Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
File: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft (raw, json)
Hash identifier: IWc/gGGZIIMKt8BCYm+duNbdW6IYW+WrXHdaOtR/dwE=
Subject key identifier: 14:06:03:D7:A2:B7:F5:01:14:5C:E0:2B:D6:7B:ED:4C:6C:D1:09:CB
Authority key identifier: 67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
Certificate issuer: /CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Certificate serial: 0194BC3BF977C4D098BEB66F4A915C4AE0B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl (hash: TV+kg3e2mvAZkn0edBz3qSNaFGiYPes1PdUDRZCfH24=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f9:77:c4:d0:98:be:b6:6f:4a:91:5c:4a:e0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=140603d7a2b7f501145ce02bd67bed4c6cd109cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:11:98:2c:b9:9f:06:8e:c2:b2:f5:94:c8:70:
c5:94:32:1a:c4:35:92:a5:dc:ef:0c:ce:e3:2e:cd:
f8:6e:69:a4:01:ab:a2:9e:38:43:6a:09:01:87:2d:
04:48:3c:46:60:fe:b6:63:8f:df:37:14:53:ef:53:
1a:f0:dd:04:18:3d:5e:64:97:c3:e6:5e:1a:28:c8:
29:77:c3:da:ee:5c:d4:b0:10:a8:aa:d3:bf:c5:68:
8f:74:6d:8c:2b:17:7a:13:91:55:d8:42:52:d5:2c:
36:d8:fe:dc:a2:3c:1b:40:47:5a:e4:40:50:39:5c:
3a:f5:21:87:1a:f4:61:b0:a3:4d:f9:2b:18:39:d7:
33:cb:5d:be:f8:b4:7d:d6:4a:d4:ab:ac:2a:39:1a:
56:45:a3:47:a5:5a:24:ea:cf:41:b0:94:4f:43:55:
5b:c5:20:20:b5:a2:60:45:db:8d:ae:56:31:11:56:
b9:bf:7f:95:d0:69:c8:67:52:6d:e4:b7:8c:f4:d6:
d9:37:6a:fc:1f:e5:42:b8:32:2d:c7:c3:cc:97:51:
5b:bc:98:a6:c7:6d:2f:e5:1a:a7:05:00:d1:6a:93:
a2:f4:5f:d1:ee:70:d0:05:66:00:73:0d:d6:b5:c2:
75:58:08:38:b4:b6:af:a6:88:69:55:0e:1b:45:4c:
12:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:06:03:D7:A2:B7:F5:01:14:5C:E0:2B:D6:7B:ED:4C:6C:D1:09:CB
X509v3 Authority Key Identifier:
keyid:67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e0:c8:70:ce:d2:a9:38:f8:3a:8e:dc:5a:8a:f7:e2:c8:22:
de:ed:31:25:f9:ae:fc:06:a4:2d:21:60:4f:06:cd:2e:db:46:
2b:7b:2f:da:a7:c3:9b:5b:f5:39:5f:13:dd:9c:6d:80:f2:dd:
ed:5c:f6:af:d1:62:87:b7:f3:0c:63:cc:c2:b4:f9:ef:55:ee:
b3:15:db:d7:2f:a5:9f:c8:e9:9a:b4:f9:45:9e:43:d5:c1:ca:
a7:a5:f2:68:e0:09:53:27:e1:bd:a5:dd:14:7c:04:c4:13:90:
cb:5a:21:d5:7f:b6:d6:c6:54:e0:e6:26:60:d2:0e:ef:4a:5d:
59:64:09:76:a3:b9:20:0f:e6:f3:36:e1:66:a9:0f:3e:77:de:
a4:4d:71:4a:42:87:fe:be:19:03:7c:30:46:e9:89:fb:0e:ef:
fb:2b:18:84:b0:54:be:44:dc:02:cc:a9:7c:16:e9:6e:0b:20:
55:16:a6:4c:b0:4e:df:cd:b6:94:cb:5a:4f:0f:6e:8a:a6:72:
2b:79:16:cd:3a:22:2a:b5:39:cc:fb:3e:f4:27:e3:35:3f:2b:
c2:b5:33:f2:e0:f8:f0:e6:87:60:d9:ac:43:4a:d2:2c:ae:23:
c7:44:77:53:21:8c:86:24:b1:24:7d:83:8a:fb:c3:dc:57:05:
d5:60:c0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:27 2025 by rpki-client