Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
File: ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft (raw, json)
Hash identifier: khVHxYyfqOBW7cB8L66NS6MJdH2J1xBczTyOFabMkvQ=
Subject key identifier: 37:EF:A2:7A:89:C0:33:07:CA:B0:55:89:AD:FE:39:86:A8:11:3B:05
Authority key identifier: 64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
Certificate issuer: /CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Certificate serial: 0194BD4EC49813D20AD916B0379658CB2099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: WuLl5WEm72PKP2EjN4PzkOllUEM.roa (hash: l/LlCxiGWXMwDilSjuK8TtyovKGo3UjHdGI+bjDVpFw=)
2: ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl (hash: N8aAqPK5zx3WR+7mT+lUqsNMWU7NCGqZywYr/ndPu0Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c4:98:13:d2:0a:d9:16:b0:37:96:58:cb:20:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=37efa27a89c03307cab05589adfe3986a8113b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1d:05:4e:3b:bb:b7:4c:98:17:07:61:47:49:
e4:8c:a6:0f:6f:a9:e1:0b:53:2d:60:b7:95:ba:fb:
a6:be:d0:88:cf:f5:03:5f:b6:f6:bd:dd:c3:e7:23:
49:12:17:6e:fe:0e:b0:6b:4f:63:69:60:06:5a:93:
f3:a9:a6:2a:be:18:06:3b:25:57:27:77:ae:ba:41:
6e:59:8b:9b:2f:50:72:ba:d6:a2:3b:e6:e0:7a:b2:
7c:9a:72:81:73:b6:12:92:d0:a8:5d:c5:f1:22:3f:
0a:91:42:2c:51:d7:1d:00:0f:50:34:9a:9d:11:24:
60:98:69:50:38:a2:d8:74:90:a1:51:3e:8c:d2:07:
70:13:5b:ea:93:f5:7f:eb:1a:99:e9:f8:03:b2:01:
53:cc:29:ab:c3:50:7f:47:73:a5:b4:49:94:b5:5c:
02:d1:91:f5:d5:48:38:79:ec:14:35:99:3b:b4:b2:
a3:86:fd:b0:81:75:3f:04:22:b9:e6:82:06:ed:06:
03:56:e7:c9:d7:07:08:d8:91:fb:03:aa:bd:79:40:
db:a1:f1:20:76:ad:3f:56:3c:77:37:a6:2d:6f:04:
66:e5:42:fd:33:18:3d:24:00:5c:ec:01:85:dc:6b:
a1:72:b5:12:98:bf:89:01:14:ab:21:3c:e8:63:e9:
c6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EF:A2:7A:89:C0:33:07:CA:B0:55:89:AD:FE:39:86:A8:11:3B:05
X509v3 Authority Key Identifier:
keyid:64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8f:1a:ac:1d:cb:df:8a:1b:64:d3:f3:84:88:33:d9:40:9c:
b7:b6:9d:6f:1f:a4:2c:89:dc:88:da:82:2f:9f:cb:23:bf:bc:
b8:84:22:10:df:cd:2d:e4:48:e9:c8:37:d6:27:63:cf:84:27:
f5:75:c6:99:19:ce:97:c1:6c:ae:08:20:69:dc:9e:d9:53:cd:
6b:fa:f8:43:c1:b2:10:85:69:d0:91:40:f2:0a:33:37:30:62:
38:44:65:e1:9c:ee:e9:a7:f8:fc:c2:e4:db:c2:b8:cd:ad:3e:
7d:cb:bf:48:5b:76:cc:e1:5a:1d:97:0f:40:a6:96:bc:33:eb:
44:e9:91:7e:a2:11:5f:ae:51:92:d7:a8:fc:0b:6b:a6:be:ae:
5c:0f:fe:93:5b:54:9a:88:77:f3:45:b8:24:7a:03:f2:dc:33:
af:29:4f:9e:a1:f8:a9:c6:80:00:e8:67:30:c0:47:81:23:0a:
16:40:d2:aa:e3:3c:84:64:0a:34:e8:87:25:cb:c6:a6:62:fb:
78:ed:8a:c3:13:06:b5:9d:c4:8a:07:64:63:72:a7:c2:38:08:
0c:d6:9a:b2:d8:4e:d8:46:3f:11:3d:05:dd:ef:50:45:c1:8d:
97:a2:00:9b:be:8f:f1:3a:9c:b5:cc:7d:6d:22:5e:6d:dc:79:
e4:d9:9f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:56 2025 by rpki-client