33:
29:2e:37:4a:50:91:98:ab:2c:82:27:51:44:22:be:
45:f3:7d:a4:e8:77:f0:9c:1f:ea:80:45:18:f6:da:
e7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4C:DE:80:11:59:22:87:B1:1C:CD:1A:E3:70:9B:52:1B:49:98:9F
X509v3 Authority Key Identifier:
keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:27:06:dd:39:cf:3d:8f:23:a0:1d:f6:e2:d8:a4:79:00:3f:
62:f0:ba:ba:3b:7e:3c:28:1c:a3:95:5a:77:30:f6:06:29:ba:
0e:04:0f:d3:19:5c:99:63:80:4d:e4:fa:8f:f3:4f:27:10:d3:
d1:36:18:e8:f0:b6:0b:6a:94:ce:6c:b5:bc:e4:5e:77:b8:56:
db:1b:9a:21:9e:3e:ff:05:5a:5b:44:61:15:68:4d:a8:81:82:
c4:aa:22:8a:78:b2:c6:05:61:28:f2:35:5c:dd:87:47:30:ad:
62:73:3e:8b:f2:7c:bf:56:3c:5e:d7:bd:c2:49:0c:0d:1d:2d:
1b:6a:73:4a:e1:d2:7a:c5:da:f7:06:64:e0:45:ab:39:a4:c0:
02:cb:70:e7:9d:22:c9:bb:5b:89:3d:b2:08:e3:1e:65:4e:91:
ea:4c:3c:1b:73:86:45:06:70:c5:7e:72:f6:c5:d0:a6:e5:49:
29:2e:42:8a:2f:8f:cc:55:73:86:c3:03:c8:88:42:61:c7:17:
5c:68:99:fe:47:fd:4f:d6:00:da:a3:7a:01:8a:b7:c8:b6:82:
f3:87:bc:73:54:99:a4:fa:7e:df:74:36:ad:12:a9:70:18:cd:
be:60:9d:6a:4c:27:24:96:0c:74:82:76:8c:29:72:cf:3a:08:
c8:06:6d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:51 2025 by rpki-client